0000000040)='/dev/snd/controlC#\x00', 0x8000, 0x1)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0xc643, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{<r1=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x12})
r2 = getpid()
getpgid(r2)
rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000380)={0x30, 0x3ff, 0xfffc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x418e80, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = accept4(r4, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000240)=0x80, 0x80800)
setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x3, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
write$cgroup_int(r6, &(0x7f0000000340)=0xc87, 0x12)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @null}, [@bcast, @netrom, @bcast, @rose, @null, @netrom, @default, @netrom]}, &(0x7f00000004c0)=0xfffffd40)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000180))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)

00:36:39 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/net\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:39 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081)
socketpair(0x0, 0xa, 0x6, &(0x7f0000000000))

00:36:39 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x4020940d, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:39 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0)
getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x1ff, &(0x7f0000000040)=0x4)

00:36:39 executing program 4:
socketpair(0x1, 0x3, 0xd501, &(0x7f0000000180))

00:36:39 executing program 0:
socketpair(0x2c, 0x3, 0x63000000, &(0x7f0000000180))

00:36:39 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0xa2f2, &(0x7f0000000140)=0x4)
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
sendto$netrom(r1, &(0x7f0000000040)="c2cbf2a546b176e948af00471d5721b6fce8ec96201ca3a8757f413b633233d3fde0", 0x22, 0x4040000, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x1}, [@null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

00:36:39 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x80086601, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:39 executing program 4:
socketpair(0x1, 0x3, 0xd600, &(0x7f0000000180))

00:36:39 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = getpid()
r2 = getpid()
getpgid(r2)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000100)={{0x6, 0x6, 0xffffffc0, 0x9, '\x00', 0x7}, 0x1, 0x100, 0x7, r2, 0xa, 0x8, 'syz0\x00', &(0x7f0000000080)=['\x00', 'ns/cgroup\x00', 'ns/cgroup\x00', 'ns/cgroup\x00', 'ns/cgroup\x00', '@#:\x00', 'ns/cgroup\x00', 'ns/cgroup\x00', '+!/\x00', ']]-\x00'], 0x49, [], [0x3f1, 0x8, 0x8000, 0x1]})
getpgid(r1)
capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0xff, 0x8, 0xd854, 0x0, 0x8, 0x3})

00:36:39 executing program 0:
socketpair(0x2c, 0x3, 0x63010000, &(0x7f0000000180))

00:36:39 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x80087601, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:39 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f0000000040))

00:36:39 executing program 4:
socketpair(0x1, 0x3, 0xd601, &(0x7f0000000180))

00:36:40 executing program 5:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800)
r1 = accept4(r0, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f00000002c0)=0x80, 0x40000)
getpeername$netrom(r1, &(0x7f0000000300)={{0x3, @netrom}, [@null, @bcast, @rose, @null, @remote, @bcast, @rose, @null]}, &(0x7f0000000200)=0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r2 = getpid()
getpgid(r2)
wait4(r2, &(0x7f0000000040), 0x4, &(0x7f0000000080))

00:36:40 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x8001, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x64000000, &(0x7f0000000180))

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:40 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00')

00:36:40 executing program 4:
socketpair(0x1, 0x3, 0xd700, &(0x7f0000000180))

00:36:40 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x202000, 0x0)

00:36:40 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x0)
bind$netrom(r0, 0x0, 0x0)

00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x64010000, &(0x7f0000000180))

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0045878, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:40 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="44020000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fbdbdf250400000008000300030000000800020005000000080004000300000008000300ff030000050006001a0000000500050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
r4 = accept$netrom(r3, &(0x7f0000000380)={{0x3, @bcast}, [@default, @netrom, @netrom, @bcast, @remote, @bcast, @bcast, @default]}, &(0x7f0000000400)=0x48)
accept4(r4, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80, 0x1800)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x100, 0x2, 0x80000000, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x44880}, 0x40080)

00:36:40 executing program 4:
socketpair(0x1, 0x3, 0xd701, &(0x7f0000000180))

00:36:40 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = getpid()
syz_open_procfs$namespace(r0, &(0x7f0000000380)='ns/mnt\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x2403, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x8515d0f4040d43b1, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x8, 0x3)
sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000002f88ef5716d869e4e517c00b7d3b1ed429bd8537ca51b5d1397eb4a6062ac33c4408d917e30fefe136b959c3b061a7169eb2415023750ff382a1276843afaf37225673c883e9a599647dfa6cf8f716f770cebc13c4fe7de9d77aa3ad8e272926ff976da44abb2b074ea16d5c13645039c4d17c729fcf4862f5cdc32aa98e65e4943d1b265046723981f688c7e7d3df4adb2ad3a3ec9527f86a67e4fab3adec2879b6c2da2", @ANYRES16=0x0, @ANYBLOB="000825bd7000ffdbdf25040000000800040006000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x20004488)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x4058534c, &(0x7f0000000300)={0xaf79, 0x5, 0x3, 0x7f, 0x8, 0x532})
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000080)={0x0, 0x2})

00:36:40 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0)
bind$netrom(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={0x7, 0x5, 0x6, 0x701e0390, 'syz0\x00'})

00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x65000000, &(0x7f0000000180))

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0189436, &(0x7f0000000040)={0x0, 0x0, 0x0})

[ 1302.271671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
00:36:40 executing program 4:
socketpair(0x1, 0x3, 0xd800, &(0x7f0000000180))

00:36:40 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
getresgid(&(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100), &(0x7f0000000140))
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r4=>0x0)
getresgid(&(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340), &(0x7f0000000380))
setgroups(0x9, &(0x7f00000003c0)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, r3, 0xffffffffffffffff, r4, r5])

[ 1302.325361] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x65010000, &(0x7f0000000180))

00:36:40 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')
socket(0x0, 0x3, 0x8)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

00:36:40 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0xfffffff9, 0x7, 0x6, 0x1, 0x7ff, 0x7})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000040)={0xfffffffd, 0x6, 0x8})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc020660b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:40 executing program 2:
r0 = socket(0x1f, 0x800, 0xffffffff)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})
bind$netrom(r0, 0x0, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')

00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x66000000, &(0x7f0000000180))

00:36:40 executing program 4:
socketpair(0x1, 0x3, 0xd801, &(0x7f0000000180))

00:36:40 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000000)={{0x0, 0x5, 0xe5, 0x4, 'syz0\x00', 0x1}, 0x0, [0x1511, 0x9, 0x80000001, 0x8001, 0x3c, 0xb357, 0x10000, 0x88, 0x80000000, 0x8, 0x6c1, 0x3387, 0xfffffffffffff442, 0x10000, 0x5a, 0x7fffffff, 0x2, 0xd5b5, 0x8, 0x1, 0x401, 0x4, 0x2, 0x276, 0xfffffffffffeffff, 0x8, 0x1f, 0x3, 0x8, 0x3a0, 0x3, 0x0, 0xb8e4, 0x3, 0x17d14c3d, 0x5, 0x401, 0x4, 0x8000, 0x0, 0x6, 0x800, 0x3, 0xe25, 0xfffffffffffff1ab, 0x6, 0x5, 0x3, 0x1000, 0x3f, 0x1f, 0x1, 0x200000000000000, 0xfff, 0x20, 0x6, 0xdbef, 0x4, 0x6, 0x8003, 0x81, 0x1000, 0x6, 0xd899, 0x7, 0x9, 0x3, 0x7, 0x8, 0x200, 0x59a5, 0x2, 0x9, 0x1, 0x800, 0x1, 0x904e, 0x9, 0xe00a, 0x7, 0x400, 0x3, 0x0, 0x6, 0x6, 0x101, 0xa203, 0x8, 0x101, 0x5, 0x22, 0xc6a, 0x2, 0x100, 0x1, 0x1, 0x40, 0x84, 0x4, 0x9, 0x8001, 0x7, 0x0, 0x1, 0x401, 0x0, 0x100000001, 0x80000001, 0x0, 0x1, 0x2, 0x2, 0x2, 0x7, 0x7, 0x7, 0x8, 0x200, 0x400, 0x1, 0x432c73a2, 0x5, 0x200, 0x3, 0x8, 0x1, 0xfffffffffffff801, 0x4]})

00:36:40 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x29c7, 0xffffffff, 0x1, 'queue1\x00', 0xfffffffb})

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:40 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x0, 0x18, 0x1})
bind$netrom(r0, 0x0, 0x0)

00:36:40 executing program 0:
socketpair(0x2c, 0x3, 0x66010000, &(0x7f0000000180))

00:36:40 executing program 4:
socketpair(0x1, 0x3, 0xd900, &(0x7f0000000180))

00:36:40 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x1000000, 0x0, 0x0})

00:36:41 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xbe3, 0x80)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000080)=0x8001)
r1 = getpid()
r2 = syz_open_procfs$namespace(r1, &(0x7f00000007c0)='ns/ipc\x00')
shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f00000000c0)={0x7, 0x1, {0x2, 0x3, 0x6, 0x1, 0x4d}, 0x400})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_GET_CTX(r3, 0xc0086423, &(0x7f0000000000)={0x0, 0x1})
ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, 0x0)

00:36:41 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/net\x00')
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
ptrace(0x11, 0xffffffffffffffff)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x44080, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r0, 0x89e2)
syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x204200)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
ioctl$NBD_CLEAR_QUE(r3, 0xab05)

00:36:41 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
socketpair(0x2b, 0x800, 0x10000, &(0x7f0000000000))
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x67000000, &(0x7f0000000180))

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xd901, &(0x7f0000000180))

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:41 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
socketpair(0xa, 0x3, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 5:
setrlimit(0x5, &(0x7f0000000040)={0x6, 0x9})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid\x00')

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x67010000, &(0x7f0000000180))

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xda00, &(0x7f0000000180))

00:36:41 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x8c00)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000040)={{0x1}, 'port1\x00', 0x80, 0x22, 0x6, 0x3, 0x90, 0x0, 0xb44, 0x0, 0x0, 0x5})
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x1000000, 0x0})

00:36:41 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000000)={0x3, 0x4e, 0x80000001})
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 5:
getpgid(0xffffffffffffffff)
r0 = getpid()
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00')

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x68000000, &(0x7f0000000180))

00:36:41 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40000, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xda01, &(0x7f0000000180))

00:36:41 executing program 2:
r0 = socket(0xa, 0x6, 0x457)
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
shmctl$SHM_INFO(0x0, 0xe, &(0x7f0000000040)=""/100)

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x68010000, &(0x7f0000000180))

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000000})

00:36:41 executing program 2:
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x6, 0x4)

00:36:41 executing program 1:
r0 = getpid()
getpgid(r0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xdb00, &(0x7f0000000180))

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x69000000, &(0x7f0000000180))

00:36:41 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x78, 0x0, 0x8, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x4051}, 0x8000000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xdb01, &(0x7f0000000180))

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:41 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time_for_children\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:41 executing program 2:
r0 = socket(0x29, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x69010000, &(0x7f0000000180))

00:36:41 executing program 5:
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r0, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x80}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xfc}]}, 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x44010)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00')

00:36:41 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x1000000})

00:36:41 executing program 4:
socketpair(0x1, 0x3, 0xdc00, &(0x7f0000000180))

00:36:41 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x1, 0x5, 0x5, {0xfffffff8, 0x3f}, 0x63ad, 0x101})

00:36:41 executing program 2:
r0 = socket(0x11, 0x6, 0x0)
bind$netrom(r0, 0x0, 0x0)

00:36:41 executing program 0:
socketpair(0x2c, 0x3, 0x6a000000, &(0x7f0000000180))

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xdc01, &(0x7f0000000180))

00:36:42 executing program 3:
r0 = socket(0x29, 0x3, 0x2)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000080)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x50, r2, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0xdc}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000084}, 0x4001)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:42 executing program 5:
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x2)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:42 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0xfffffd03, &(0x7f0000000080)=0x4)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio1\x00', 0x200800, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
getsockname$netrom(r1, &(0x7f00000000c0)={{0x3, @null}, [@rose, @rose, @remote, @remote, @bcast, @remote, @null]}, &(0x7f0000000040)=0x48)
bind$netrom(r0, 0x0, 0x0)

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6a010000, &(0x7f0000000180))

00:36:42 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010100}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_O_TEI={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x3}]}, 0x50}, 0x1, 0x0, 0x0, 0xc0}, 0x80)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000000)=""/160)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/nvram\x00', 0x220200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000400)={0xfffffffc, 0x3, 0x8000})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r4 = getpid()
getpgid(r4)
ptrace(0x4208, r4)

00:36:42 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x5, 0x7, 0x10000, 0x1, 0x8, 0x4})
getuid()
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xdd00, &(0x7f0000000180))

00:36:42 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf25010000000800020001000000080004007f0000010800050064010100080004000000000006000600040000000800020000000000080008000200000008000100", @ANYRES32=0x0, @ANYBLOB="080008f23734c728ccdd9143894dce9b00992900000800e16d97ecbdd108000300000061375b5935458c73b12c3baff4fec9c15104596dc35be14e2ae7028457857868e3dd53c2ccffffff7ff8f8f4bbd3d96e58189513f3ca125c7da561f144a797c2933a4b1d3ad434ac1350ed89c38fecd67d70dd1c08f77ef1323b4d2c0dabf6d1707f497efea01c3f3fc62a3c6cb35fb94c7ac47c4e"], 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8840)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

00:36:42 executing program 2:
r0 = socket(0xb, 0x1, 0x0)
socket(0x25, 0x80000, 0x7)
bind$netrom(r0, 0x0, 0x0)

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6b000000, &(0x7f0000000180))

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xdd01, &(0x7f0000000180))

00:36:42 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x9, 0x7ff, 0x8, 0x101]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfba, 0x336eabc4, 0x0, 0x80]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x3, 0x3}, 'port0\x00', 0x44, 0x68, 0x1, 0x0, 0x5, 0x401, 0x549, 0x0, 0x4, 0x1})
set_tid_address(&(0x7f0000000080))
r3 = getpgid(0x0)
sched_getparam(r3, &(0x7f0000000040))
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000180)={0x80000001, 0x38, 0x4, {0x401, 0xffffffff}, 0x4, 0x7f})
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_LOCK(r4, 0xb)
r6 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xd2200)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000380)={0x3, 0x1c, [0x0, 0x1, 0x0, 0x4, 0x0, 0x7ff, 0x7fff]})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:42 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4$netrom(r0, &(0x7f0000000100)={{0x3, @null}, [@default, @null, @default, @rose, @rose, @rose, @rose, @bcast]}, &(0x7f0000000000)=0x48, 0x800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f0000000080)={{0xfe, 0x20}, 0x1, 0x1, 0x100, {0x7, 0x1}, 0x2, 0x20})

00:36:42 executing program 5:
r0 = getpid()
getpgid(r0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00')

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6b010000, &(0x7f0000000180))

00:36:42 executing program 2:
sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="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", 0x1000, 0x90, &(0x7f0000001000)={{0x3, @bcast, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xde00, &(0x7f0000000180))

00:36:42 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x40000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000080)={0x95, @tick=0x5, 0x20, {0x1, 0x3}, 0x40, 0x1, 0x1})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={0x1, 0x3, 0x0, 0x8, '\x00', 0x200})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

[ 1304.263703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'.
00:36:42 executing program 1:
r0 = getpgid(0xffffffffffffffff)
r1 = syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00')
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000080)={'team0\x00'})

00:36:42 executing program 3:
r0 = socket(0x2b, 0x4, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/uts\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, r1, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_TID={0xc}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_LINK={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x2}, 0x4)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6c000000, &(0x7f0000000180))

00:36:42 executing program 2:
socket(0x11, 0x3, 0x0)
r0 = getpid()
ptrace(0x420f, r0)

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xde01, &(0x7f0000000180))

00:36:42 executing program 5:
r0 = getpid()
r1 = getpgid(r0)
rt_sigqueueinfo(0x0, 0x35, &(0x7f0000000080)={0x800025, 0xfffffffd, 0x1})
socketpair(0x2, 0x3, 0x0, &(0x7f0000000000))
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/net\x00')
ptrace(0x8, r0)
sched_rr_get_interval(r1, &(0x7f0000000040))
sched_getparam(r0, &(0x7f0000000100))

00:36:42 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="28f216d1b3e73c2003eb6d000000", @ANYRES16=0x0, @ANYBLOB="00012bbd7000fcdbdf250000000c0003000300000000000000080009000100000000"], 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x8001)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
getresgid(&(0x7f0000000080), &(0x7f0000000180), &(0x7f00000001c0))
r2 = socket(0xb, 0x1, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r2, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x90, 0x0, 0x301, 0x70bd26, 0x25dfdbfe, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xfffffffe, 0x0, 0xfe6b]}, @SEG6_ATTR_DST={0x14, 0x1, @loopback}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x90}, 0x1, 0x0, 0x0, 0x40}, 0x8080)

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6c010000, &(0x7f0000000180))

00:36:42 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/uts\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x3176c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xdf00, &(0x7f0000000180))

00:36:42 executing program 2:
socket(0x11, 0x3, 0x0)

00:36:42 executing program 3:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
r0 = socket(0x11, 0x5, 0x75)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:42 executing program 0:
socketpair(0x2c, 0x3, 0x6d000000, &(0x7f0000000180))

00:36:42 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r1 = getpid()
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/time\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:42 executing program 4:
socketpair(0x1, 0x3, 0xdf01, &(0x7f0000000180))

00:36:43 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000100)=""/243)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000040)={{0x57, 0x6}, 'port0\x00', 0x10, 0x40, 0x1, 0xb1, 0x6, 0xfff, 0x80, 0x0, 0x3, 0xc0})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000200)={0x0, 0x5, 0x1, 'queue0\x00', 0x7})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:43 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x10000, 0x2, {0x2, 0x2, 0xfffffffc}, 0xae})
bind$netrom(r0, 0x0, 0x0)

00:36:43 executing program 0:
socketpair(0x2c, 0x3, 0x6d010000, &(0x7f0000000180))

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe000, &(0x7f0000000180))

00:36:43 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x42024)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:43 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x10000, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/user\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40, 0x0)
shmctl$SHM_LOCK(0xffffffffffffffff, 0xb)

00:36:43 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x101, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, 0x3, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)=""/9, 0x33, 0x9, 0x1}, 0x20)
prctl$PR_GET_SECCOMP(0x15)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

00:36:43 executing program 2:
r0 = socket(0x21, 0xa, 0x10000)
bind$netrom(r0, 0x0, 0x0)

00:36:43 executing program 0:
socketpair(0x2c, 0x3, 0x6e000000, &(0x7f0000000180))

00:36:43 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000))
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe001, &(0x7f0000000180))

00:36:43 executing program 2:
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)

00:36:43 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000080)={{0x40, 0x3}, {0x73, 0x2}, 0x3, 0x5, 0x80})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x300, 0x0)
waitid$P_PIDFD(0x3, r1, &(0x7f0000000100), 0x80000000, &(0x7f0000000180))

00:36:43 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00')

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe100, &(0x7f0000000180))

00:36:43 executing program 0:
socketpair(0x2c, 0x3, 0x6e010000, &(0x7f0000000180))

00:36:43 executing program 1:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:43 executing program 3:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000300)={0x8602, 0x76, 0xfffd, 0x1f, 0x9, 0x5}, 0xc)
getpeername$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @rose}, [@netrom, @rose, @bcast, @bcast, @remote, @bcast, @rose, @netrom]}, &(0x7f0000000140)=0x48)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="5ce5ff00", @ANYRESOCT=r0, @ANYBLOB="000427bd7000fddbdf25060000000400018008000300080000000800020005000700000003000408000024004180060005004e2300ee73ab8583c3625800060005004e2100000800030064a06121efdc372a7a63d6b8fa56010101380001800500020005000000080006000200000014000400fc00000000000000000000000000000008000300640108020500020081000000080002000300000008000300080000000233a86df5a41b938cec5f590d62556df592eafa55fca8fcd791e47c478535f2cb9ffe89c3da78b7821242ea6224e50c3514689ab07d1047658ae92d5ea202cb7df9c5441735fd58d1a778c363cc6d2bf217877479f8b2a8d46c312255aea4b1167714b449efa72e70eefd9b62bbcec87029e5f69a47b0f9405326c5f8adcab37ea5483d4421f0de4d22971a788c2078ed4a1e26b10e58583458ab93b605ae569692db11771055661d8152d2b6ad6ea2c7543cdb5faff8a675093938221d5a52dff7a5"], 0x9c}, 0x1, 0x0, 0x0, 0x90}, 0xc000)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x82, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000240)=""/163)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x81, @fixed={[], 0x11}, 0x100}, 0xe)
syz_open_dev$sndctrl(&(0x7f0000000340)='/dev/snd/controlC#\x00', 0x7, 0x200040)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x9)

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe101, &(0x7f0000000180))

00:36:43 executing program 0:
socketpair(0x2c, 0x3, 0x6f000000, &(0x7f0000000180))

00:36:43 executing program 5:
r0 = getpgid(0xffffffffffffffff)
ptrace(0x11, r0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00')

00:36:43 executing program 1:
getpid()
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x100000000, 0x200000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f00000000c0)={r2, 0x3})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe200, &(0x7f0000000180))

00:36:43 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil)
r0 = shmget$private(0x0, 0x4000, 0x20, &(0x7f0000ff9000/0x4000)=nil)
shmctl$SHM_STAT_ANY(r0, 0xf, &(0x7f0000000140)=""/178)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000425bd7000ffdbdf25040000000800020000000000082c0002006100000008000200d307000008000200040002"], 0x34}}, 0x811)

00:36:43 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="963635aad798ebc937d62952f70afc0c899f46bf26ef9f80c4df4324b49b0fc16a5131be97b5128070f3163ae34b773c33a217f8dd1b7eaf8d8bd94cdfb7379a7ccc7f", 0x43)

00:36:43 executing program 1:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$NBD_CLEAR_SOCK(0xffffffffffffffff, 0xab04)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001cf38f996b018659c05b501d83a74aabf19e7e03cc1370eb9e768d3149bfd03b1d82076d7f52beb25a1f0300000000000000b140fec5f4da95a404117a115e9d000000008000"/88, @ANYRES16=0x0, @ANYBLOB="080829bd7000fddbdf2501000000"], 0x14}}, 0x80c0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x40000)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x50801)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000140))

00:36:43 executing program 0:
socketpair(0x2c, 0x3, 0x6f010000, &(0x7f0000000180))

00:36:43 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
getsockname$netrom(r0, &(0x7f0000000140)={{0x3, @rose}, [@null, @bcast, @netrom, @null, @bcast, @rose, @remote, @default]}, &(0x7f00000001c0)=0x48)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = accept$netrom(r1, 0x0, &(0x7f00000000c0))
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000040)={{0x0, 0x2}, {0x3f, 0x1}, 0xb2d, 0x1, 0xce})
r4 = socket(0x11, 0x3, 0x0)
bind$netrom(r4, 0x0, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r5, 0x6, 0x2, &(0x7f0000000100)={0x7, "9f3f38"}, 0x6)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000a00)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000002040)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002080)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005c80)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000007180)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f00000071c0)={'team0\x00', <r11=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000007d00)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000007cc0)={&(0x7f0000007200)={0xa84, 0x0, 0x800, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x1a4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x101}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9615}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}, {0x74, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x44, 0x4, [{0x7fff, 0x6a, 0x7, 0x1}, {0x7, 0x6, 0x3, 0x7}, {0xbf76, 0x8, 0x7}, {0x9, 0x4b, 0x3f, 0xffffffff}, {0x7f, 0x0, 0x2, 0x401}, {0x800, 0x4, 0x58, 0x3ff}, {0x200, 0x7, 0x9, 0x10000}, {0x401, 0x9a, 0x6, 0x240000}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0xc4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r6}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfffff197}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xa8d}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x22c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0xe862}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x7, 0x62, 0x8, 0x3ff}, {0x8, 0xee, 0x8}]}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r11}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x3, 0x9, 0x7, 0xc5}, {0x100, 0x3, 0x8d, 0x100}, {0x7, 0x4, 0x0, 0x2}, {0x7, 0x8c, 0x43, 0xffff}, {0x3, 0x4, 0x7f}, {0x80, 0x9, 0x3, 0x2}, {0x5, 0x5, 0x1, 0xe4c}]}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x81}}}]}}]}, 0xa84}, 0x1, 0x0, 0x0, 0x50}, 0x20000010)

00:36:43 executing program 4:
socketpair(0x1, 0x3, 0xe201, &(0x7f0000000180))

00:36:44 executing program 5:
r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @null}, [@remote, @remote, @default, @null, @remote, @remote, @bcast, @null]}, &(0x7f0000000100)=0x48)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x800, 0x70bd29, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x58}}, 0x4040801)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3ff, 0x2, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x4, 0x800)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000240)="46ab9356cd2efe9714e05d30b7b8b574ef33a7c594a357fc58283481a5570dc17133f659009c7e98b9c91a7e50d3fc6af1e8b572833ddbcd3f7bd83b4ec5233fe6b1a2cbd0bf3056c5e3f6259002a3fe360d4523ec386f22dc8fdf01ce50fd349d136d1ef477592f3b6e169103ed1f7cdba9c5dae2f2fcf8c405f3dc1d7e3b10295b9355323de5897dfa3d68cdf72d558fa4fc76b5b2babd701529b29f6fac2ce47616b91f336e1c362a01e46957fda4bc007345c1483400000000", 0xbb, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r2, 0xc01064ac, &(0x7f0000000200)={r3, 0x4c, &(0x7f0000000180)=""/76})

00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x70000000, &(0x7f0000000180))

00:36:44 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000100)={0x0, 0x7b7c, 0x1, 'queue1\x00'})
r1 = socket(0x11, 0xa, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x480180, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f00000000c0)={0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x2, &(0x7f0000000080)=0x4)

00:36:44 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
setrlimit(0xa, &(0x7f0000000000)={0x9, 0x2})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x85740, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00'})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:44 executing program 2:
socket(0x11, 0x3, 0x0)
r0 = getpid()
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x7, 0x3, 0x0, 0xffffffff, 'syz0\x00', 0xee5}, 0x3, 0x7, 0x0, r0, 0x3, 0x400, 'syz1\x00', &(0x7f0000000000)=['\xde)+!(\xf0&-[\x00', '\x00', '\\!\x00'], 0xe, [], [0x6, 0xfffb, 0xbd, 0x1]})

00:36:44 executing program 4:
socketpair(0x1, 0x3, 0xe300, &(0x7f0000000180))

00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x70010000, &(0x7f0000000180))

00:36:44 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000040)={0x7, 0x78342bca, 0x0, 'queue0\x00', 0x4})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/net\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0xa, 0x1, 0x98, 0x4, 'syz0\x00', 0x5})

00:36:44 executing program 1:
r0 = getpid()
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x80, 0x3f}, {0x8, 0xb4}, 0x5, 0x2, 0x7f})
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="f1ff2abd7000fedbdf25020000000c0003000000000000000000080002000100e5ff0800090003000000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x20040800)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xffffffffffffff80)
getpgid(r0)
r2 = shmget$private(0x0, 0x2000, 0x200, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = syz_open_procfs$namespace(r0, &(0x7f00000007c0)='ns/cgroup\x00')
r4 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x40, 0x20000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f00000001c0)={0x7, 0x7, 0x1})
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, 0x0)

00:36:44 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
clock_gettime(0x3, &(0x7f0000000000))

00:36:44 executing program 4:
socketpair(0x1, 0x3, 0xe301, &(0x7f0000000180))

00:36:44 executing program 2:
r0 = socket(0x18, 0x2, 0xffffff9a)
bind$netrom(r0, 0x0, 0x0)

00:36:44 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r0, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)=""/4096, 0x1000}}, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20440d0}, 0x400c890)
syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x6, 0x20100)

00:36:44 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
getpeername$netrom(r0, &(0x7f0000000080)={{0x3, @default}, [@rose, @remote, @null, @netrom, @default, @default, @netrom, @null]}, &(0x7f0000000000)=0x48)

00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x71000000, &(0x7f0000000180))

00:36:44 executing program 4:
socketpair(0x1, 0x3, 0xe400, &(0x7f0000000180))

00:36:44 executing program 2:
r0 = socket(0x3, 0x3, 0x8000)
bind$netrom(r0, 0x0, 0x0)

[ 1306.258084] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x71010000, &(0x7f0000000180))

[ 1306.308593] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
00:36:44 executing program 1:
setsockopt$netrom_NETROM_IDLE(0xffffffffffffffff, 0x103, 0x7, &(0x7f0000000000)=0x7, 0x4)
r0 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001900)={'team0\x00', <r3=>0x0})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00'})
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000180), 0x2)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x6, &(0x7f00000001c0)=[{}, {}, {<r5=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r4, 0x40086424, &(0x7f0000000240)={r5, 0x3})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T1(r6, 0x103, 0x1, &(0x7f0000000140)=0x5, 0x4)
accept4(0xffffffffffffffff, &(0x7f0000001f40)=@can={0x1d, <r7=>0x0}, &(0x7f0000001fc0)=0x80, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002680)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000026c0)={'team0\x00', <r9=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000002cc0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002c80)={&(0x7f0000002700)=ANY=[@ANYBLOB="60050000", @ANYRES16=r0, @ANYBLOB="100025bd7000fcdbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="84000280400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000304000008000600", @ANYRES32=r1, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040045000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="f800028040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000100004006c6f616462616c616e63650040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400060000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c400028038000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000004c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000019000400686173685f746f5f706f72745f6d617070696e67000000003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r2, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="7c00028040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c9e28196c631c926700000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="dc0102803c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400000001010000000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b0000000c000400050006050300000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000800000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000000010038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000500030003000000080004000700000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040004000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000005000300030000000800040007000000"], 0x560}, 0x1, 0x0, 0x0, 0x40000}, 0x20000010)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, 0x0)

00:36:44 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x9, 0x8, [0x4, 0x4]})

00:36:44 executing program 4:
socketpair(0x1, 0x3, 0xe500, &(0x7f0000000180))

00:36:44 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, 0x0, 0x20, 0x70bd26, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x20}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_ALGID={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x8d0}, 0x4800)

00:36:44 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001300)={r0, 0x10, &(0x7f00000001c0)={&(0x7f0000000300)=""/4096, 0x1000}}, 0x10)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20440d0}, 0x400c890)
syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x6, 0x20100)

00:36:44 executing program 3:
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x7, "3d1ca1"}, 0x6)
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000240)={r2, 0xd})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000140)={r2, 0x2})
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/129)

00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x72000000, &(0x7f0000000180))

00:36:44 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="24ff0000", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf2502000000080005000000000008000400ac1e0101"], 0x24}, 0x1, 0x0, 0x0, 0x4001000}, 0x4000800)

00:36:44 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f00000000c0)={0x870, 0xb90, 0x7f, 0x6, 0x40, 0x0, 0xb087}, 0xc)
r1 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)
accept4$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@remote, @rose, @rose, @null, @rose, @rose, @bcast, @netrom]}, &(0x7f0000000080)=0x48, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000280)={&(0x7f0000000100), 0xc, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="c0000000", @ANYRES16=0x0, @ANYBLOB="00012cbd7000fddbdf25060000000800020004000000080002000100000014000180050002005100000005000200000000000c00018008000700", @ANYRES32=r2, @ANYBLOB="ed0002000600000008000300030000001800018014000400000000000000000000001414aa4400018014000400ff0200000000000000000000000000011408000000800000000000000200000002e3ffff07000700"/96, @ANYRES32=0x0, @ANYBLOB="08000300e000000108000200080000000800030007000000"], 0xc0}, 0x1, 0x0, 0x0, 0x8011}, 0x48800)

00:36:44 executing program 4:
socketpair(0x1, 0x3, 0xe501, &(0x7f0000000180))

[ 1306.589676] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
00:36:44 executing program 0:
socketpair(0x2c, 0x3, 0x72010000, &(0x7f0000000180))

00:36:44 executing program 2:
socket(0x11, 0x3, 0x0)
r0 = getpid()
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x7, 0x3, 0x0, 0xffffffff, 'syz0\x00', 0xee5}, 0x3, 0x7, 0x0, r0, 0x3, 0x400, 'syz1\x00', &(0x7f0000000000)=['\xde)+!(\xf0&-[\x00', '\x00', '\\!\x00'], 0xe, [], [0x6, 0xfffb, 0xbd, 0x1]})

00:36:44 executing program 1:
r0 = getpid()
getpgid(r0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/time\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x4aa380, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x44180)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000040)={0x1090, 0x8, 0x10000, 0xffffffe9, 0x0, 0x9})
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)

00:36:44 executing program 3:
r0 = socket(0x11, 0x800, 0x1)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept$netrom(r1, &(0x7f0000000080)={{0x3, @bcast}, [@null, @remote, @remote, @remote, @netrom, @null, @netrom, @bcast]}, &(0x7f0000000100)=0x48)
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x62b)
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_FLUSHABLE(r2, 0x112, 0x8, &(0x7f0000000000)=0xe3, 0x4)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xff)

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x73000000, &(0x7f0000000180))

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe600, &(0x7f0000000180))

00:36:45 executing program 5:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x2000)
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2)

00:36:45 executing program 2:
setsockopt$bt_l2cap_L2CAP_CONNINFO(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)={0x7, "3d1ca1"}, 0x6)
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000240)={r2, 0xd})
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000140)={r2, 0x2})
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000080)=""/129)

00:36:45 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x600, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000080)={0x4, 0x20, 0x1})

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x73010000, &(0x7f0000000180))

00:36:45 executing program 1:
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x9})

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe601, &(0x7f0000000180))

00:36:45 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x280001, 0x0)

00:36:45 executing program 2:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x8, 0x2000)
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000080))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/mnt\x00')
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000000)=0x2)

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe700, &(0x7f0000000180))

00:36:45 executing program 1:
r0 = getpid()
getpgid(r0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00')
r2 = getpgid(r0)
ptrace(0x10, r2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000180)={0x800, 0x1, 0x0, 0x6, &(0x7f0000000140)=[{}]})
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T1(r3, 0x103, 0x1, &(0x7f00000000c0)=0x3, 0x4)
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000100))
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
getsockopt$bt_BT_RCVMTU(r4, 0x112, 0xd, &(0x7f0000000000), &(0x7f0000000080)=0x2)

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x74000000, &(0x7f0000000180))

00:36:45 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x200000, 0x0)

00:36:45 executing program 2:
socketpair(0x1, 0x3, 0xe300, &(0x7f0000000180))

00:36:45 executing program 3:
r0 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000080)={{0x3, @default}, [@remote, @rose, @default, @remote, @remote, @remote, @remote, @rose]}, &(0x7f0000000000)=0x48, 0x80000)
accept4(r0, 0x0, &(0x7f0000000100), 0x0)
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r3, 0x5, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000b00)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000b40)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000037c0)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003800)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000003e00)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000004540)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000004500)={&(0x7f0000003e40)={0x6b8, r3, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [{{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r5}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x451}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x16c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x30}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x7c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4c, 0x4, [{0xa3cc, 0x8, 0x1, 0x1}, {0x401, 0x0, 0xa0, 0x7ff}, {0xec, 0x9d, 0x40, 0x80000001}, {0x7fff, 0x9, 0xc0, 0x5}, {0x1, 0x3, 0x5, 0x91b}, {0x0, 0x4, 0x6, 0xae}, {0x56fc, 0xf4, 0x8a, 0x2}, {0x8, 0x20, 0xd, 0x8000}, {0x7fff, 0x7d, 0x1, 0x6}]}}}]}}, {{0x8, 0x1, r7}, {0x7c, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}]}}, {{0x8, 0x1, r10}, {0x1ac, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xfffffffc}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xf381}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}]}}]}, 0x6b8}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe701, &(0x7f0000000180))

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x74010000, &(0x7f0000000180))

00:36:45 executing program 2:
socketpair(0x1, 0x3, 0xe700, &(0x7f0000000180))

00:36:45 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:36:45 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:45 executing program 5:
getpgid(0x0)
r0 = getpid()
getpgid(r0)
r1 = getpgid(r0)
syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00')

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x75000000, &(0x7f0000000180))

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe800, &(0x7f0000000180))

00:36:45 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0xc0480, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7)
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)
r2 = getpid()
ptrace(0x11, r2)

00:36:45 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x42024)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:45 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000000c0)=0x25, 0x4)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x5, 0x52e82)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x63, 0x2)

00:36:45 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000040)={0x7, 0x2, 0x4, 0x9a2b, 'syz1\x00', 0x1})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="080027bd7000fcdbdf25000000000600060002000000080008000400000006000600030000000c000300040000000000000008000100f3e30265d9117b7476bcd5aff8f0f1e3c57a", @ANYRES32=0x0, @ANYBLOB="080002000100000009000500ac1e5a74c8ce55d7a395eb721f05000000"], 0x50}, 0x1, 0x0, 0x0, 0x20000800}, 0x8800)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/time_for_children\x00')

00:36:45 executing program 4:
socketpair(0x1, 0x3, 0xe801, &(0x7f0000000180))

00:36:45 executing program 0:
socketpair(0x2c, 0x3, 0x75010000, &(0x7f0000000180))

00:36:45 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x2)
r1 = getpid()
sched_getparam(r1, &(0x7f0000000000))
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:45 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00')

00:36:45 executing program 1:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x800, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80400, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x200, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:46 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x8c, r2, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x3f}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x3, 0x9, 0x7ff, 0x8, 0x101]}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x3}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x20}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xfba, 0x336eabc4, 0x0, 0x80]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10}, 0x4000040)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={{0x3, 0x3}, 'port0\x00', 0x44, 0x68, 0x1, 0x0, 0x5, 0x401, 0x549, 0x0, 0x4, 0x1})
set_tid_address(&(0x7f0000000080))
r3 = getpgid(0x0)
sched_getparam(r3, &(0x7f0000000040))
r4 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r5, 0xc05c5340, &(0x7f0000000180)={0x80000001, 0x38, 0x4, {0x401, 0xffffffff}, 0x4, 0x7f})
shmat(r4, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_LOCK(r4, 0xb)
r6 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0xd2200)
ioctl$NBD_CLEAR_SOCK(r6, 0xab04)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r5, 0xc008551b, &(0x7f0000000380)={0x3, 0x1c, [0x0, 0x1, 0x0, 0x4, 0x0, 0x7ff, 0x7fff]})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xe900, &(0x7f0000000180))

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x76000000, &(0x7f0000000180))

00:36:46 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000000)={0x5d0, 0x2, {0x1, 0x2, 0xb1e9, 0x3, 0x7}, 0x8d4})

00:36:46 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/time_for_children\x00')

[ 1307.912580] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
00:36:46 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getuid()
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000100)={0x0, 0x4, 0xb8, 0xff, '\x00', 0x6})
accept4$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xe901, &(0x7f0000000180))

00:36:46 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf25010000000800020001000000080004007f0000010800050064010100080004000000000006000600040000000800020000000000080008000200000008000100", @ANYRES32=0x0, @ANYBLOB="080008f23734c728ccdd9143894dce9b00992900000800e16d97ecbdd108000300000061375b5935458c73b12c3baff4fec9c15104596dc35be14e2ae7028457857868e3dd53c2ccffffff7ff8f8f4bbd3d96e58189513f3ca125c7da561f144a797c2933a4b1d3ad434ac1350ed89c38fecd67d70dd1c08f77ef1323b4d2c0dabf6d1707f497efea01c3f3fc62a3c6cb35fb94c7ac47c4e"], 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8840)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x76010000, &(0x7f0000000180))

00:36:46 executing program 5:
r0 = getpid()
r1 = getpgid(r0)
getpid()
r2 = getpgid(r1)
syz_open_procfs$namespace(r2, &(0x7f0000000040)='ns/uts\x00')

00:36:46 executing program 1:
getpgid(0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
getpid()

00:36:46 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf25010000000800020001000000080004007f0000010800050064010100080004000000000006000600040000000800020000000000080008000200000008000100", @ANYRES32=0x0, @ANYBLOB="080008f23734c728ccdd9143894dce9b00992900000800e16d97ecbdd108000300000061375b5935458c73b12c3baff4fec9c15104596dc35be14e2ae7028457857868e3dd53c2ccffffff7ff8f8f4bbd3d96e58189513f3ca125c7da561f144a797c2933a4b1d3ad434ac1350ed89c38fecd67d70dd1c08f77ef1323b4d2c0dabf6d1707f497efea01c3f3fc62a3c6cb35fb94c7ac47c4e"], 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8840)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

00:36:46 executing program 3:
socket(0x11, 0xa, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4)
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000080)=""/60)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xea00, &(0x7f0000000180))

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x77000000, &(0x7f0000000180))

00:36:46 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/cgroup\x00')
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000080)=0x400)
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4, 0x8000)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000100)=0xffff8001)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000000), 0x2)

00:36:46 executing program 5:
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/4096)
getpgid(0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x101000, 0x0)

00:36:46 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800800}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf25010000000800020001000000080004007f0000010800050064010100080004000000000006000600040000000800020000000000080008000200000008000100", @ANYRES32=0x0, @ANYBLOB="080008f23734c728ccdd9143894dce9b00992900000800e16d97ecbdd108000300000061375b5935458c73b12c3baff4fec9c15104596dc35be14e2ae7028457857868e3dd53c2ccffffff7ff8f8f4bbd3d96e58189513f3ca125c7da561f144a797c2933a4b1d3ad434ac1350ed89c38fecd67d70dd1c08f77ef1323b4d2c0dabf6d1707f497efea01c3f3fc62a3c6cb35fb94c7ac47c4e"], 0x64}, 0x1, 0x0, 0x0, 0x8004}, 0x8840)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xea01, &(0x7f0000000180))

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x77010000, &(0x7f0000000180))

00:36:46 executing program 2:
getpgid(0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/pid_for_children\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
getpid()

00:36:46 executing program 3:
r0 = socket(0x11, 0x0, 0x9)
r1 = getpid()
getpgid(r1)
r2 = getpid()
getpgid(r2)
shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000080)={{0x3, 0x0, 0xee00, 0xffffffffffffffff, 0xffffffffffffffff, 0x10c, 0x1}, 0x5, 0x1, 0x800, 0x9, r1, r2, 0x9217})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$SIOCNRDECOBS(r0, 0x89e2)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
getsockname$netrom(r3, &(0x7f0000000180)={{0x3, @netrom}, [@null, @null, @bcast, @remote, @netrom, @netrom, @bcast, @rose]}, &(0x7f0000000000)=0x48)

00:36:46 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x82, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000080)=0x8)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000000))

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xeb00, &(0x7f0000000180))

00:36:46 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00')

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x78000000, &(0x7f0000000180))

00:36:46 executing program 2:
r0 = getpid()
getpgid(r0)
r1 = syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, 0x0)

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xeb01, &(0x7f0000000180))

00:36:46 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000080)={0xfffd, 0x3, 0x1, 'queue1\x00', 0x3f})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:46 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x20008090)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0xa, 0x14, 0x1})

00:36:46 executing program 5:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001040)={0x1, 0x1000, &(0x7f0000000040)=""/4096})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x78010000, &(0x7f0000000180))

00:36:46 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
socketpair(0xa, 0x3, 0x3, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4)
bind$netrom(r0, 0x0, 0x0)

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xec00, &(0x7f0000000180))

00:36:46 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
shmctl$IPC_STAT(0x0, 0x2, &(0x7f0000000040)=""/65)
r0 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@nfc, &(0x7f00000001c0)=0x80, 0x80800)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000200)=0x1, 0x4)
r1 = getpid()
getpgid(r1)
capget(&(0x7f00000000c0)={0xf1504, r1}, &(0x7f0000000100)={0x9, 0x80000001, 0x8, 0xe21, 0x0, 0x3})

00:36:46 executing program 1:
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0xff, 0xc0, 0x80, @tick=0x3, {0x9d, 0x1}, {0x8, 0xff}, @raw8={"1cf6868fad4e243ef9c7c109"}}, {0x42, 0x9, 0x40, 0x4d, @tick=0x730, {0x69, 0x5}, {0xa1, 0x1}, @quote={{}, 0x9}}], 0x38)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:46 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000080)={{0x8, 0x9}, 'port0\x00', 0xc0, 0x10, 0x6, 0x7f, 0x7f, 0xca37, 0x20, 0x0, 0x2, 0x9})
r0 = socket(0x1f, 0x10000f, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
shmat(r1, &(0x7f0000ffe000/0x2000)=nil, 0x1000)
r2 = shmget$private(0x0, 0x4000, 0x80, &(0x7f0000ff9000/0x4000)=nil)
getpid()
shmctl$IPC_RMID(r2, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r3, 0xc0605345, &(0x7f0000000140)={0x1ff, 0x0, {0x2, 0x0, 0xc0000000, 0x1, 0xffffff01}, 0x17})

00:36:46 executing program 0:
socketpair(0x2c, 0x3, 0x79000000, &(0x7f0000000180))

00:36:46 executing program 4:
socketpair(0x1, 0x3, 0xec01, &(0x7f0000000180))

00:36:46 executing program 2:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000001040)={0x1, 0x1000, &(0x7f0000000040)=""/4096})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:47 executing program 1:
r0 = getpid()
r1 = getpgid(r0)
getpgid(r0)
getpgid(r0)
r2 = syz_open_procfs$namespace(r1, &(0x7f0000000000)='ns/cgroup\x00')
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x102, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000080)={0x5, 0x7fff, 0x0, 'queue1\x00', 0x22})
ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r4, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x8c, 0x0, 0x300, 0x70bd27, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x5, 0xeb, 0xffffff81, 0x7, 0x99]}, @SEG6_ATTR_SECRET={0x14, 0x4, [0xff, 0xa5f2, 0x7fff, 0x8]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7f}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0xcc10}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xc1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x401}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000045}, 0x40c4)
r5 = getpid()
getpgid(r5)
capget(&(0x7f00000002c0)={0x19980330, r5}, &(0x7f0000000300)={0x4, 0xff, 0x6, 0xffffffff, 0x1, 0x19})

00:36:47 executing program 5:
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0xc4}, 0x4090)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0xb9a1, 0x402c00)
r1 = accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000740))
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000780)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x0, 'syz1\x00', @default, 0xffff, 0x1, [@default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null, @default, @default]})
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x0, 0x1, 0x3f, 0x7, '\x00', 0x8}, 0x6, 0x3, 0x101, 0xffffffffffffffff, 0x4, 0x2, 'syz1\x00', &(0x7f0000000180)=['ns/mnt\x00', '\x00', ']\x00', '\x00'], 0xb, [], [0x8, 0x800, 0x1ff, 0x9]})

00:36:47 executing program 3:
socket(0x11, 0xa, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x600, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000200)={0x2, 0x3a})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vcsa\x00', 0x82400, 0x0)
getsockname$netrom(r3, &(0x7f0000000280)={{0x3, @null}, [@bcast, @default, @default, @default, @default]}, &(0x7f0000000300)=0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x7c, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffff}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x7}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x80000000, 0x52d]}, @SEG6_ATTR_SECRET={0x10, 0x4, [0xc08b, 0x0, 0xff]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x5}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000004}, 0xc00c010)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000040)={0xfffffe2b, 0x0, 0x0})

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x79010000, &(0x7f0000000180))

00:36:47 executing program 1:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000140)={0x2, &(0x7f0000000100)=[{0xd0, 0x2, 0x2, 0x4}, {0x2, 0x9, 0x6, 0xfffffe0e}]})
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = getpid()
times(&(0x7f0000000180))
getpgid(r1)
ptrace(0x10, r1)
r2 = getpid()
getpgid(r2)
ptrace(0x8, r2)
shmctl$SHM_STAT(0xffffffffffffffff, 0xd, &(0x7f0000000040)=""/144)

00:36:47 executing program 2:
write$sndseq(0xffffffffffffffff, &(0x7f0000000000)=[{0x0, 0xff, 0xc0, 0x80, @tick=0x3, {0x9d, 0x1}, {0x8, 0xff}, @raw8={"1cf6868fad4e243ef9c7c109"}}, {0x42, 0x9, 0x40, 0x4d, @tick=0x730, {0x69, 0x5}, {0xa1, 0x1}, @quote={{}, 0x9}}], 0x38)
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xed00, &(0x7f0000000180))

00:36:47 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7a000000, &(0x7f0000000180))

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xed01, &(0x7f0000000180))

00:36:47 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
socket(0x2b, 0x0, 0xa10d)

00:36:47 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
getresgid(&(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040), &(0x7f0000000080))
getresgid(&(0x7f00000000c0)=<r2=>0x0, &(0x7f0000000100), &(0x7f0000000140))
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)=<r3=>0x0)
getresgid(&(0x7f0000000240), &(0x7f0000000280), &(0x7f00000002c0)=<r4=>0x0)
getresgid(&(0x7f0000000300)=<r5=>0x0, &(0x7f0000000340), &(0x7f0000000380))
setgroups(0x9, &(0x7f00000003c0)=[r1, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x0, r3, 0xffffffffffffffff, r4, r5])

00:36:47 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x282800, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000040)={0x6, 0xffff})

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7a010000, &(0x7f0000000180))

00:36:47 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000001400)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=""/76, 0x79, 0x4c}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000011c0)={r0, 0x10, &(0x7f0000001180)={&(0x7f0000000180)=""/4096, 0x1000}}, 0x10)

00:36:47 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0a85322, &(0x7f0000000000)={{0x20}})
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')

00:36:47 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')

00:36:47 executing program 3:
r0 = socket(0x0, 0x6, 0xffffffff)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xee00, &(0x7f0000000180))

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7b000000, &(0x7f0000000180))

00:36:47 executing program 5:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')

00:36:47 executing program 1:
openat$pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self\x00', 0x240, 0x0)
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000000)={0xff, 0x80000000, 0x0, 'queue0\x00', 0x1})

00:36:47 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r3, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000300)={&(0x7f0000000180)=ANY=[@ANYBLOB="44020000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fbdbdf250400000008000300030000000800020005000000080004000300000008000300ff030000050006001a0000000500050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4004004)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
r4 = accept$netrom(r3, &(0x7f0000000380)={{0x3, @bcast}, [@default, @netrom, @netrom, @bcast, @remote, @bcast, @bcast, @default]}, &(0x7f0000000400)=0x48)
accept4(r4, &(0x7f0000000440)=@xdp, &(0x7f00000004c0)=0x80, 0x1800)
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x64, r2, 0x2, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x2}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x6, 0x100, 0x2, 0x80000000, 0x1]}, @SEG6_ATTR_DST={0x14, 0x1, @private1}, @SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x44880}, 0x40080)

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xee01, &(0x7f0000000180))

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7b010000, &(0x7f0000000180))

00:36:47 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:47 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x2, &(0x7f0000000040)=[{<r1=>0x0}, {}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000100)={r1, &(0x7f00000000c0)=""/57})
r2 = getpid()
syz_open_procfs$namespace(r2, &(0x7f0000000000)='ns/ipc\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r3, 0xc008551a, &(0x7f0000000140)={0x3, 0x14, [0x71c0, 0x4399, 0x7, 0x0, 0x3ff]})
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x2, &(0x7f00000001c0)={0x7, &(0x7f0000000180)=[{0x1000, 0x0, 0x8}, {0x100, 0x1, 0x24, 0x1}, {0x7, 0x6, 0x2}, {0x7, 0x81, 0x7a, 0x5}, {0x5, 0xa0, 0x40}, {0x1f, 0x8, 0x9, 0x800}, {0x6, 0x5, 0x19, 0xffff}]})

00:36:47 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000)

[ 1309.391142] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7c000000, &(0x7f0000000180))

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xef00, &(0x7f0000000180))

00:36:47 executing program 3:
r0 = socket(0x11, 0x2, 0x10)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:47 executing program 2:
r0 = accept4(0xffffffffffffffff, 0x0, &(0x7f0000000140), 0x80800)
r1 = accept4(r0, &(0x7f0000000240)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @empty}}, &(0x7f00000002c0)=0x80, 0x40000)
getpeername$netrom(r1, &(0x7f0000000300)={{0x3, @netrom}, [@null, @bcast, @rose, @null, @remote, @bcast, @rose, @null]}, &(0x7f0000000200)=0x48)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r2 = getpid()
getpgid(r2)
wait4(r2, &(0x7f0000000040), 0x4, &(0x7f0000000080))

00:36:47 executing program 5:
r0 = getpid()
getpgid(r0)
syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/uts\x00')

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xef01, &(0x7f0000000180))

00:36:47 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x48, 0x0, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004011}, 0x8000)

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7c010000, &(0x7f0000000180))

00:36:47 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x400c000)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000))
socket(0x11, 0xa, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:47 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081)
socketpair(0x0, 0xa, 0x6, &(0x7f0000000000))

00:36:47 executing program 5:
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00'})
setrlimit(0xc, &(0x7f0000000040)={0xfffffffffffffffa})
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00')
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x3)
r0 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0xc5f8, 0x210000)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f00000000c0)={0x0, 0x1})
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{<r1=>0x0}]})
ioctl$DRM_IOCTL_RM_CTX(r0, 0xc0086421, &(0x7f00000001c0)={r1, 0x3})
shmat(0x0, &(0x7f0000ffc000/0x4000)=nil, 0x0)

00:36:47 executing program 4:
socketpair(0x1, 0x3, 0xf000, &(0x7f0000000180))

00:36:47 executing program 1:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081)
socketpair(0x0, 0xa, 0x6, &(0x7f0000000000))

00:36:47 executing program 0:
socketpair(0x2c, 0x3, 0x7d000000, &(0x7f0000000180))

00:36:48 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x1000)
recvmsg(r0, &(0x7f0000001400)={&(0x7f0000001280)=@ll={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001380)=[{&(0x7f0000001300)=""/114, 0x72}, {&(0x7f0000001180)=""/53, 0x35}], 0x2, &(0x7f00000013c0)}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000001500)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000014c0)={&(0x7f0000001440)={0x70, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7d13}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x70}, 0x1, 0x0, 0x0, 0x24000000}, 0x4)
recvmsg(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f00000010c0)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1, &(0x7f0000001200)=""/126, 0x7e}, 0x10102)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000001100)={0x9, 0x4, 0x4, 0xd3, 0x0, 0x8, 0x40}, 0xc)

00:36:48 executing program 5:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x0, 0x0)
write$sndseq(r0, &(0x7f0000000080)=[{0x80, 0x3, 0x2, 0x0, @tick=0x6, {0xdc, 0x1}, {0x40, 0xff}, @note={0x7, 0x40, 0x3, 0x6, 0x80000001}}, {0xf8, 0x2, 0xfc, 0xf8, @tick=0x9, {0x80, 0x4}, {0x2f, 0x9}, @raw8={"3d83adae263a31beb3c2a64c"}}, {0x2, 0x81, 0x20, 0x5, @time={0x6, 0x8001}, {0x1}, {0x1, 0x3}, @control={0x9, 0xfff, 0x1}}, {0x5, 0xf2, 0x6, 0x1, @time={0x80, 0x785}, {0x7f, 0x47}, {0x2, 0xbf}, @addr={0x8, 0x1}}, {0x3, 0x0, 0x33, 0x3, @time={0x2}, {0x8, 0x8}, {0x20, 0x6}, @time=@tick=0x257}, {0x3, 0x8d, 0x0, 0x6, @tick=0x5, {0x3, 0x4}, {0x3, 0x9}, @addr={0x4, 0xff}}], 0xa8)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x8000, 0x20, 0x1, 'queue1\x00', 0x4})

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf001, &(0x7f0000000180))

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x7d010000, &(0x7f0000000180))

00:36:48 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x7c, r1, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x400c081)
socketpair(0x0, 0xa, 0x6, &(0x7f0000000000))

00:36:48 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f00000000c0)='gtp\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0})
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_LINK={0x8, 0x1, r3}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_VERSION={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_LINK={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40010}, 0x400c000)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000000))
socket(0x11, 0xa, 0x0)
r4 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x4000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r4, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:48 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x410980, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000140))
r1 = socket(0x11, 0xa, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000200))
ioctl$ASHMEM_PURGE_ALL_CACHES(r3, 0x770a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x3, &(0x7f00000000c0)=0x4)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r5 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x0, 0x0)
getpid()
ioctl$DRM_IOCTL_NEW_CTX(r5, 0x40086425, &(0x7f00000000c0))
socketpair(0x10, 0x1, 0x6, &(0x7f0000000000))

00:36:48 executing program 5:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00')
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380), 0x2)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80, 0x800)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), 0x4)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/180)

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x7e000000, &(0x7f0000000180))

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf100, &(0x7f0000000180))

00:36:48 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8000, 0x1)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0xc643, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{<r1=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x12})
r2 = getpid()
getpgid(r2)
rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000380)={0x30, 0x3ff, 0xfffc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x418e80, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = accept4(r4, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000240)=0x80, 0x80800)
setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x3, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
write$cgroup_int(r6, &(0x7f0000000340)=0xc87, 0x12)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @null}, [@bcast, @netrom, @bcast, @rose, @null, @netrom, @default, @netrom]}, &(0x7f00000004c0)=0xfffffd40)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000180))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)

00:36:48 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = accept4$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x40800)
getpeername$netrom(r1, &(0x7f0000000080)={{}, [@null, @default, @default, @default, @remote, @null, @default, @default]}, &(0x7f0000000100)=0x48)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$VFIO_CHECK_EXTENSION(0xffffffffffffffff, 0x3b65, 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f0000000140)={0x1f, 0x400, @any, 0x0, 0x1}, 0xe)

00:36:48 executing program 1:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r1, 0x5, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002d80)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000030c0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000045c0)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004600)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000004640)={'team0\x00', <r6=>0x0})
recvmsg(0xffffffffffffffff, &(0x7f0000008840)={&(0x7f0000006380)=@can={0x1d, <r7=>0x0}, 0x80, &(0x7f00000077c0)=[{&(0x7f0000006400)=""/138, 0x8a}, {&(0x7f00000064c0)=""/104, 0x68}, {&(0x7f0000006540)=""/211, 0xd3}, {&(0x7f0000006640)=""/21, 0x15}, {&(0x7f0000006680)=""/4096, 0x1000}, {&(0x7f0000007680)=""/87, 0x57}, {&(0x7f0000007700)=""/178, 0xb2}], 0x7, &(0x7f0000007840)=""/4096, 0x1000}, 0x2141)
accept4(0xffffffffffffffff, &(0x7f0000008880)=@ll={0x11, 0x0, <r8=>0x0}, &(0x7f0000008900)=0x80, 0x800)
recvmsg(0xffffffffffffffff, &(0x7f0000009f80)={&(0x7f0000009dc0)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000009e80)=[{&(0x7f0000009e40)=""/64, 0x40}], 0x1, &(0x7f0000009ec0)=""/131, 0x83}, 0x40000000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009fc0)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f000000a7c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f000000a780)={&(0x7f000000a000)={0x780, r1, 0x400, 0x70bd29, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x1577}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x1d0, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x96}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x4c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x6, 0x18, 0x0, 0x2}, {0x3, 0x1, 0x5, 0xfff}, {0x0, 0x6, 0x8, 0x1000}, {0x1, 0x0, 0x8, 0x8}]}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8, 0x4, r5}}}]}}, {{0x8, 0x1, r6}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x184, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xdd2c}}, {0x8}}}, {0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0xd50, 0x3, 0xea, 0xffffffff}, {0x200, 0x40, 0x8, 0x30}, {0x9, 0x0, 0x25, 0x9}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r9}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r10}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x69e}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}]}, 0x780}}, 0x10004000)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x7e010000, &(0x7f0000000180))

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf101, &(0x7f0000000180))

00:36:48 executing program 2:
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x8000, 0x1)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0xc643, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{<r1=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r1, 0x12})
r2 = getpid()
getpgid(r2)
rt_sigqueueinfo(0x0, 0x18, &(0x7f0000000380)={0x30, 0x3ff, 0xfffc})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcsa\x00', 0x418e80, 0x0)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = accept4(r4, &(0x7f00000001c0)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000240)=0x80, 0x80800)
setsockopt$bt_BT_SNDMTU(r5, 0x112, 0xc, &(0x7f0000000080)=0x3, 0x2)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
write$cgroup_int(r6, &(0x7f0000000340)=0xc87, 0x12)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r7 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x100, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f0000000500)={{0x3, @null}, [@bcast, @netrom, @bcast, @rose, @null, @netrom, @default, @netrom]}, &(0x7f00000004c0)=0xfffffd40)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r7, 0x800455d1, &(0x7f0000000180))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz0\x00', 0x200002, 0x0)

00:36:48 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'team0\x00'})
times(&(0x7f0000000000))
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000000c0)=0x2, 0x4)

00:36:48 executing program 1:
socketpair(0x1, 0x800, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="040024bd7000fcdbdf25040000003c00018008000700", @ANYRES32=0x0, @ANYBLOB="0800073480db9b521500dd528644043146f0505ed5f596b51df5569eaf24fa99e62ba5827a8c86bfda50d3016d6efab526e9b30770ee5e060e385e97d3e44c175c9d9db6ff65c0a491e9c783555610df0a79aed351f04a4636dac5df4b9741bf8c9304b5bb04385f2dfe8a8f0f1af05fe5c89f8b14ebf4cf8d4ee176920768043f5529e633c7044566fc1391664a9911892dbb31f67456fc68e142b379ec", @ANYRES32=0x0, @ANYBLOB="0800060001000000060005004e240000080003000a01010108000300ac1e010108000300e0000001"], 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x48000)
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f00000001c0))
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000100)=0x3f, &(0x7f0000000200)=0x4)
socket(0x11, 0x3, 0x0)
openat$ashmem(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ashmem\x00', 0x0, 0x0)

00:36:48 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801122}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800)

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x7f000000, &(0x7f0000000180))

00:36:48 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x4, 0x3e})
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)

00:36:48 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00')
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380), 0x2)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80, 0x800)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), 0x4)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/180)

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf200, &(0x7f0000000180))

00:36:48 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/ipc\x00')

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x7f010000, &(0x7f0000000180))

00:36:48 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801122}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800)

00:36:48 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200800, 0x0)
socketpair(0x1, 0x6be0b9cab5439738, 0x10001, &(0x7f0000000340))
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000003c0)='SEG6\x00')
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000500)='/dev/nvram\x00', 0x80000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000540)={0x1, 0x1, 0x7fffffff, 0x8, [], [], [], 0x1, 0xffff0001, 0x31, 0x52b0a79c, "bdd36822d414873dbf08111b15b06a1b"})
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r2, 0x200, 0x70bd28, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x6800}, 0xc000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000080)={0xfaa, 0x5, 0x1})
r4 = accept4$netrom(r1, 0x0, &(0x7f00000001c0), 0x800)
bind$netrom(r4, &(0x7f0000000200)={{0x3, @default, 0x4}, [@bcast, @null, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x48)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x600000, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r5, 0xc008551a, &(0x7f0000000300)={0x7, 0x24, [0x1, 0xce5, 0x6, 0x7, 0xd, 0x0, 0x4, 0x1, 0x3ff]})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
setsockopt$bt_BT_VOICE(r6, 0x112, 0xb, &(0x7f00000004c0)=0x1, 0x2)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000280)=0x7, 0x2)

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf201, &(0x7f0000000180))

00:36:48 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801122}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800)

00:36:48 executing program 5:
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f0000000040)=""/85)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:48 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801122}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800)

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x80010000, &(0x7f0000000180))

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf300, &(0x7f0000000180))

00:36:48 executing program 2:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000280)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000100)='ns/time\x00')
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000380), 0x2)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000140)=@tipc, &(0x7f00000001c0)=0x80, 0x800)
setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000200), 0x4)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_STAT(r2, 0x2, &(0x7f0000000040)=""/180)

00:36:48 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8001)
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:48 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x40086602, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:48 executing program 0:
socketpair(0x2c, 0x3, 0x80040000, &(0x7f0000000180))

00:36:48 executing program 4:
socketpair(0x1, 0x3, 0xf301, &(0x7f0000000180))

00:36:48 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00', <r0=>0x0})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r2 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x801122}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x64, 0x0, 0x1, 0x70bd27, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x40}, 0x800)

00:36:49 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x4802, 0x0)
r2 = accept$netrom(r0, &(0x7f0000000100)={{0x3, @null}, [@bcast, @netrom, @rose, @null, @bcast, @default, @remote, @netrom]}, &(0x7f0000000040)=0x48)
recvmsg(r2, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000180)=""/149, 0x95}, {&(0x7f0000000240)=""/144, 0x90}, {&(0x7f0000000300)=""/23, 0x17}, {&(0x7f0000000340)=""/51, 0x33}, {&(0x7f0000000380)=""/90, 0x5a}, {&(0x7f0000000400)=""/87, 0x57}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, &(0x7f0000001500)=""/255, 0xff}, 0x3)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000001640)='/dev/dsp1\x00', 0x200000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000080)={0x8b, 0x0, 0x0})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000000c0)={0xa, 0x0, 0x200, 0x80000001, 'syz0\x00', 0x1})
socket$nl_generic(0x10, 0x3, 0x10)

00:36:49 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x8001)
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x81000000, &(0x7f0000000180))

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
r1 = syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)
ioctl$NBD_CLEAR_QUE(r1, 0xab05)

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf400, &(0x7f0000000180))

00:36:49 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x81010000, &(0x7f0000000180))

00:36:49 executing program 5:
r0 = socket(0x2, 0x80000, 0xfff)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{}, {<r2=>0x0}]})
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000340)={&(0x7f0000000300)="ae70c63e58ae8e8e5585ec7f64365fd1a4a6a4244006f2521bb05a97ec1432f6f8c4e63f144247e71975297d02e1f5", 0x2f, <r3=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000440)={r3, 0xc0, &(0x7f0000000380)=""/192})
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r4, 0x40505330, &(0x7f00000004c0)={{0x2, 0x5}, {0x6}, 0x9, 0x5, 0x5})
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{0x10001, 0x4, 0x2, 0x0, '\x00', 0xfffff216}, 0x6, 0x2, 0x591b, 0x0, 0x5, 0x7fffffff, 'syz1\x00', &(0x7f0000000180)=['\xa4\x00', '*.e\x00', '/dev/vcsa\x00', '\x88\x00', '/dev/vcsa\x00'], 0x1c, [], [0x4, 0x7fff, 0x400, 0x4]})
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000100)={0x8, &(0x7f0000000080)=[{}, {<r7=>0x0}, {}, {}, {}, {}, {}, {}]})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r5, 0x40505331, &(0x7f0000000540)={{0xb0, 0x5b}, {0x1, 0x81}, 0xffffffff, 0x3, 0x3f})
ioctl$DRM_IOCTL_SWITCH_CTX(r6, 0x40086424, &(0x7f0000000140)={r7, 0x2})
bind$netrom(r0, 0x0, 0x0)

00:36:49 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0xded8, 0x4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000080)={0xc0000000, 0x1, 'client0\x00', 0xffffffff80000005, "92e6d1d085eb136a", "326e8f7e8cf08978ac750fb2ff32660623d68a4a0b4c98e38eb0da430a5dbd3a", 0x5, 0xbdef})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f00000000c0)={0x34, 0x0, &(0x7f0000000080)})
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf401, &(0x7f0000000180))

00:36:49 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x8)

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf500, &(0x7f0000000180))

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x82000000, &(0x7f0000000180))

00:36:49 executing program 3:
r0 = socket(0x11, 0x6, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
getuid()
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x98, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x40040}, 0x84)

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00'})
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x1)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:49 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x14100, 0x0)
r1 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000000c0)={{0xa, 0x4, 0xffffffc9, 0xf65}, 0x1, 0x3, 0x5, r1, 0x8, 0x1, 'syz0\x00', &(0x7f0000000080)=['ns/mnt\x00', 'ns/mnt\x00', '\x00', ']\x00', '\x00', ']\x00', 'ns/mnt\x00', 'ns/mnt\x00'], 0x22, [], [0x1, 0x0, 0x4]})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x82010000, &(0x7f0000000180))

00:36:49 executing program 3:
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0)
r0 = socket(0x11, 0xa, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1, &(0x7f0000000100))
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf501, &(0x7f0000000180))

00:36:49 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00'})
socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:49 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf600, &(0x7f0000000180))

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'team0\x00'})
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:49 executing program 3:
r0 = getpid()
sched_rr_get_interval(r0, &(0x7f0000000000))
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x83000000, &(0x7f0000000180))

00:36:49 executing program 1:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:49 executing program 4:
socketpair(0x1, 0x3, 0xf601, &(0x7f0000000180))

00:36:49 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 3:
socket(0x11, 0xa, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400000, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x121000, 0x0)
ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x6)
syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x40000)
getpid()

00:36:49 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:49 executing program 0:
socketpair(0x2c, 0x3, 0x83010000, &(0x7f0000000180))

00:36:50 executing program 1:
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:50 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf700, &(0x7f0000000180))

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x84000000, &(0x7f0000000180))

00:36:50 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 3:
r0 = socket(0x2a, 0x5, 0x1)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 1:
syz_open_dev$ndb(0x0, 0x0, 0x18d803)

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf701, &(0x7f0000000180))

00:36:50 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x84010000, &(0x7f0000000180))

00:36:50 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 1:
syz_open_dev$ndb(0x0, 0x0, 0x18d803)

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf800, &(0x7f0000000180))

00:36:50 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r1, 0x89e2)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000080)={0x1, 0x3, {0xffffffffffffffff, 0x1, 0xfffffffe, 0x2, 0x7}, 0x25})
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x85000000, &(0x7f0000000180))

00:36:50 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 1:
syz_open_dev$ndb(0x0, 0x0, 0x18d803)

00:36:50 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f0000000000)={0x0, 0x3})

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x85010000, &(0x7f0000000180))

00:36:50 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf801, &(0x7f0000000180))

00:36:50 executing program 1:
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)

00:36:50 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf900, &(0x7f0000000180))

00:36:50 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x206901)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000140)={0x3a, 0x2, 0x1, 'queue1\x00', 0x1ff})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000080)={{0x0, 0x81}, 'port0\x00', 0x0, 0x20000, 0x5, 0x7, 0x4, 0x400, 0x4, 0x0, 0x7, 0x3})

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x86000000, &(0x7f0000000180))

00:36:50 executing program 1:
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)

00:36:50 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xf901, &(0x7f0000000180))

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x86010000, &(0x7f0000000180))

00:36:50 executing program 3:
r0 = socket(0xb, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x14100)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r2, 0xc08c5334, &(0x7f00000003c0)={0xffffffff, 0x5, 0x1, 'queue1\x00', 0x9aec})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYRES16=0x0, @ANYRES16=r1, @ANYRES32=r0, @ANYRESDEC, @ANYRESOCT=r1, @ANYRESDEC, @ANYRESHEX=r0], &(0x7f00000002c0)=""/213, 0x35, 0xd5, 0x1}, 0x20)
getresgid(&(0x7f0000000000), &(0x7f00000001c0), &(0x7f0000000200))
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000240), 0x8, 0x0)

00:36:50 executing program 1:
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x0)

00:36:50 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 4:
socketpair(0x1, 0x3, 0xfa00, &(0x7f0000000180))

00:36:50 executing program 0:
socketpair(0x2c, 0x3, 0x87000000, &(0x7f0000000180))

00:36:50 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:50 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000080)={{0x80, 0xa6}, {0xe9, 0x8}, 0x2, 0x4, 0x5})

00:36:51 executing program 1:
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x18d803)

00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfa01, &(0x7f0000000180))

00:36:51 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 0:
socketpair(0x2c, 0x3, 0x87010000, &(0x7f0000000180))

00:36:51 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 3:
r0 = socket(0x29, 0x3, 0x8)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20902, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)

00:36:51 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfb00, &(0x7f0000000180))

00:36:51 executing program 0:
socketpair(0x2c, 0x3, 0x88000000, &(0x7f0000000180))

00:36:51 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89b1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x80, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000080))

00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfb01, &(0x7f0000000180))

00:36:51 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 0:
socketpair(0x2c, 0x3, 0x88010000, &(0x7f0000000180))

00:36:51 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, 0x0)

00:36:51 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, 0x0)

00:36:51 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 3:
socket(0x32, 0x3, 0x456)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfc00, &(0x7f0000000180))

00:36:51 executing program 0:
socketpair(0x2c, 0x3, 0x89000000, &(0x7f0000000180))

00:36:51 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, 0x0)

[ 1313.303929] audit: type=1326 audit(1603154211.510:390): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=16269 comm="syz-executor.3" exe="/root/syz-executor.3" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfc01, &(0x7f0000000180))

00:36:51 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:51 executing program 0:
socketpair(0x2c, 0x3, 0x89010000, &(0x7f0000000180))

00:36:51 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89b1, 0x0)

00:36:51 executing program 4:
socketpair(0x1, 0x3, 0xfd00, &(0x7f0000000180))

00:36:51 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 3:
r0 = socket(0xb, 0x3, 0x40000008)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x80000001, 0x36})

00:36:52 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 2:
r0 = socket(0x2b, 0x6, 0x80000001)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x4c, r2, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0xb48, 0x6]}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x2]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x80000001}, @SEG6_ATTR_SECRET={0x14, 0x4, [0x80000001, 0xfffffffc, 0xf65f5060, 0x567b]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x200400d1)
r3 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
recvmsg(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=""/82, 0x52}, {&(0x7f0000000300)=""/177, 0xb1}, {&(0x7f00000003c0)=""/115, 0x73}, {&(0x7f0000000040)=""/60, 0x3c}, {&(0x7f0000000440)=""/145, 0x91}, {&(0x7f0000000500)=""/12, 0xc}, {&(0x7f0000000540)}], 0x7, &(0x7f0000000600)=""/192, 0xc0}, 0x2162)
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, 0x0)

00:36:52 executing program 0:
socketpair(0x2c, 0x3, 0x8a000000, &(0x7f0000000180))

00:36:52 executing program 4:
socketpair(0x1, 0x3, 0xfd01, &(0x7f0000000180))

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 3:
r0 = socket(0x21, 0x1, 0x8d)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

[ 1314.148614] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'.
00:36:52 executing program 0:
socketpair(0x2c, 0x3, 0x8a010000, &(0x7f0000000180))

00:36:52 executing program 4:
socketpair(0x1, 0x3, 0xfe00, &(0x7f0000000180))

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 2:
socketpair(0x1, 0x3, 0xfd01, &(0x7f0000000180))

00:36:52 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x0, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x400000, 0x0)

00:36:52 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 0:
socketpair(0x2c, 0x3, 0x8b000000, &(0x7f0000000180))

00:36:52 executing program 4:
socketpair(0x1, 0x3, 0xfe01, &(0x7f0000000180))

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 0:
socketpair(0x2c, 0x3, 0x8b010000, &(0x7f0000000180))

00:36:52 executing program 3:
socket(0x11, 0xa, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$netrom(r0, &(0x7f0000000040)={{0x3, @null, 0x2}, [@default, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @default]}, 0x48)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 4:
socketpair(0x1, 0x3, 0xff00, &(0x7f0000000180))

00:36:52 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 0:
socketpair(0x2c, 0x3, 0x8c000000, &(0x7f0000000180))

00:36:52 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:52 executing program 4:
socketpair(0x1, 0x3, 0xff01, &(0x7f0000000180))

00:36:52 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:52 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000400)={0x1f, 0x0, @fixed}, &(0x7f0000000440)=0xe, 0x80800)
accept4$bt_l2cap(r1, 0x0, &(0x7f0000000480), 0x180000)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000080)={0x28, 0x3, 0x1, 'queue0\x00', 0x6})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x1, 0x5, 0x8, 0x8, '\x00', 0xfff})
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000140)=0xffffff81)

00:36:52 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x20000, &(0x7f0000000180))

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8c010000, &(0x7f0000000180))

00:36:53 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:53 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x844}, 0x20044010)

00:36:53 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x200000, &(0x7f0000000180))

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8d000000, &(0x7f0000000180))

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x6b6b6b, &(0x7f0000000180))

00:36:53 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8d010000, &(0x7f0000000180))

00:36:53 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x7, 0x4)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})

00:36:53 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x1000000, &(0x7f0000000180))

00:36:53 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8e000000, &(0x7f0000000180))

00:36:53 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x1010000, &(0x7f0000000180))

00:36:53 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:53 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000000080)={0x80000001, 0x7, 0x8})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x14000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000180)={0xffff8000, 0x7a6, 0x8})
r1 = socket(0x11, 0xa, 0x0)
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f0000000100))
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8e010000, &(0x7f0000000180))

00:36:53 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x2000000, &(0x7f0000000180))

00:36:53 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a0, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x3c3900, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8f000000, &(0x7f0000000180))

00:36:53 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x2010000, &(0x7f0000000180))

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x8f010000, &(0x7f0000000180))

00:36:53 executing program 3:
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0x3)
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, 0x0)

00:36:53 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:53 executing program 4:
socketpair(0x1, 0x3, 0x3000000, &(0x7f0000000180))

00:36:53 executing program 0:
socketpair(0x2c, 0x3, 0x90000000, &(0x7f0000000180))

00:36:53 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:54 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, 0x0)

00:36:54 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 3:
r0 = socket(0x11, 0x1, 0xffd)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x3010000, &(0x7f0000000180))

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x90010000, &(0x7f0000000180))

00:36:54 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:54 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a0, 0x0)

00:36:54 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
accept4(r0, &(0x7f0000000080)=@qipcrtr, &(0x7f0000000000)=0x80, 0xc0800)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x4000000, &(0x7f0000000180))

00:36:54 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x89a1, 0x0)

00:36:54 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x91000000, &(0x7f0000000180))

00:36:54 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x500, 0x0)

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x4010000, &(0x7f0000000180))

00:36:54 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x9, 0x80300)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x1, 0x0, 0x5, 0x9, 'syz0\x00', 0x101})
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:36:54 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x91010000, &(0x7f0000000180))

00:36:54 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x5000000, &(0x7f0000000180))

00:36:54 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = accept$netrom(r0, 0x0, &(0x7f0000000000))
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x6, 0x4)
r2 = accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @netrom}, [@netrom, @remote, @remote, @bcast, @default, @remote, @netrom, @null]}, &(0x7f0000000140)=0x48, 0x180800)
sendto$netrom(r2, &(0x7f0000000180)="bc5722e248a1588c4bf88f76a1172f6933a1043f526ab9d9ecd58dc1746b643c68874ceeed1ef5ad1902158c4aca0b688c72792725238a148754fce7f2b97082ec198bb768dbb92817dbad1e07c81c7811cfeb945e5da180c947db0343c78b9600d78bd3b676ea70ad46d85a1ca60193931f37b76b49448a05298879ba2f430e294c50157cd319d9c42f7d001fa7f7ea1c384f21cc78b9db5ce8fbfc33e913558b32180555c0644c758c", 0xaa, 0x800, 0x0, 0x0)

00:36:54 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:54 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x5010000, &(0x7f0000000180))

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x92000000, &(0x7f0000000180))

00:36:54 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x89a1, 0x0)

00:36:54 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
clock_gettime(0x3, &(0x7f0000000000))

00:36:54 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x92010000, &(0x7f0000000180))

00:36:54 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x6000000, &(0x7f0000000180))

00:36:54 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x500, 0x0)

00:36:54 executing program 3:
r0 = socket(0x11, 0x2, 0x7f)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:54 executing program 0:
socketpair(0x2c, 0x3, 0x93000000, &(0x7f0000000180))

00:36:54 executing program 4:
socketpair(0x1, 0x3, 0x6010000, &(0x7f0000000180))

00:36:54 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:54 executing program 3:
r0 = socket(0x28, 0x4, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x100, 0x0)
getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080)=0x9, &(0x7f00000000c0)=0x4)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f0000000600)={{0x1, 0x6}, 0x0, 0x6, 0x81, {0x1f, 0x3}, 0x6, 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000100)={{0x9, 0x0, 0x9, 0x7, '\x00', 0x6}, 0x0, [0x7fff, 0x3, 0x6, 0x81, 0x9, 0x4, 0x6, 0xffffffffffff9389, 0x8, 0xffffffff, 0x10001, 0xffffffffffffffff, 0x8000, 0x3, 0x8, 0x1, 0x8, 0x0, 0x1, 0x5, 0x4, 0xad, 0x8, 0x0, 0x2400000000000000, 0x2, 0x9, 0x1, 0x8b, 0x5, 0xc253, 0x0, 0x8, 0x6dc6, 0x4ecd, 0x100000000, 0x1000, 0x7, 0x80, 0x100, 0x8334, 0x401, 0x96, 0x101, 0x80000001, 0x8000, 0x4, 0xe1, 0x10000, 0x80, 0x4, 0x6, 0xa05, 0x4de, 0x7fffffff, 0x3bb, 0x1, 0x9, 0x1, 0x268b20d4, 0x8fb, 0x1, 0x0, 0x8, 0x1, 0x7f, 0xab, 0x1f, 0x220f, 0x2, 0x0, 0xffff, 0xa3, 0x4, 0x5aa9, 0x3, 0x6, 0x1ff, 0x1, 0x2, 0x100, 0x51d0, 0x7, 0xfffffffeffffffff, 0x6, 0x80000001, 0x2, 0x3f, 0xac0, 0x2, 0x1, 0x3, 0x9, 0x80000000, 0xfffffffffffffffe, 0x1f, 0x8, 0xbad8, 0x1, 0xffffffffffff7fff, 0x10001, 0x8, 0x5, 0x100, 0x3ff, 0xd34f, 0x9, 0x8, 0x1, 0xffffffffffffff5c, 0x1, 0x8, 0x1, 0x0, 0x1f, 0x7, 0x5, 0x7fff, 0x8001, 0x4, 0x9, 0x800, 0x0, 0x166, 0x8, 0x1, 0xecf]})

00:36:54 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8995, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x93010000, &(0x7f0000000180))

00:36:55 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x7000000, &(0x7f0000000180))

00:36:55 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, 0x0)

00:36:55 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x8, &(0x7f0000000080)=0x4)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x94000000, &(0x7f0000000180))

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x7010000, &(0x7f0000000180))

00:36:55 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x94010000, &(0x7f0000000180))

00:36:55 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x200, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000240)={0xfc, 0x2, 0x4, 0x7fffffff, "f3347829fce62a764984123920607df5e441fb949269d07902ce5f796b7485284143eab4a46734e94abd9cafd41eaa7ce40608adf5fcc508e9194a37a7dc0f87fce5325e22a72c2f606776e4adee61e47df828321c9705772435e3e4031170ba60c26b0f3fe909892640311f77bf063fc4fc23549f76dc30b675533f94cdc3617dada3bd510bc122b56500d2886fe8daac129a0c2ecfdb6dde8463d799379961041d83a1f9c725dbf4148494a1f778b21df5400c40ca0b0f7b7eb1bd4aa1f929583ad3fd073665bbd9c17c73ef581c2a225e3fe860d7a2ef9a21b2aafcf309c6aa483663"})
r1 = socket(0x3, 0x6, 0x4)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000080), 0x1, &(0x7f0000000100))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f00000001c0)={0x0, 0x1, {0x1, 0x3, 0x7, 0x3, 0x9}, 0x8000})
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000340)=0x36fba0d7, 0x4)

00:36:55 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, 0x0)

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x8000000, &(0x7f0000000180))

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x95000000, &(0x7f0000000180))

00:36:55 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8995, 0x0)

00:36:55 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x8010000, &(0x7f0000000180))

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x95010000, &(0x7f0000000180))

00:36:55 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 5:
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000000)=0x9, 0x4)

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x9000000, &(0x7f0000000180))

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x96000000, &(0x7f0000000180))

00:36:55 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 5:
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0x9010000, &(0x7f0000000180))

00:36:55 executing program 3:
socket(0x11, 0xa, 0x0)

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0xa000000, &(0x7f0000000180))

00:36:55 executing program 3:
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 5:
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x96010000, &(0x7f0000000180))

00:36:55 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:55 executing program 4:
socketpair(0x1, 0x3, 0xa010000, &(0x7f0000000180))

00:36:55 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
uname(&(0x7f0000000000)=""/16)

00:36:55 executing program 0:
socketpair(0x2c, 0x3, 0x97000000, &(0x7f0000000180))

00:36:55 executing program 5:
r0 = socket(0x0, 0x3, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xb000000, &(0x7f0000000180))

00:36:56 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$VFIO_SET_IOMMU(r1, 0x3b66, 0x4)

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x97010000, &(0x7f0000000180))

00:36:56 executing program 5:
r0 = socket(0x0, 0x3, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xb010000, &(0x7f0000000180))

00:36:56 executing program 5:
r0 = socket(0x0, 0x3, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 3:
r0 = socket(0x11, 0x80000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x98000000, &(0x7f0000000180))

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xc000000, &(0x7f0000000180))

00:36:56 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 3:
r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/73)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000080)=0x4)
r2 = socket(0x6, 0xa, 0x2)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x98010000, &(0x7f0000000180))

00:36:56 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xc010000, &(0x7f0000000180))

00:36:56 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 3:
r0 = socket(0x4, 0x4, 0x5)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00380e000000000000ff00000008000200076b88b8d0e87e250220260cd89766000000005bd65a9ef3fc7e8fab72a740"], 0x1c}}, 0x10)
r2 = socket(0x21, 0x0, 0x8)
setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f00000000c0)=0x800, 0x2)
r3 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r3, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x99000000, &(0x7f0000000180))

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xd000000, &(0x7f0000000180))

00:36:56 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 5:
socket(0x11, 0x3, 0x0)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x99010000, &(0x7f0000000180))

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xd010000, &(0x7f0000000180))

00:36:56 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8993, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:56 executing program 5:
socket(0x11, 0x3, 0x0)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:56 executing program 0:
socketpair(0x2c, 0x3, 0x9a000000, &(0x7f0000000180))

00:36:56 executing program 3:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x80000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f0000000080)={0x0, 0x2, {0x3, 0x3, 0x1, 0x2, 0xa0d7}, 0xffffa071})
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x408000, 0x0)
getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000140)=0x100, &(0x7f0000000180)=0x4)

00:36:56 executing program 4:
socketpair(0x1, 0x3, 0xe000000, &(0x7f0000000180))

00:36:57 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, 0x0)

00:36:57 executing program 5:
socket(0x11, 0x3, 0x0)
recvfrom$netrom(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x101, 0x0, 0x0)

00:36:57 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 0:
socketpair(0x2c, 0x3, 0x9a010000, &(0x7f0000000180))

00:36:57 executing program 4:
socketpair(0x1, 0x3, 0xe010000, &(0x7f0000000180))

00:36:57 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
recvfrom$netrom(r0, 0x0, 0x0, 0x101, 0x0, 0x0)

00:36:57 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, 0x0)

00:36:57 executing program 3:
r0 = socket(0x23, 0x5, 0x4)
r1 = getpid()
getpgid(r1)
sched_getparam(r1, &(0x7f0000000000))
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 0:
socketpair(0x2c, 0x3, 0x9b000000, &(0x7f0000000180))

00:36:57 executing program 4:
socketpair(0x1, 0x3, 0xf000000, &(0x7f0000000180))

00:36:57 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:36:57 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8993, 0x0)

00:36:57 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 0:
socketpair(0x2c, 0x3, 0x9b010000, &(0x7f0000000180))

00:36:57 executing program 3:
setsockopt$netrom_NETROM_T1(0xffffffffffffffff, 0x103, 0x1, &(0x7f0000000000)=0x80000001, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x8000, 'syz1\x00', @bcast, 0x2, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

00:36:57 executing program 4:
socketpair(0x1, 0x3, 0xf010000, &(0x7f0000000180))

00:36:57 executing program 0:
socketpair(0x2c, 0x3, 0x9c000000, &(0x7f0000000180))

00:36:57 executing program 4:
socketpair(0x1, 0x3, 0x10000000, &(0x7f0000000180))

00:36:57 executing program 1:
r0 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000000c0)=""/73)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x8, &(0x7f0000000080)=0x4)
r2 = socket(0x6, 0xa, 0x2)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:57 executing program 3:
r0 = getpid()
getpgid(r0)
syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/user\x00')
r1 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:58 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:36:58 executing program 4:
socketpair(0x1, 0x3, 0x10010000, &(0x7f0000000180))

00:36:58 executing program 0:
socketpair(0x2c, 0x3, 0x9c010000, &(0x7f0000000180))

00:36:58 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:58 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:58 executing program 3:
socket(0x11, 0xa, 0x7f)
prctl$PR_GET_SECCOMP(0x15)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x300, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:36:58 executing program 0:
socketpair(0x2c, 0x3, 0x9d000000, &(0x7f0000000180))

00:36:58 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:58 executing program 4:
socketpair(0x1, 0x3, 0x11000000, &(0x7f0000000180))

00:36:58 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:58 executing program 3:
socket(0x11, 0xa, 0x0)

00:36:58 executing program 0:
socketpair(0x2c, 0x3, 0x9d010000, &(0x7f0000000180))

00:36:59 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
recvfrom$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:36:59 executing program 4:
socketpair(0x1, 0x3, 0x11010000, &(0x7f0000000180))

00:36:59 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:59 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000000)={0x6, 0x4, 0x0, 'queue0\x00', 0x7fffffff})
socket(0x21, 0x4, 0x7ef)

00:36:59 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:59 executing program 0:
socketpair(0x2c, 0x3, 0x9e000000, &(0x7f0000000180))

00:36:59 executing program 4:
socketpair(0x1, 0x3, 0x12000000, &(0x7f0000000180))

00:36:59 executing program 3:
socket(0x11, 0xa, 0x0)
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x10000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000080)={0xbce085570944700e, 0x0, 0x0})
openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x400400, 0x0)

00:36:59 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:59 executing program 0:
socketpair(0x2c, 0x3, 0x9e010000, &(0x7f0000000180))

00:36:59 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:36:59 executing program 4:
socketpair(0x1, 0x3, 0x12010000, &(0x7f0000000180))

00:36:59 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:59 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:36:59 executing program 0:
socketpair(0x2c, 0x3, 0x9f000000, &(0x7f0000000180))

00:36:59 executing program 3:
r0 = socket(0x1a, 0xa, 0xffffffe1)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:36:59 executing program 4:
socketpair(0x1, 0x3, 0x13000000, &(0x7f0000000180))

00:36:59 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:00 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:00 executing program 3:
r0 = socket(0x22, 0x2, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000080)={0x0, 0x0, 0x1, 'queue0\x00', 0x100})

00:37:00 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0x9f010000, &(0x7f0000000180))

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x13010000, &(0x7f0000000180))

00:37:00 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:00 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 3:
r0 = socket(0x26, 0x4, 0x10)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x14000000, &(0x7f0000000180))

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa0000000, &(0x7f0000000180))

00:37:00 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:00 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x14010000, &(0x7f0000000180))

00:37:00 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 3:
r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ion\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000180)={0x3, 0x5})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000080)={0x8, 0x9, 0x1, 'queue1\x00', 0x8})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f00000003c0)={0xffffffff, 0x1})
r2 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
openat$ion(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/ion\x00', 0x88e83, 0x0)

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa0010000, &(0x7f0000000180))

00:37:00 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x15000000, &(0x7f0000000180))

00:37:00 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 3:
r0 = socket(0x11, 0xa, 0x2)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa1000000, &(0x7f0000000180))

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x15010000, &(0x7f0000000180))

00:37:00 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:00 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = socket(0x25, 0x4, 0x1)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000000)=0x1, 0x4)

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa1010000, &(0x7f0000000180))

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x16000000, &(0x7f0000000180))

00:37:00 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa2000000, &(0x7f0000000180))

00:37:00 executing program 3:
socket(0x1e, 0xa, 0x5)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0xc0184908, &(0x7f0000000000)={0x0, 0x0, 0x0})

00:37:00 executing program 4:
socketpair(0x1, 0x3, 0x16010000, &(0x7f0000000180))

00:37:00 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:00 executing program 0:
socketpair(0x2c, 0x3, 0xa2010000, &(0x7f0000000180))

00:37:01 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x17000000, &(0x7f0000000180))

00:37:01 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000000000)=0x40000000, &(0x7f0000000080)=0x4)

00:37:01 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa3000000, &(0x7f0000000180))

00:37:01 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x17010000, &(0x7f0000000180))

00:37:01 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa3010000, &(0x7f0000000180))

00:37:01 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvfrom$netrom(r1, &(0x7f0000000080)=""/71, 0x47, 0x40014140, &(0x7f0000000100)={{0x3, @default, 0x2}, [@bcast, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast]}, 0x48)

00:37:01 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x18000000, &(0x7f0000000180))

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa4000000, &(0x7f0000000180))

00:37:01 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0xc0184908, &(0x7f0000000040)={0x0, 0x0, 0x0})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)

00:37:01 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa4010000, &(0x7f0000000180))

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x18010000, &(0x7f0000000180))

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa5000000, &(0x7f0000000180))

00:37:01 executing program 3:
socketpair(0x2c, 0x3, 0xa1010000, &(0x7f0000000180))

00:37:01 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8982, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa5010000, &(0x7f0000000180))

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x19000000, &(0x7f0000000180))

00:37:01 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, 0x0)

00:37:01 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8983, 0x0)

00:37:01 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:01 executing program 4:
socketpair(0x1, 0x3, 0x19010000, &(0x7f0000000180))

00:37:01 executing program 3:
r0 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c, r1, 0x74a, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_FLOW={0x6}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0xc8c4}, 0x40)

00:37:01 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, 0x0)

00:37:01 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:01 executing program 0:
socketpair(0x2c, 0x3, 0xa6000000, &(0x7f0000000180))

00:37:01 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1a000000, &(0x7f0000000180))

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa6010000, &(0x7f0000000180))

00:37:02 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8982, 0x0)

00:37:02 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa7000000, &(0x7f0000000180))

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1a010000, &(0x7f0000000180))

00:37:02 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8983, 0x0)

00:37:02 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa7010000, &(0x7f0000000180))

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1b000000, &(0x7f0000000180))

00:37:02 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x40004)

00:37:02 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa8000000, &(0x7f0000000180))

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1b010000, &(0x7f0000000180))

00:37:02 executing program 1:
r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x1, 0x70bd27, 0x25dfdbff, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x2}, 0x40004)

00:37:02 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 1:
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x7, &(0x7f0000000080)=0x4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000000c0)={{0x0, 0x4}, 'port1\x00', 0x87, 0x49, 0xfffffffc, 0xfff, 0x400, 0x8, 0x1a8, 0x0, 0x4, 0x20})
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/mnt\x00')
syz_genetlink_get_family_id$team(&(0x7f0000000200)='team\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000180)={0xa, 0xfffffff9, 0x283})

00:37:02 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa8010000, &(0x7f0000000180))

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1c000000, &(0x7f0000000180))

00:37:02 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:02 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 4:
socketpair(0x1, 0x3, 0x1c010000, &(0x7f0000000180))

00:37:02 executing program 0:
socketpair(0x2c, 0x3, 0xa9000000, &(0x7f0000000180))

00:37:02 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:02 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1d000000, &(0x7f0000000180))

00:37:03 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xa9010000, &(0x7f0000000180))

00:37:03 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1d010000, &(0x7f0000000180))

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xaa000000, &(0x7f0000000180))

00:37:03 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1e000000, &(0x7f0000000180))

00:37:03 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:03 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xaa010000, &(0x7f0000000180))

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1e010000, &(0x7f0000000180))

00:37:03 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:03 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xab000000, &(0x7f0000000180))

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1f000000, &(0x7f0000000180))

00:37:03 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:03 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:03 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x1f010000, &(0x7f0000000180))

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xab010000, &(0x7f0000000180))

00:37:03 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:03 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 4:
socketpair(0x1, 0x3, 0x20000000, &(0x7f0000000180))

00:37:03 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:03 executing program 0:
socketpair(0x2c, 0x3, 0xac000000, &(0x7f0000000180))

00:37:04 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:04 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x20010000, &(0x7f0000000180))

00:37:04 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xac010000, &(0x7f0000000180))

00:37:04 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:04 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x21000000, &(0x7f0000000180))

00:37:04 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8980, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xad000000, &(0x7f0000000180))

00:37:04 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:04 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x21010000, &(0x7f0000000180))

00:37:04 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, 0x0)

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xad010000, &(0x7f0000000180))

00:37:04 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x22000000, &(0x7f0000000180))

00:37:04 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xae000000, &(0x7f0000000180))

00:37:04 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, 0x0)

00:37:04 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x22010000, &(0x7f0000000180))

00:37:04 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xae010000, &(0x7f0000000180))

00:37:04 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8980, 0x0)

00:37:04 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8971, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:04 executing program 4:
socketpair(0x1, 0x3, 0x23000000, &(0x7f0000000180))

00:37:04 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:04 executing program 0:
socketpair(0x2c, 0x3, 0xaf000000, &(0x7f0000000180))

00:37:05 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, 0x0)

00:37:05 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8981, 0x0)

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x23010000, &(0x7f0000000180))

00:37:05 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 0:
socketpair(0x2c, 0x3, 0xaf010000, &(0x7f0000000180))

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, 0x0)

00:37:05 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:05 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x24000000, &(0x7f0000000180))

00:37:05 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 0:
socketpair(0x2c, 0x3, 0xb0000000, &(0x7f0000000180))

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8971, 0x0)

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x24010000, &(0x7f0000000180))

00:37:05 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:05 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 0:
socketpair(0x2c, 0x3, 0xb0010000, &(0x7f0000000180))

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x25000000, &(0x7f0000000180))

00:37:05 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8981, 0x0)

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x25010000, &(0x7f0000000180))

00:37:05 executing program 0:
socketpair(0x2c, 0x3, 0xb1000000, &(0x7f0000000180))

00:37:05 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:05 executing program 4:
socketpair(0x1, 0x3, 0x26000000, &(0x7f0000000180))

00:37:05 executing program 0:
socketpair(0x2c, 0x3, 0xb1010000, &(0x7f0000000180))

00:37:05 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:05 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 0:
socketpair(0x2c, 0x3, 0xb2000000, &(0x7f0000000180))

00:37:06 executing program 4:
socketpair(0x1, 0x3, 0x26010000, &(0x7f0000000180))

00:37:06 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:06 executing program 4:
socketpair(0x1, 0x3, 0x27000000, &(0x7f0000000180))

00:37:06 executing program 0:
socketpair(0x2c, 0x3, 0xb2010000, &(0x7f0000000180))

00:37:06 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:06 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 4:
socketpair(0x1, 0x3, 0x27010000, &(0x7f0000000180))

00:37:06 executing program 0:
socketpair(0x2c, 0x3, 0xb3000000, &(0x7f0000000180))

00:37:06 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:06 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 4:
socketpair(0x1, 0x3, 0x28000000, &(0x7f0000000180))

00:37:06 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:06 executing program 0:
socketpair(0x2c, 0x3, 0xb3010000, &(0x7f0000000180))

00:37:06 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:06 executing program 4:
socketpair(0x1, 0x3, 0x28010000, &(0x7f0000000180))

00:37:06 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:06 executing program 0:
socketpair(0x2c, 0x3, 0xb4000000, &(0x7f0000000180))

00:37:07 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x29000000, &(0x7f0000000180))

00:37:07 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 0:
socketpair(0x2c, 0x3, 0xb4010000, &(0x7f0000000180))

00:37:07 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x29010000, &(0x7f0000000180))

00:37:07 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 0:
socketpair(0x2c, 0x3, 0xb5000000, &(0x7f0000000180))

00:37:07 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x2a000000, &(0x7f0000000180))

00:37:07 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:07 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 0:
socketpair(0x2c, 0x3, 0xb5010000, &(0x7f0000000180))

00:37:07 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x2a010000, &(0x7f0000000180))

00:37:07 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:07 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 0:
socketpair(0x2c, 0x3, 0xb6000000, &(0x7f0000000180))

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x2b000000, &(0x7f0000000180))

00:37:07 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8953, 0x0)

00:37:07 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894c, 0x0)

00:37:07 executing program 4:
socketpair(0x1, 0x3, 0x2b010000, &(0x7f0000000180))

00:37:07 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 0:
socketpair(0x2c, 0x3, 0xb6010000, &(0x7f0000000180))

00:37:07 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:07 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2c000000, &(0x7f0000000180))

00:37:08 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb7000000, &(0x7f0000000180))

00:37:08 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2c010000, &(0x7f0000000180))

00:37:08 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb7010000, &(0x7f0000000180))

00:37:08 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8953, 0x0)

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2d000000, &(0x7f0000000180))

00:37:08 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb8000000, &(0x7f0000000180))

00:37:08 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 5:
r0 = getpid()
getpgid(r0)
openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x8002, 0x0)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x80000000, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000140)=0xffffff01, 0x4)
r2 = getpid()
getpgid(r2)
r3 = syz_open_procfs$namespace(r2, &(0x7f0000000100)='ns/ipc\x00')
ioctl$ASHMEM_GET_PROT_MASK(r3, 0x7706, 0x0)
clock_gettime(0x2, &(0x7f0000000000))

00:37:08 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2d010000, &(0x7f0000000180))

00:37:08 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x894a, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb8010000, &(0x7f0000000180))

00:37:08 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2e000000, &(0x7f0000000180))

00:37:08 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, 0x0)

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb9000000, &(0x7f0000000180))

00:37:08 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2e010000, &(0x7f0000000180))

00:37:08 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, 0x0)

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xb9010000, &(0x7f0000000180))

00:37:08 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:08 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, 0x0)

00:37:08 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:08 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x894a, 0x0)

00:37:08 executing program 4:
socketpair(0x1, 0x3, 0x2f000000, &(0x7f0000000180))

00:37:08 executing program 0:
socketpair(0x2c, 0x3, 0xba000000, &(0x7f0000000180))

00:37:09 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, 0x0)

00:37:09 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:09 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xba010000, &(0x7f0000000180))

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x2f010000, &(0x7f0000000180))

00:37:09 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8946, 0x0)

00:37:09 executing program 2:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x0)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xbb000000, &(0x7f0000000180))

00:37:09 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x30000000, &(0x7f0000000180))

00:37:09 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xbb010000, &(0x7f0000000180))

00:37:09 executing program 5:
socket(0x11, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:09 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0xfff, 0x0, {0xffffffffffffffff, 0x3, 0xb3, 0x3, 0x7ff}, 0x3})

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x30010000, &(0x7f0000000180))

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xbc000000, &(0x7f0000000180))

00:37:09 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:09 executing program 2:
socket(0x11, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x31000000, &(0x7f0000000180))

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xbc010000, &(0x7f0000000180))

00:37:09 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x31010000, &(0x7f0000000180))

00:37:09 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 0:
socketpair(0x2c, 0x3, 0xbd000000, &(0x7f0000000180))

00:37:09 executing program 5:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:09 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:09 executing program 2:
socket(0x11, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:09 executing program 4:
socketpair(0x1, 0x3, 0x32000000, &(0x7f0000000180))

00:37:09 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 5:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xbd010000, &(0x7f0000000180))

00:37:10 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 4:
socketpair(0x1, 0x3, 0x32010000, &(0x7f0000000180))

00:37:10 executing program 2:
socket(0x11, 0x3, 0x0)
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:10 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 5:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xbe000000, &(0x7f0000000180))

00:37:10 executing program 4:
socketpair(0x1, 0x3, 0x33000000, &(0x7f0000000180))

00:37:10 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xbe010000, &(0x7f0000000180))

00:37:10 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:10 executing program 4:
socketpair(0x1, 0x3, 0x33010000, &(0x7f0000000180))

00:37:10 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xbf000000, &(0x7f0000000180))

00:37:10 executing program 2:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:10 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8940, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 2:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:10 executing program 4:
socketpair(0x1, 0x3, 0x34000000, &(0x7f0000000180))

00:37:10 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:10 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, 0x0)

00:37:10 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xbf010000, &(0x7f0000000180))

00:37:10 executing program 2:
openat$audio1(0xffffffffffffff9c, 0x0, 0x84902, 0x0)

00:37:10 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, 0x0)

00:37:10 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:10 executing program 4:
socketpair(0x1, 0x3, 0x34010000, &(0x7f0000000180))

00:37:10 executing program 0:
socketpair(0x2c, 0x3, 0xc0000000, &(0x7f0000000180))

00:37:10 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:10 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:10 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, 0x0)

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x35000000, &(0x7f0000000180))

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc0010000, &(0x7f0000000180))

00:37:11 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 5:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:11 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc1000000, &(0x7f0000000180))

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x35010000, &(0x7f0000000180))

00:37:11 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8940, 0x0)

00:37:11 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc1010000, &(0x7f0000000180))

00:37:11 executing program 3:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x84902, 0x0)

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x36000000, &(0x7f0000000180))

00:37:11 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0xfff, 0x0, {0xffffffffffffffff, 0x3, 0xb3, 0x3, 0x7ff}, 0x3})

00:37:11 executing program 2:
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc2000000, &(0x7f0000000180))

00:37:11 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x36010000, &(0x7f0000000180))

00:37:11 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891e, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0xfff, 0x0, {0xffffffffffffffff, 0x3, 0xb3, 0x3, 0x7ff}, 0x3})

00:37:11 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8923, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc2010000, &(0x7f0000000180))

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x37000000, &(0x7f0000000180))

00:37:11 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000140)={0xfff, 0x0, {0xffffffffffffffff, 0x3, 0xb3, 0x3, 0x7ff}, 0x3})

00:37:11 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, 0x0)

00:37:11 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:11 executing program 0:
socketpair(0x2c, 0x3, 0xc3000000, &(0x7f0000000180))

00:37:11 executing program 4:
socketpair(0x1, 0x3, 0x37010000, &(0x7f0000000180))

00:37:11 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r1, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x7706, 0x0)

00:37:11 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, 0x0)

00:37:12 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc3010000, &(0x7f0000000180))

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x38000000, &(0x7f0000000180))

00:37:12 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x82842)

00:37:12 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8923, 0x0)

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x38010000, &(0x7f0000000180))

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc4000000, &(0x7f0000000180))

00:37:12 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')

00:37:12 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x39000000, &(0x7f0000000180))

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc4010000, &(0x7f0000000180))

00:37:12 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')

00:37:12 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x39010000, &(0x7f0000000180))

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc5000000, &(0x7f0000000180))

00:37:12 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)

00:37:12 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x3a000000, &(0x7f0000000180))

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc5010000, &(0x7f0000000180))

00:37:12 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 4:
socketpair(0x1, 0x3, 0x3a010000, &(0x7f0000000180))

00:37:12 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)

00:37:12 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:12 executing program 0:
socketpair(0x2c, 0x3, 0xc6000000, &(0x7f0000000180))

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3b000000, &(0x7f0000000180))

00:37:13 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc6010000, &(0x7f0000000180))

00:37:13 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3b010000, &(0x7f0000000180))

00:37:13 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc7000000, &(0x7f0000000180))

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3c000000, &(0x7f0000000180))

00:37:13 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc7010000, &(0x7f0000000180))

00:37:13 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:13 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3c010000, &(0x7f0000000180))

00:37:13 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc8000000, &(0x7f0000000180))

00:37:13 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:13 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3d000000, &(0x7f0000000180))

00:37:13 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 5:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3d010000, &(0x7f0000000180))

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc8010000, &(0x7f0000000180))

00:37:13 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 0:
socketpair(0x2c, 0x3, 0xc9000000, &(0x7f0000000180))

00:37:13 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:13 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:13 executing program 4:
socketpair(0x1, 0x3, 0x3e000000, &(0x7f0000000180))

00:37:14 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x3e010000, &(0x7f0000000180))

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xc9010000, &(0x7f0000000180))

00:37:14 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:14 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x891c, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8914, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x3f000000, &(0x7f0000000180))

00:37:14 executing program 5:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xca000000, &(0x7f0000000180))

00:37:14 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, 0x0)

00:37:14 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xca010000, &(0x7f0000000180))

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x3f010000, &(0x7f0000000180))

00:37:14 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, 0x0)

00:37:14 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, 0x0)

00:37:14 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x40000000, &(0x7f0000000180))

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xcb000000, &(0x7f0000000180))

00:37:14 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, 0x0)

00:37:14 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:14 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8912, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:14 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x891c, 0x0)

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xcb010000, &(0x7f0000000180))

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x40010000, &(0x7f0000000180))

00:37:14 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8914, 0x0)

00:37:14 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, 0x0)

00:37:14 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:14 executing program 3:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:14 executing program 4:
socketpair(0x1, 0x3, 0x41000000, &(0x7f0000000180))

00:37:14 executing program 0:
socketpair(0x2c, 0x3, 0xcc000000, &(0x7f0000000180))

00:37:15 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, 0x0)

00:37:15 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:15 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:15 executing program 0:
socketpair(0x2c, 0x3, 0xcc010000, &(0x7f0000000180))

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x41010000, &(0x7f0000000180))

00:37:15 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)

00:37:15 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8912, 0x0)

00:37:15 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x42000000, &(0x7f0000000180))

00:37:15 executing program 0:
socketpair(0x2c, 0x3, 0xcc020000, &(0x7f0000000180))

00:37:15 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')

00:37:15 executing program 5:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/33)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')

00:37:15 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:15 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 0:
socketpair(0x2c, 0x3, 0xcd000000, &(0x7f0000000180))

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x42010000, &(0x7f0000000180))

00:37:15 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xc0045878, 0x0)

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x43000000, &(0x7f0000000180))

00:37:15 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 0:
socketpair(0x2c, 0x3, 0xcd010000, &(0x7f0000000180))

00:37:15 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:15 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x43010000, &(0x7f0000000180))

00:37:15 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:15 executing program 0:
socketpair(0x2c, 0x3, 0xce000000, &(0x7f0000000180))

00:37:15 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 4:
socketpair(0x1, 0x3, 0x44000000, &(0x7f0000000180))

00:37:15 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:15 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xce010000, &(0x7f0000000180))

00:37:16 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x44010000, &(0x7f0000000180))

00:37:16 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xcf000000, &(0x7f0000000180))

00:37:16 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x45000000, &(0x7f0000000180))

00:37:16 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xcf010000, &(0x7f0000000180))

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x45010000, &(0x7f0000000180))

00:37:16 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:16 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x46000000, &(0x7f0000000180))

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xd0000000, &(0x7f0000000180))

00:37:16 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x46010000, &(0x7f0000000180))

00:37:16 executing program 2:
syz_open_procfs$namespace(0x0, 0x0)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:16 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xd0010000, &(0x7f0000000180))

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x47000000, &(0x7f0000000180))

00:37:16 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:16 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xd1000000, &(0x7f0000000180))

00:37:16 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x47010000, &(0x7f0000000180))

00:37:16 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:16 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 4:
socketpair(0x1, 0x3, 0x48000000, &(0x7f0000000180))

00:37:16 executing program 0:
socketpair(0x2c, 0x3, 0xd1010000, &(0x7f0000000180))

00:37:16 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:16 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
syz_open_procfs$namespace(0xffffffffffffffff, 0x0)

00:37:17 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x48010000, &(0x7f0000000180))

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd2000000, &(0x7f0000000180))

00:37:17 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x49000000, &(0x7f0000000180))

00:37:17 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 2:
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/cgroup\x00')

00:37:17 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd2010000, &(0x7f0000000180))

00:37:17 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x49010000, &(0x7f0000000180))

00:37:17 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x80086601, 0x0)

00:37:17 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd3000000, &(0x7f0000000180))

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4a000000, &(0x7f0000000180))

00:37:17 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd3010000, &(0x7f0000000180))

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4a010000, &(0x7f0000000180))

00:37:17 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8911, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8910, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd4000000, &(0x7f0000000180))

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4b000000, &(0x7f0000000180))

00:37:17 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, 0x0)

00:37:17 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4b010000, &(0x7f0000000180))

00:37:17 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, 0x0)

00:37:17 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, 0x0)

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd4010000, &(0x7f0000000180))

00:37:17 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, 0x0)

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4c000000, &(0x7f0000000180))

00:37:17 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8907, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 0:
socketpair(0x2c, 0x3, 0xd5000000, &(0x7f0000000180))

00:37:17 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8911, 0x0)

00:37:17 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:17 executing program 4:
socketpair(0x1, 0x3, 0x4c010000, &(0x7f0000000180))

00:37:18 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8910, 0x0)

00:37:18 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8907, 0x0)

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd5010000, &(0x7f0000000180))

00:37:18 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4d000000, &(0x7f0000000180))

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd6000000, &(0x7f0000000180))

00:37:18 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:18 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:18 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4d010000, &(0x7f0000000180))

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd6010000, &(0x7f0000000180))

00:37:18 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, 0x0, 0x100, 0x70bd2a, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000800}, 0x40000)
r1 = socket(0x21, 0x1, 0x4)
bind$netrom(r1, 0x0, 0x0)

00:37:18 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd7000000, &(0x7f0000000180))

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4e000000, &(0x7f0000000180))

00:37:18 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd7010000, &(0x7f0000000180))

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4e010000, &(0x7f0000000180))

00:37:18 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4f000000, &(0x7f0000000180))

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd8000000, &(0x7f0000000180))

00:37:18 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd8010000, &(0x7f0000000180))

00:37:18 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 4:
socketpair(0x1, 0x3, 0x4f010000, &(0x7f0000000180))

00:37:18 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 0:
socketpair(0x2c, 0x3, 0xd9000000, &(0x7f0000000180))

00:37:18 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:18 executing program 3:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:18 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x50000000, &(0x7f0000000180))

00:37:19 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xd9010000, &(0x7f0000000180))

00:37:19 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 3:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x50010000, &(0x7f0000000180))

00:37:19 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xda000000, &(0x7f0000000180))

00:37:19 executing program 5:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 3:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x40305828, 0x0)

00:37:19 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x51000000, &(0x7f0000000180))

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xda010000, &(0x7f0000000180))

00:37:19 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x51010000, &(0x7f0000000180))

00:37:19 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8906, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xdb000000, &(0x7f0000000180))

00:37:19 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x52000000, &(0x7f0000000180))

00:37:19 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8906, 0x0)

00:37:19 executing program 3:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x40305828, 0x0)

00:37:19 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xdb010000, &(0x7f0000000180))

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x52010000, &(0x7f0000000180))

00:37:19 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x53000000, &(0x7f0000000180))

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xdc000000, &(0x7f0000000180))

00:37:19 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 5:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 4:
socketpair(0x1, 0x3, 0x53010000, &(0x7f0000000180))

00:37:19 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 0:
socketpair(0x2c, 0x3, 0xdc010000, &(0x7f0000000180))

00:37:19 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:19 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xdd000000, &(0x7f0000000180))

00:37:20 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x54000000, &(0x7f0000000180))

00:37:20 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x54010000, &(0x7f0000000180))

00:37:20 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xdd010000, &(0x7f0000000180))

00:37:20 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x55000000, &(0x7f0000000180))

00:37:20 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xde000000, &(0x7f0000000180))

00:37:20 executing program 5:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 2:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x55010000, &(0x7f0000000180))

00:37:20 executing program 3:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xde010000, &(0x7f0000000180))

00:37:20 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x56000000, &(0x7f0000000180))

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xdf000000, &(0x7f0000000180))

00:37:20 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x56010000, &(0x7f0000000180))

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xdf010000, &(0x7f0000000180))

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x57000000, &(0x7f0000000180))

00:37:20 executing program 5:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8903, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 2:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:20 executing program 4:
socketpair(0x1, 0x3, 0x57010000, &(0x7f0000000180))

00:37:20 executing program 0:
socketpair(0x2c, 0x3, 0xe0000000, &(0x7f0000000180))

00:37:20 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, 0x0)

00:37:20 executing program 3:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:20 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:20 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe0010000, &(0x7f0000000180))

00:37:21 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, 0x0)

00:37:21 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x58000000, &(0x7f0000000180))

00:37:21 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe1000000, &(0x7f0000000180))

00:37:21 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x58010000, &(0x7f0000000180))

00:37:21 executing program 5:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8903, 0x0)

00:37:21 executing program 2:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe1010000, &(0x7f0000000180))

00:37:21 executing program 3:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x59000000, &(0x7f0000000180))

00:37:21 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe2000000, &(0x7f0000000180))

00:37:21 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x59010000, &(0x7f0000000180))

00:37:21 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:21 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x5a000000, &(0x7f0000000180))

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe2010000, &(0x7f0000000180))

00:37:21 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 2:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x5a010000, &(0x7f0000000180))

00:37:21 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe3000000, &(0x7f0000000180))

00:37:21 executing program 3:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8901, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:21 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x5b000000, &(0x7f0000000180))

00:37:21 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, 0x0)

00:37:21 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe3010000, &(0x7f0000000180))

00:37:21 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:21 executing program 4:
socketpair(0x1, 0x3, 0x5b010000, &(0x7f0000000180))

00:37:21 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, 0x0)

00:37:21 executing program 0:
socketpair(0x2c, 0x3, 0xe4000000, &(0x7f0000000180))

00:37:22 executing program 2:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:22 executing program 3:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8901, 0x0)

00:37:22 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5c000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe4010000, &(0x7f0000000180))

00:37:22 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8904, 0x0)

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5c010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe5000000, &(0x7f0000000180))

00:37:22 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe5010000, &(0x7f0000000180))

00:37:22 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5d000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe6000000, &(0x7f0000000180))

00:37:22 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8904, 0x0)

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5d010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe6010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe7000000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5e000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe7010000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5e010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe8000000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5f000000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x5f010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe8010000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x60000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe9000000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x60010000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x61000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xe9010000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x61010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xea000000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x62000000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xea010000, &(0x7f0000000180))

00:37:22 executing program 4:
socketpair(0x1, 0x3, 0x62010000, &(0x7f0000000180))

00:37:22 executing program 0:
socketpair(0x2c, 0x3, 0xeb000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x63000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xeb010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x63010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xec000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x64000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xec010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x64010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xed000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xed010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x65000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x65010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xee000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xee010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x66000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x66010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xef000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xef010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x67000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x67010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf0000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf0010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x68000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf1000000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x68010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf1010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x69000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf2000000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf2010000, &(0x7f0000000180))

00:37:23 executing program 4:
socketpair(0x1, 0x3, 0x69010000, &(0x7f0000000180))

00:37:23 executing program 0:
socketpair(0x2c, 0x3, 0xf3000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6a000000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf3010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6a010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf4000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6b000000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf4010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6b010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6b6b6b00, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf5000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6c000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6c010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf5010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6d000000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf6000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6d010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf6010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6e000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6e010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf7000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6f000000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf7010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x6f010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf8000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x70000000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf8010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf9000000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x70010000, &(0x7f0000000180))

00:37:24 executing program 0:
socketpair(0x2c, 0x3, 0xf9010000, &(0x7f0000000180))

00:37:24 executing program 4:
socketpair(0x1, 0x3, 0x71000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x71010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfa000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x72000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfa010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfb000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfb010000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x72010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfc000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x73000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfc010000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x73010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfd000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x74000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfd010000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x74010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfe000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x75000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfe010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfeffffff, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x75010000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x76000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xff000000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x76010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xff010000, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x77000000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0xfffffffe, &(0x7f0000000180))

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x77010000, &(0x7f0000000180))

00:37:25 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
accept4(0xffffffffffffffff, &(0x7f0000000040)=@xdp, &(0x7f00000000c0)=0x80, 0x80000)

00:37:25 executing program 4:
socketpair(0x1, 0x3, 0x78000000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x1, 0x1, 0x4, &(0x7f0000000000))
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x7)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x78010000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x22, 0x3, 0x0, &(0x7f0000000180))

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x79000000, &(0x7f0000000180))

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x79010000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000180))
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000140)={&(0x7f0000000000)=@nl, 0x80, &(0x7f0000000100)=[{&(0x7f0000000080)=""/84, 0x54}], 0x1, &(0x7f00000001c0)=""/92, 0x5c}, 0x2)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7a000000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0xa, 0xa, 0x0, &(0x7f0000000180))

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7a010000, &(0x7f0000000180))

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7b000000, &(0x7f0000000180))

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7b010000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x1f, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x40040)
syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0xaf, 0x440001)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000100)=0x5, 0x4)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f0000000040)={0x1, 0xfff, 0x47d0, 0x5, 0x8000000, 0x2})

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7c000000, &(0x7f0000000180))

00:37:26 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x84}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x400, 0x70bd28, 0x25dfdbff, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20000000)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7c010000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
socket$nl_generic(0x10, 0x3, 0x10)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7d000000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x29, 0x6, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x158, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xb}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @private=0xa010102}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x58, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x158}, 0x1, 0x0, 0x0, 0x4008810}, 0x80)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7d010000, &(0x7f0000000180))

00:37:26 executing program 0:
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)
socketpair(0x25, 0x80000, 0x5, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000180)={{0x2, 0x2, 0xfffffffc, 0x6, '\x00', 0x7}, 0x1, [0x618, 0x3, 0x9, 0x1f, 0xd50, 0xd8d, 0x7f, 0x4, 0x1ff, 0xbbdd, 0x1, 0x7, 0x2ad, 0x100000000, 0x3, 0x3670c00000, 0x7, 0x6, 0x8, 0x1ff, 0xcf, 0x5, 0xc30, 0x20, 0x4, 0x8, 0x1, 0x7, 0x28194f3d, 0x5, 0xfcd, 0x1000000000000, 0x4, 0xb4f7, 0x8001, 0x0, 0x2000000000000000, 0xea0, 0x8, 0x4, 0x90, 0x9, 0x7, 0x8, 0x0, 0x5, 0x1, 0x3, 0x3ff, 0x2, 0xfffffffffffff801, 0xffffffff80000001, 0x66fa, 0x0, 0x1, 0x7, 0x6, 0x9, 0x1ff, 0x3, 0xffffffff, 0xfffffffffffff801, 0x100, 0xffffffffffffffff, 0x6, 0x8000000000, 0x0, 0x2, 0x0, 0x5, 0x0, 0x9, 0xffffffff80000000, 0x7f, 0x9, 0x7, 0x10001, 0x5, 0x6, 0x5, 0xffffffff, 0x30, 0x200, 0x2, 0x1ff, 0x4, 0x100, 0x12f, 0x305, 0x1, 0x3, 0xad, 0x7, 0xffff, 0x7fff, 0x80, 0x3, 0x2, 0x1, 0x80, 0x7, 0x4, 0x4, 0x5, 0x100000001, 0x100000000, 0x9, 0x7e92, 0xffffffffffffffe1, 0xfffffffffffffbff, 0x5, 0x81, 0xa0, 0x9, 0x2, 0x0, 0x11a400000, 0x8001, 0x8000, 0xe21, 0xa40, 0x0, 0x4, 0x2, 0x8, 0x25, 0x4, 0x4]})
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x400200, 0x0)
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000100)={0x5, 0xc, 0x1})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x3d1c01, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0xdcc, 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x6)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7e000000, &(0x7f0000000180))

00:37:26 executing program 0:
socketpair(0x3, 0x3, 0x200, &(0x7f0000000180))
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000100)=""/21)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{}, {}, {<r0=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f00000001c0)={r0, 0x6, &(0x7f0000000080)=[0x4, 0xff4e, 0x9a2d, 0x3000, 0xa76, 0x0], &(0x7f00000000c0)=[0x10001, 0x8, 0x0], 0x10, 0x0, 0x9, &(0x7f0000000100), &(0x7f0000000140)=[0x1, 0xd1, 0x20, 0x7, 0x4, 0x3f]})

00:37:26 executing program 0:
syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0x100)
socketpair(0x8, 0x3, 0x0, &(0x7f0000000180))
sysinfo(&(0x7f0000000040)=""/244)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7e010000, &(0x7f0000000180))

00:37:26 executing program 0:
r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x3, 0x102)
ioctl$DRM_IOCTL_SWITCH_CTX(r0, 0x40086424, &(0x7f0000000100))
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
recvmsg(r1, &(0x7f0000000140)={&(0x7f0000000000)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f00000001c0)=""/243, 0xf3}], 0x2, &(0x7f00000002c0)=""/222, 0xde}, 0x160)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)

00:37:26 executing program 4:
socketpair(0x1, 0x3, 0x7f000000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x3, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000000)={0x1, 0x1, 'client0\x00', 0xffffffff80000000, "080f3561c18ea391", "56b3ca2c9b3210a514d7ea3b75f955ca974fea17b3be1420d9d90579bad92868", 0x6, 0xffff})

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x7f010000, &(0x7f0000000180))

00:37:27 executing program 0:
r0 = getpgid(0xffffffffffffffff)
capget(&(0x7f0000000000)={0x20080522, r0}, &(0x7f0000000040)={0x9, 0x80000000, 0x3, 0x7fffffff, 0xbf6a, 0x7})
socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000180))

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x80010000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0xc003, 0x0)

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x80040000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
socketpair(0x28, 0x6, 0x10001, &(0x7f0000000000))

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x81000000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = accept4$netrom(r0, &(0x7f0000000000)={{0x3, @rose}, [@rose, @null, @netrom, @default, @bcast, @default, @default, @rose]}, &(0x7f0000000080)=0x48, 0x800)
setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f00000000c0), 0x4)

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x81010000, &(0x7f0000000180))

00:37:27 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000000))
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x82000000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = accept$netrom(r0, &(0x7f0000000000)={{}, [@netrom, @remote, @rose, @remote, @remote, @bcast, @netrom, @default]}, &(0x7f0000000080)=0x48)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f00000000c0)=0x4, 0x4)

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x82010000, &(0x7f0000000180))

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x83000000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000003500)={'team0\x00', <r1=>0x0})
r2 = getpgid(0x0)
wait4(r2, &(0x7f0000000040), 0x8, &(0x7f0000000080))
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000003600)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8122145}, 0xc, &(0x7f00000035c0)={&(0x7f0000003540)={0x58, 0x0, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x3}, @GTPA_TID={0xc}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_LINK={0x8, 0x1, r1}]}, 0x58}}, 0x10)

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x83010000, &(0x7f0000000180))

00:37:27 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x1, 0x2, 'client1\x00', 0x7, "28de6c084a781512", "adbb2d5e64ac7565aba9e31b4d6f718657a161fb04ae68119f6402aeb128cd25", 0x401, 0x6d4a})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x5, 0x400, 0x20, 0x3, 0x3ff, 0x3f})

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x84000000, &(0x7f0000000180))

00:37:27 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="020f28bd7064fddbdf25030000000800020005000000"], 0x1c}}, 0x80)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0xb8, 0x0, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0x1a}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}]}, 0xb8}, 0x1, 0x0, 0x0, 0x20000040}, 0x11)

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x84010000, &(0x7f0000000180))

00:37:27 executing program 0:
setsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2)
socketpair(0x2c, 0x5, 0x0, &(0x7f0000000180))
rt_sigqueueinfo(0x0, 0x26, &(0x7f0000000040)={0x12, 0xf5, 0xffffffc0})

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x85000000, &(0x7f0000000180))

00:37:27 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000200)={{0x6, 0x40}, {0x8, 0x1f}, 0x4c1c, 0x0, 0x80})
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800101}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x94, r0, 0x200, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x14}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x8000}, 0x10)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:27 executing program 4:
socketpair(0x1, 0x3, 0x85010000, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x86000000, &(0x7f0000000180))

00:37:28 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40000, 0x0)
ioctl$NBD_DO_IT(r0, 0xab03)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
socketpair(0xb, 0x3, 0x0, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x86010000, &(0x7f0000000180))

00:37:28 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48)
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000080)={0x24, 0x2, 0x320631d4, 0xd654, "30f59504d276a30ad91bbabf"})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x87000000, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x87010000, &(0x7f0000000180))

00:37:28 executing program 0:
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x6)
r0 = getpid()
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000040)={0x0, 0x2, {0xffffffffffffffff, 0x2, 0xffffffff, 0x1, 0xdd81}, 0x401})
getpgid(r0)
sched_getparam(r0, &(0x7f0000000000))
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f00000000c0)=0x80, &(0x7f0000000100)=0x4)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x88000000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x2c, 0x2, 0x20000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x1a, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x2ff, @none, 0x1}, 0xe)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x88010000, &(0x7f0000000180))

00:37:28 executing program 0:
r0 = getpid()
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x800, 0x0)
accept$netrom(r1, &(0x7f0000000200)={{0x3, @null}, [@netrom, @netrom, @null, @bcast, @rose, @null, @netrom, @rose]}, &(0x7f0000000280)=0x48)
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x3, 0x2, 0x101, 0x2, '\x00', 0x7}, 0x3, 0x400, 0x8000, r0, 0x2, 0xfffff800, 'syz0\x00', &(0x7f0000000000)=['.-{+\'#%\x00', '+\'\xc6}:\x00'], 0xe, [], [0x200, 0x401, 0x6, 0x7]})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
getpeername$netrom(r2, &(0x7f00000002c0)={{}, [@rose, @default, @bcast, @rose, @netrom, @rose, @null, @null]}, &(0x7f0000000340)=0x48)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x89000000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000040)={{0x6, 0x4, 0x2486, 0x2, 'syz0\x00'}, 0x2, 0x3, 0xffff, 0x0, 0x2, 0x973, 'syz0\x00', &(0x7f0000000000)=['].V.#$\x00', ''], 0x7, [], [0x800, 0xff, 0x9, 0x5]})

00:37:28 executing program 0:
socketpair(0x2a, 0x3, 0x3, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x89010000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f0000000000)={{0x3, @netrom}, [@default, @bcast, @netrom, @netrom, @null, @netrom, @default, @netrom]}, &(0x7f0000000080)=0x48)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8a000000, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8a010000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000000))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8b000000, &(0x7f0000000180))

00:37:28 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000080)={0x5, 0x8, [0xa21, 0x1]})
socketpair(0x5, 0x0, 0x400, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={'nr', 0x0}, 0x8, 'syz0\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x80000001, 0x1, [@bcast, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_SIZE(r2, 0x7704, 0x0)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8b010000, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8c000000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x27, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x7fff, 0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000040)=0x7)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8c010000, &(0x7f0000000180))

00:37:28 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0x101)

00:37:28 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x6, 0x450f168695308181)

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8d000000, &(0x7f0000000180))

00:37:28 executing program 4:
socketpair(0x1, 0x3, 0x8d010000, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = accept4$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800)
bind$bt_l2cap(r2, &(0x7f00000013c0)={0x1f, 0x5, @any, 0x137b, 0x1}, 0xe)
recvmsg(r1, &(0x7f0000001500)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000001480)=[{&(0x7f0000000080)=""/40, 0x28}, {&(0x7f00000001c0)=""/246, 0xf6}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/251, 0xfb}, {&(0x7f0000001580)=""/65, 0x41}, {&(0x7f0000000100)=""/38, 0x26}, {&(0x7f0000001600)=""/163, 0xa3}], 0x7, &(0x7f0000001540)=""/28, 0x1c}, 0x10040)

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x8e000000, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x8e010000, &(0x7f0000000180))

00:37:29 executing program 0:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4)

00:37:29 executing program 0:
socketpair(0x15, 0x3, 0x7fff, &(0x7f0000000180))
socket(0x17, 0x80000, 0x6)
r0 = socket(0x1e, 0x6, 0x5)
sendto$netrom(r0, &(0x7f0000000000)="eeb099e1f20c753056cc17d84610d91a7ea8c8db52e45c3089a2551f01917f60521819069b99c8e46fc9b4c90be3fd768ae38544017251a72a181602e3bd6ecdee691be296952c23125b8aa96c9c0fd31d2be9a26f1e58", 0x57, 0x40010, &(0x7f0000000080)={{0x3, @null, 0x7}, [@bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x8f000000, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x8f010000, &(0x7f0000000180))

00:37:29 executing program 0:
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x3, 0x4, 0x9, 0x7ff, '\x00', 0x3}, 0x0, [0x1, 0xd61a, 0x9, 0x8, 0x2, 0xfffffffffffffff7, 0x3, 0x9, 0xff, 0x8, 0x1, 0x200, 0x7fff, 0x8895, 0x1ff, 0x8, 0x14d09358, 0x1000, 0x5, 0x7, 0x0, 0xa73, 0x1, 0x8000, 0x4, 0x1, 0x200, 0x4, 0x4f96fb9c, 0x6, 0x0, 0x3f, 0xb5, 0x681, 0x8, 0x7, 0xfffffffffffffffb, 0x0, 0x6, 0x5223, 0x4cc, 0x1c, 0x401, 0x800, 0x5, 0x8, 0x7, 0x6, 0xb64c, 0x8001, 0x7f, 0x5, 0x10001, 0x3, 0x6, 0x7ff, 0x10000, 0xffffffff, 0x7, 0x401, 0x10000, 0x1, 0x9, 0x10000, 0x2, 0x69027ca5, 0x1f, 0x2, 0x6, 0x26fa, 0x1ff, 0x6, 0x200, 0x8000, 0x2, 0xfffffffffffffffe, 0x2, 0x3, 0xd44, 0x4, 0x3, 0x8, 0xfffffffffffffffe, 0x7fff, 0xffff, 0x1ff, 0x9, 0x0, 0x8000, 0x6, 0x1, 0x35, 0xfffffffffffffc01, 0x2, 0x1, 0x200, 0x10000, 0xa6, 0x56, 0x2, 0x8, 0x13e7, 0x5, 0x9, 0x5, 0x4, 0x847b, 0x2, 0xfffffffffffffffa, 0x4b, 0xf0, 0x1, 0x1f, 0x385f, 0x1, 0x7, 0x100000001, 0x1, 0xfdc, 0x8, 0xffffffff, 0x5, 0x80000000, 0x3, 0x401, 0x89a, 0x80, 0x80000001]})

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x90000000, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140)=<r0=>0x0)
getresgid(&(0x7f00000001c0), &(0x7f0000000200), &(0x7f0000000240)=<r1=>0x0)
getresgid(&(0x7f0000000280), &(0x7f00000002c0)=<r2=>0x0, &(0x7f0000000300))
getresgid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=<r3=>0x0)
setgroups(0xa, &(0x7f0000000400)=[r0, 0x0, 0xffffffffffffffff, r1, 0x0, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0xee01, r3])
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000000)={{0x0, 0x20}, 'port1\x00', 0x14, 0x20401, 0x2, 0x8, 0x95, 0x20, 0x4, 0x0, 0x2, 0xf5})

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x90010000, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x91000000, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x2c, 0x403, 0x0, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x2c, 0xa, 0x0, &(0x7f0000000000))
shmctl$IPC_STAT(0xffffffffffffffff, 0x2, &(0x7f0000000040)=""/4096)

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x91010000, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x92000000, &(0x7f0000000180))

00:37:29 executing program 0:
r0 = getpid()
getpgid(r0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0x8, 0x2, 0x0, 0x3, '\x00', 0xfffffffc}, 0x2, 0x40, 0x1, r1, 0x4, 0x7, 'syz0\x00', &(0x7f0000000000)=['!\x00', '^\x00', '/+,/*)*/\x00', '{\x00'], 0xf, [], [0x4, 0x1, 0x20e5, 0x7]})
getpgid(r0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x92010000, &(0x7f0000000180))

00:37:29 executing program 0:
rt_sigqueueinfo(0xffffffffffffffff, 0x30, &(0x7f0000000000)={0x10, 0x70, 0x8})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x93000000, &(0x7f0000000180))

00:37:29 executing program 0:
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x4000000)

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x93010000, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x21, 0x2, 0x80000001, &(0x7f0000000180))
socketpair(0x3, 0x5, 0xffffffff, &(0x7f00000003c0))
r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
recvmsg(r0, &(0x7f0000000380)={&(0x7f0000000000)=@xdp, 0x80, &(0x7f0000000280)=[{&(0x7f0000000080)=""/125, 0x7d}, {&(0x7f0000000100)=""/43, 0x2b}, {&(0x7f0000000140)=""/16, 0x10}, {&(0x7f00000001c0)=""/166, 0xa6}], 0x4, &(0x7f00000002c0)=""/159, 0x9f}, 0x40000003)

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x94000000, &(0x7f0000000180))

00:37:29 executing program 4:
socketpair(0x1, 0x3, 0x94010000, &(0x7f0000000180))

00:37:29 executing program 0:
socketpair(0x27, 0x3, 0x2, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="f38f9380f8afc8b91d85bcca5e453b53b014243d3e9dca76bbab9ded", 0x1c, <r1=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f00000000c0)={r1, 0x2a, &(0x7f0000000080)=""/42})

00:37:30 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r0, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/214, 0xd6}}, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
openat$ion(0xffffffffffffff9c, &(0x7f0000000300)='/dev/ion\x00', 0x640, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f0000000280)={0x0, 0xb88e, 0x2})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000380)='gtp\x00')
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x0, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_TID={0xc}, @GTPA_PEER_ADDRESS={0x8, 0x4, @multicast2}]}, 0x30}}, 0x4)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x1}, 'port1\x00', 0x7a, 0x11002, 0x0, 0x866, 0x7, 0x9, 0x8, 0x0, 0x2, 0x1})
socketpair(0x27, 0x3, 0x0, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x95000000, &(0x7f0000000180))

00:37:30 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x2)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040))
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x95010000, &(0x7f0000000180))

00:37:30 executing program 0:
r0 = socket(0x3, 0x5, 0x80000000)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x1000, 0x0)
getsockname$netrom(r0, &(0x7f00000001c0)={{0x3, @bcast}, [@default, @bcast, @netrom, @netrom, @remote, @default, @rose, @netrom]}, &(0x7f0000000000)=0x48)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x96000000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x1e, 0x6, 0x79, &(0x7f0000000000))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x96010000, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x97000000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4(r0, 0x0, &(0x7f0000000080), 0x0)
setgroups(0x3, &(0x7f00000000c0)=[0x0, 0xee00, 0xee00])
ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000000)=0x5)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x97010000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x2c, 0x6, 0xfffffff8, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x98000000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x27, 0x800, 0x2, &(0x7f0000000000))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x98010000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x1f, 0x1, 0x0, &(0x7f0000000180))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self\x00', 0x103201, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0)

00:37:30 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
socketpair(0x2b, 0x800, 0x3, &(0x7f0000000000))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x99000000, &(0x7f0000000180))

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x99010000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x5, 0x6, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4(r1, &(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, &(0x7f0000000180)=0x80, 0x80000)
getpeername$netrom(r0, &(0x7f0000000040)={{}, [@bcast, @default, @remote, @null, @bcast, @rose, @netrom, @null]}, &(0x7f00000000c0)=0x48)

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x9a000000, &(0x7f0000000180))

00:37:30 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x152, 0x152, 0x5, [@enum={0x7, 0x5, 0x0, 0x6, 0x4, [{0x9, 0x8cc}, {0x3, 0xf16f}, {0xc, 0x3}, {0x2, 0x1000}, {0xf, 0x10001}]}, @union={0x3, 0x5, 0x0, 0x5, 0x1, 0x3f, [{0x8, 0x5}, {0x0, 0x3, 0x3ff}, {0xd, 0x1, 0x4}, {0xa, 0x1, 0x4}, {0xb, 0x3, 0x4}]}, @func={0xb, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x3, 0x0, 0xd, 0x0, [{0xf, 0x5}, {0x6, 0x1}, {0xc, 0x2}]}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @datasec={0x10, 0x2, 0x0, 0xf, 0x3, [{0x1, 0xffffff7f, 0x6}, {0x5, 0x6eaa, 0x101}], "b0bebf"}, @datasec={0xe, 0x8, 0x0, 0xf, 0x3, [{0x3, 0x4a2e, 0x8001}, {0x3, 0x3, 0x30}, {0x1, 0x2, 0x422c}, {0x3, 0x5, 0x8}, {0x3, 0x80000000, 0x1}, {0x2, 0x101, 0x8}, {0x4, 0xffffffff, 0xffffffff}, {0x4, 0x5, 0x9}], "b270e6"}]}, {0x0, [0x30, 0x61, 0x0]}}, &(0x7f00000001c0)=""/183, 0x171, 0xb7}, 0x20)

00:37:30 executing program 4:
socketpair(0x1, 0x3, 0x9a010000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9b000000, &(0x7f0000000180))

00:37:31 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f0000000000)={0x81, 0x5, 0x0, 'queue0\x00', 0x6})

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9b010000, &(0x7f0000000180))

00:37:31 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r1, 0x800, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRET={0x4}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x240040b4}, 0x40040)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9c000000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9c010000, &(0x7f0000000180))

00:37:31 executing program 0:
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/110})
accept4(0xffffffffffffffff, &(0x7f00000003c0)=@can={0x1d, <r0=>0x0}, &(0x7f0000000440)=0x80, 0x800)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'team0\x00', <r1=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000700)={'team0\x00', <r2=>0x0})
r3 = accept4(0xffffffffffffffff, &(0x7f0000000780)=@can={0x1d, <r4=>0x0}, &(0x7f0000000800)=0x80, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001f80)={'team0\x00', <r6=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000028c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000002880)={&(0x7f0000000b40)=ANY=[@ANYBLOB="8c080000", @ANYRES16=0x0, @ANYBLOB="000f26bd7000fddbdf250300000008000100", @ANYRES32=0x0, @ANYBLOB="180202803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001006c625f74785f6d6574686f640000000000000000000000000000000000000000050003000500000009000400686173680000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400feffffff38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000050003000300000008000400050000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRESOCT, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000800000008000100", @ANYRES32=r1, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000300000008000100", @ANYRES32=r2, @ANYBLOB="6401028038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400000800003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c6564000000000000000000000000000000000000000000000000000500030306000000e900e2ff07000600", @ANYRES32=r4, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000600000008000100", @ANYRES32=r5, @ANYBLOB="6401028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100010038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000500000038000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ffffff7f40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004003e0c000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040003000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000000000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB="ec00028038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000100000038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000100010040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000500000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000700000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006d636173745f72656a6f696e5f636f756e74000000000000000000000000000005000300030000000800040000100000400001002400010071756575655f696400000000000000000000000000000000000000000000000005000300030000000800040033ee000008000600", @ANYRES32=0x0, @ANYBLOB], 0x88c}, 0x1, 0x0, 0x0, 0x800}, 0x80a0)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r7, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r7, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x48, 0x0, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0xf}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x20040040)
ioctl$SIOCNRDECOBS(r3, 0x89e2)

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9d000000, &(0x7f0000000180))

00:37:31 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r2, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x6, &(0x7f00000004c0)={0x3, &(0x7f0000000480)=[{0x81, 0x80, 0x1, 0xc1ef}, {0x7, 0x1, 0x81, 0x200}, {0x7, 0x4, 0x5, 0x160fa782}]})
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000300)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x84, r3, 0x2, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x8}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_DSTLEN={0x8}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3ff}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x11}}, @SEG6_ATTR_SECRET={0x8, 0x4, [0x3]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x1, 0x0, 0x1f]}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c040}, 0x8080)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000140)=0xdd)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setrlimit(0xc, &(0x7f0000000500)={0x0, 0x3})
ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r2, 0x300, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x40088d0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20000, 0x0)

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9d010000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9e000000, &(0x7f0000000180))

00:37:31 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@rose, @remote, @bcast, @null, @netrom, @null, @netrom, @null]}, &(0x7f0000000080)=0x48)

[ 1353.208344] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
[ 1353.238261] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'.
00:37:31 executing program 0:
r0 = getpgid(0x0)
r1 = getpgid(r0)
ptrace$setopts(0x4200, r1, 0x1, 0x10)
ptrace(0x8, r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x4, 0x6, 0x6, 0x7f, 'syz0\x00', 0x2}, 0x5, 0x40, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x8, 'syz1\x00', &(0x7f0000000000)=['\xf3\x00', '%\x00', 'i9\x00', '/\x00'], 0x9, [], [0x3, 0x5b, 0x1, 0x800]})

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9e010000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9f000000, &(0x7f0000000180))

00:37:31 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x440000)
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x3)
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x80)

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0x9f010000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0xa0000000, &(0x7f0000000180))

00:37:31 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0x7, 0x2, {0x0, 0x3, 0x40, 0x1, 0x6}, 0xf090})
socketpair(0x2c, 0x2, 0x0, &(0x7f0000000180))

00:37:31 executing program 0:
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
geteuid()
ioctl$VFIO_SET_IOMMU(0xffffffffffffffff, 0x3b66, 0x7)
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0xa0010000, &(0x7f0000000180))

00:37:31 executing program 4:
socketpair(0x1, 0x3, 0xa1000000, &(0x7f0000000180))

[ 1353.627705] audit: type=1326 audit(1603154251.830:391): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:31 executing program 4:
socketpair(0x1, 0x3, 0xa1010000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa2000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa2010000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa3000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa3010000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa4000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa4010000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa5000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa5010000, &(0x7f0000000180))

00:37:32 executing program 0:
r0 = shmget$private(0x0, 0x2000, 0x54000000, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/233)
socketpair(0xa, 0xa, 0x2, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa6000000, &(0x7f0000000180))

[ 1354.427533] audit: type=1326 audit(1603154252.630:392): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=19854 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa6010000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa7000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa7010000, &(0x7f0000000180))

00:37:32 executing program 0:
socketpair(0x15, 0x3, 0x0, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa8000000, &(0x7f0000000180))

00:37:32 executing program 4:
socketpair(0x1, 0x3, 0xa8010000, &(0x7f0000000180))

00:37:32 executing program 0:
geteuid()
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xa9000000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0xb, 0x4, 0x800, &(0x7f0000000040))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xa9010000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x2c, 0x3, 0x8, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x3, 0x4)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xaa000000, &(0x7f0000000180))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xaa010000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x6, 'syz1\x00', 0x3f})
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1, &(0x7f00000000c0)=""/166, 0xa6}, 0x4)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xab000000, &(0x7f0000000180))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xab010000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', <r1=>0x0})
accept4(r0, &(0x7f0000000d80)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00', <r3=>0x0})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=0x0, @ANYBLOB="04002dbd6200fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400533700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5002028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000ffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESDEC=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f706553f66572735f636f756e74000000000000000000000000000004000600000040000100240001007072696f7269747900000000b68ac7e37650401d775fba0000000000000000000000000000000000054463d72400000008", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xac000000, &(0x7f0000000180))

00:37:33 executing program 0:
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x1, 0x1, 0x2, 0x2, '\x00', 0x3}, 0x0, [0x5, 0x6, 0x7fffffff, 0x10001, 0x8000, 0x2, 0x3, 0x3, 0x3ff, 0x1, 0x8d9, 0x9, 0x3, 0x0, 0x20, 0x3, 0x1, 0x9, 0x101, 0x7, 0x5, 0xffffffff00000001, 0x615, 0x400, 0x0, 0x9, 0xffff, 0x4, 0x7fe, 0x10000, 0x10000, 0x7, 0x8, 0x200, 0x2, 0x100, 0x6, 0xff, 0xf7, 0xa0a0, 0x6, 0x49e, 0x2, 0x1, 0x2, 0x5, 0x6, 0x4, 0x6fb, 0x7, 0x3, 0x9, 0x0, 0x6, 0x100, 0x19, 0x1, 0x4, 0x10000, 0xa15, 0x9ac1, 0xfffffffffffffffe, 0x2, 0x6, 0x7, 0x2, 0x9, 0x1c, 0x1000, 0x6, 0x0, 0x68, 0x10000, 0x5, 0x6, 0x0, 0x2, 0x507, 0x1000, 0x7, 0x8, 0x0, 0x7, 0x97a, 0x5, 0x7, 0x7, 0x8, 0x2, 0x8000, 0x8, 0x6, 0x2, 0x2, 0x9, 0x100, 0xe6, 0x10, 0x7, 0x0, 0x200, 0x80000000, 0x2, 0x1, 0x2, 0x4, 0x2, 0x6e, 0x20, 0xfffffffffffffeff, 0x8, 0x0, 0x64f0aaff, 0x5a94, 0x1, 0x5e9, 0x1ff, 0x9, 0xfbcf, 0x800, 0x7, 0x0, 0x9, 0x1ff, 0x0, 0x1, 0x5, 0xc532]})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xac010000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f00000000c0)={0x17, 0x32a, 0xfffffff9, 0x200, 0x9c, 0xa6cf})
set_tid_address(&(0x7f0000000040))
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000100)={{0x40, 0x2}, {0x7, 0x2d}, 0x7, 0x6})
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000080)={0x3, 0x1, 0x8, 0x0, 'syz1\x00', 0x1ff})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x6, 0x1, 0x1ff, 0x7, 0x8, 0x4, 0x5d}, 0xc)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xad000000, &(0x7f0000000180))

00:37:33 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x8000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f0000000000)={0x0, 0x0, 'client0\x00', 0xe, "cd297202790a7669", "550e2bdf23644e60b981de8ec982910d9086fa3ebe7ad3b7b7c9fa00889c9c07", 0x400})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
recvmsg(r1, &(0x7f0000000680)={&(0x7f00000001c0)=@vsock={0x28, 0x0, 0x0, @local}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000240)=""/198, 0xc6}, {&(0x7f0000000340)=""/249, 0xf9}, {&(0x7f0000000440)=""/114, 0x72}, {&(0x7f00000004c0)=""/107, 0x6b}, {&(0x7f0000000540)=""/149, 0x95}], 0x5}, 0x12000)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f00000000c0)={0xffffffff, 0x1, 'client0\x00', 0x0, "c462cdb3cf1de0a4", "ae53a76432213771cd8f13bba46354ccb259f775a5c4bf6cfef05797433a8cd8", 0x1})
socket(0x27, 0x6, 0x1000)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xad010000, &(0x7f0000000180))

00:37:33 executing program 0:
sched_getparam(0x0, &(0x7f0000000000))
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f00000000c0)='/dev/snd/controlC#\x00')
socketpair(0x2c, 0x3, 0x1000000, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000100)="6dd10679e3867e43fdf4802e48a23b1f20acd30e84d48dbec6fd90b393092e665a4d6a84b8aab70fe513e26cd95aa52ea02e221960be0a9a5bca01fac24bf5b5041c3916d50a05e1a8968aebf5d02fc05b1fe4357e8067e0bae883600570332f7bfb6d169029469b62a6452a032a18cee653a933a84ab9ad3617ba1b18a7789bc993640b7521e76a5836568e2efb7a9e0787aed21a3a475e1a0797747ab95357dc74de54d17ef33755555a21e2b7b2bed6d9ebe7ad02a7eeb8b0172216d2", 0xbe)
syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x0)
setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f00000001c0)=0xac, 0x4)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xae000000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x4)

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xae010000, &(0x7f0000000180))

00:37:33 executing program 0:
socketpair(0x2b, 0x6, 0x20000, &(0x7f0000000180))

00:37:33 executing program 4:
socketpair(0x1, 0x3, 0xaf000000, &(0x7f0000000180))

00:37:33 executing program 0:
times(&(0x7f00000000c0))
socketpair(0x5, 0x6, 0x0, &(0x7f0000000000))
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp1\x00', 0x80a00, 0x0)

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xaf010000, &(0x7f0000000180))

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb0000000, &(0x7f0000000180))

00:37:34 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0xff, &(0x7f0000000040)=0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000080)=0xfff)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f00000000c0)=[{}, {}, {}, {<r3=>0x0}, {}]})
ioctl$DRM_IOCTL_UNLOCK(r2, 0x4008642b, &(0x7f0000000140)={r3, 0x2})

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb0010000, &(0x7f0000000180))

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', <r1=>0x0})
accept4(r0, &(0x7f0000000d80)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00', <r3=>0x0})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=0x0, @ANYBLOB="04002dbd6200fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400533700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5002028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000ffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESDEC=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f706553f66572735f636f756e74000000000000000000000000000004000600000040000100240001007072696f7269747900000000b68ac7e37650401d775fba0000000000000000000000000000000000054463d72400000008", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

00:37:34 executing program 2:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x40405514, &(0x7f0000000200)={0x0, 0x0, 0x4, 0x6, 'syz1\x00', 0x3f})
recvmsg(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=""/123, 0x7b}], 0x1, &(0x7f00000000c0)=""/166, 0xa6}, 0x4)

00:37:34 executing program 3:
socketpair(0xb, 0x4, 0x800, &(0x7f0000000040))

00:37:34 executing program 1:
r0 = getpid()
getpgid(r0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0x8, 0x2, 0x0, 0x3, '\x00', 0xfffffffc}, 0x2, 0x40, 0x1, r1, 0x4, 0x7, 'syz0\x00', &(0x7f0000000000)=['!\x00', '^\x00', '/+,/*)*/\x00', '{\x00'], 0xf, [], [0x4, 0x1, 0x20e5, 0x7]})
getpgid(r0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = socket(0xa, 0x6, 0xfff)
sendto$netrom(r0, &(0x7f0000000000)="c88f0f4da8f9d29937cdf2c6d19317406242403e73f982ec9ec27c08cd04a5c852cbd13fc31dad1945e7524fd4c72c849493ee6f9202564f7c17405ab77cde2f8b4b15ad6d75657c58c6f595e0c4b11e7973e43d2e87a7d3aaebe22ac4d38c3749d2f49e98d830b470545750e94f97f1ac47d1ad", 0x74, 0xc000, &(0x7f0000000080)={{0x3, @bcast, 0x6}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb1000000, &(0x7f0000000180))

00:37:34 executing program 1:
r0 = getpid()
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x800, 0x0)
accept$netrom(r1, &(0x7f0000000200)={{0x3, @null}, [@netrom, @netrom, @null, @bcast, @rose, @null, @netrom, @rose]}, &(0x7f0000000280)=0x48)
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x3, 0x2, 0x101, 0x2, '\x00', 0x7}, 0x3, 0x400, 0x8000, r0, 0x2, 0xfffff800, 'syz0\x00', &(0x7f0000000000)=['.-{+\'#%\x00', '+\'\xc6}:\x00'], 0xe, [], [0x200, 0x401, 0x6, 0x7]})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
getpeername$netrom(r2, &(0x7f00000002c0)={{}, [@rose, @default, @bcast, @rose, @netrom, @rose, @null, @null]}, &(0x7f0000000340)=0x48)

00:37:34 executing program 3:
socketpair(0x22, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 2:
socketpair(0x2c, 0x3, 0xee000000, &(0x7f0000000180))

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', <r1=>0x0})
accept4(r0, &(0x7f0000000d80)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00', <r3=>0x0})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=0x0, @ANYBLOB="04002dbd6200fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400533700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5002028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000ffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESDEC=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f706553f66572735f636f756e74000000000000000000000000000004000600000040000100240001007072696f7269747900000000b68ac7e37650401d775fba0000000000000000000000000000000000054463d72400000008", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

00:37:34 executing program 0:
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none}, &(0x7f0000000040)=0xe, 0x800)
r3 = accept4(r1, &(0x7f00000000c0)=@nfc_llcp, &(0x7f0000000140)=0x80, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f00000001c0)=0x200, &(0x7f0000000200)=0x2)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, &(0x7f0000000080)={0x7, 0xf5, 0x0, 0x5, 0x4, 0x3, 0x9}, 0xc)

00:37:34 executing program 2:
socketpair(0x1, 0x3, 0x5e010000, &(0x7f0000000180))

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb1010000, &(0x7f0000000180))

00:37:34 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:34 executing program 3:
socketpair(0x22, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00', <r1=>0x0})
accept4(r0, &(0x7f0000000d80)=@xdp={0x2c, 0x0, <r2=>0x0}, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00', <r3=>0x0})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000003480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000003440)={&(0x7f00000001c0)=ANY=[@ANYBLOB="28040000", @ANYRES16=0x0, @ANYBLOB="04002dbd6200fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="f400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040002000000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400533700003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5002028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000000ffff3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRESDEC=r4, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400ff00000038000100240001006e6f746966795f70656572735f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f706553f66572735f636f756e74000000000000000000000000000004000600000040000100240001007072696f7269747900000000b68ac7e37650401d775fba0000000000000000000000000000000000054463d72400000008", @ANYRES32=r2, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="b800028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000900000008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB], 0x428}, 0x1, 0x0, 0x0, 0x1}, 0x4080)

00:37:34 executing program 0:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x80000001, 0x400000)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb2000000, &(0x7f0000000180))

00:37:34 executing program 2:
socketpair(0x1, 0x3, 0x58000000, &(0x7f0000000180))

00:37:34 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})
accept4(r0, &(0x7f0000000d80)=@xdp, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00'})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)

00:37:34 executing program 3:
socketpair(0x22, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb2010000, &(0x7f0000000180))

00:37:34 executing program 0:
socketpair(0x2c, 0x2, 0xffffffff, &(0x7f0000000180))
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000040)=""/179)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
socketpair(0x18, 0x6, 0xff, &(0x7f0000001280)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f00000012c0)=0x1c0, 0x4)
ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x2)
r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ff6000/0x3000)=nil, 0x1800)
shmctl$SHM_INFO(r1, 0xe, &(0x7f00000001c0)=""/4096)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x1, &(0x7f00000011c0)={0x0, &(0x7f0000000140)})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x21000)
ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505331, &(0x7f0000001200)={{0x3f}, {0x8, 0x3}, 0x1ff, 0x1, 0x3})
shmget$private(0x0, 0x14000, 0x200, &(0x7f0000fec000/0x14000)=nil)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00')

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})
accept4(r0, &(0x7f0000000d80)=@xdp, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00'})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:34 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:34 executing program 1:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:34 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:34 executing program 4:
socketpair(0x1, 0x3, 0xb3000000, &(0x7f0000000180))

00:37:34 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})
accept4(r0, &(0x7f0000000d80)=@xdp, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00'})

00:37:35 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:35 executing program 0:
shmget$private(0x0, 0x4000, 0x10, &(0x7f0000ffc000/0x4000)=nil)
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000100)=""/97)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_LOCK(r1, 0xb)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000000c0)=0x5, 0x4)
socketpair(0x2c, 0x3, 0x6f59, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(0xffffffffffffffff, 0xc0a85322, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0x4, 0x9, 0x8e5, {0xe0, 0x20}, 0xfffffffa, 0x6})

00:37:35 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:35 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb3010000, &(0x7f0000000180))

00:37:35 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:35 executing program 0:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000080)={0x0, 0x0})
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))

00:37:35 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:35 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:35 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})
accept4(r0, &(0x7f0000000d80)=@xdp, &(0x7f0000000e00)=0x80, 0x81000)

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb4000000, &(0x7f0000000180))

00:37:35 executing program 1:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:35 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})

00:37:35 executing program 0:
socketpair(0x18, 0x2, 0x0, &(0x7f0000000040))

00:37:35 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:35 executing program 3:
socketpair(0x22, 0x0, 0x0, &(0x7f0000000180))

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb4010000, &(0x7f0000000180))

00:37:35 executing program 3:
socketpair(0x22, 0x0, 0x0, &(0x7f0000000180))

00:37:35 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})

00:37:35 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:35 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:35 executing program 0:
socketpair(0xa, 0xa, 0xfffffa5e, &(0x7f0000000000))

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb5000000, &(0x7f0000000180))

00:37:35 executing program 3:
socketpair(0x22, 0x0, 0x0, &(0x7f0000000180))

00:37:35 executing program 5:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180))

00:37:35 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:35 executing program 0:
socketpair(0x2c, 0x6, 0x0, &(0x7f0000000000))

00:37:35 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb5010000, &(0x7f0000000180))

00:37:35 executing program 3:
socketpair(0x22, 0x3, 0x0, 0x0)

00:37:35 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:35 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:35 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000140)=0x6, 0x4)

00:37:35 executing program 4:
socketpair(0x1, 0x3, 0xb6000000, &(0x7f0000000180))

00:37:35 executing program 1:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:36 executing program 3:
socketpair(0x22, 0x3, 0x0, 0x0)

00:37:36 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb6010000, &(0x7f0000000180))

00:37:36 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:36 executing program 0:
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x7ff)
socketpair(0x2c, 0x3, 0x800, &(0x7f0000000180))

00:37:36 executing program 3:
socketpair(0x22, 0x3, 0x0, 0x0)

00:37:36 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:36 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb7000000, &(0x7f0000000180))

00:37:36 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb704, 0x0)

00:37:36 executing program 0:
socketpair(0x23, 0x8, 0x1, &(0x7f0000000000))
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000040)={{0x7, 0x2, 0x9, 0x40, 'syz1\x00', 0x8}, 0x0, [0x3, 0x9, 0x100, 0x1ff, 0x3, 0x3, 0x2, 0x7f, 0x7, 0x5, 0x1000, 0x6, 0x9, 0x1ff, 0x0, 0x2, 0x3, 0x5, 0x2, 0x9, 0x8, 0x2, 0x1000, 0x1, 0x2263, 0x9, 0xe401, 0x7ff, 0x0, 0x0, 0x58, 0x7, 0xffffffffffffffff, 0x7ad, 0x9, 0x6, 0x8, 0x9, 0xfffffffffffffe79, 0xfffffffffffffff8, 0xfffffffffffffffd, 0x4, 0x80000001, 0x2, 0x81, 0x1, 0x6, 0x1ff, 0x0, 0x8001, 0x0, 0xffff, 0x100, 0x4, 0x100000001, 0xe616, 0x1, 0x4ef4634d, 0xfffffffe00000, 0x1, 0x8, 0x10001, 0x2, 0x6a, 0xfff, 0xffffffffffffff87, 0x1, 0x1, 0xc809, 0x4, 0x4, 0x9, 0xff, 0x3ff, 0x8a, 0x1ff, 0x0, 0x2, 0x80000000, 0x7, 0xda, 0x7f, 0x0, 0xe513, 0x3, 0xffffffff, 0x80000000, 0x6b, 0x81, 0x6, 0x1, 0x8, 0x0, 0x173, 0x7, 0x8000, 0x7fffffff, 0x7, 0x8, 0x9628, 0x7fdca442, 0x3, 0xffffffff, 0xf66, 0x1cc2, 0x0, 0xfffffffffffffffe, 0xe1, 0x8001, 0x2, 0x6, 0x1ff, 0x5, 0x3, 0x6, 0x3, 0x6, 0x9, 0x7fffffff, 0x200, 0xfffffffffffffffe, 0x3, 0x0, 0xc9c, 0x2d, 0x9, 0x6b85, 0x101]})

00:37:36 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb7010000, &(0x7f0000000180))

00:37:36 executing program 5:
socketpair(0x24, 0x0, 0x0, &(0x7f0000000180))

00:37:36 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:36 executing program 0:
socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000180))

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb8000000, &(0x7f0000000180))

00:37:36 executing program 1:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x8902, 0x0)

00:37:36 executing program 5:
socketpair(0x24, 0x0, 0x0, 0x0)

00:37:36 executing program 0:
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000200)={0x18, 0x0, 0x0, 0x3})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000140)={{0x6, 0x4}, 'port1\x00', 0x4, 0x0, 0x80000001, 0x1, 0x5, 0x81, 0x7, 0x0, 0x1, 0x80})
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x30001, 0x0)
r1 = getpid()
getpgid(r1)
sched_getparam(r1, &(0x7f0000000240))
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x100)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r3, 0xc08c5336, &(0x7f0000000280)={0x8, 0x9, 0x0, 'queue0\x00', 0x9})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
ioctl$VFIO_SET_IOMMU(r4, 0x3b66, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f00000000c0)=""/111)
socketpair(0x25, 0x1, 0xa7, &(0x7f0000000000))

00:37:36 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb8010000, &(0x7f0000000180))

00:37:36 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:36 executing program 5:
socketpair(0x24, 0x0, 0x0, 0x0)

00:37:36 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000140)=0x6, 0x4)

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb9000000, &(0x7f0000000180))

00:37:36 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:36 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb704, 0x0)

00:37:36 executing program 5:
socketpair(0x24, 0x0, 0x0, 0x0)

00:37:36 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000140)=0x6, 0x4)

00:37:36 executing program 4:
socketpair(0x1, 0x3, 0xb9010000, &(0x7f0000000180))

00:37:36 executing program 1:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x8902, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xba000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r4, 0x103, 0x3, &(0x7f0000000140)=0x6, 0x4)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xba010000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbb000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbb010000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbc000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbc010000, &(0x7f0000000180))

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbd000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbd010000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbe000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbe010000, &(0x7f0000000180))

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbf000000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xbf010000, &(0x7f0000000180))

00:37:37 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r0 = getpid()
getpgid(r0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xc0000000, &(0x7f0000000180))

00:37:37 executing program 4:
socketpair(0x1, 0x3, 0xc0010000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
getpid()
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc1000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc1010000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc2000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc2010000, &(0x7f0000000180))

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc3000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc3010000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc4000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc4010000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, 0x0, 0x3611c0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc5000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc5010000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc6000000, &(0x7f0000000180))

00:37:38 executing program 0:
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x0, 0x0)

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc6010000, &(0x7f0000000180))

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc7000000, &(0x7f0000000180))

00:37:38 executing program 4:
socketpair(0x1, 0x3, 0xc7010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xc8000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xc8010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xc9000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xc9010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xca000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xca010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcb000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcb010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcc000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcc010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcc020000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcd000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcd010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xce000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xce010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcf000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xcf010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd0000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd0010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd1000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd1010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd2000000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd2010000, &(0x7f0000000180))

00:37:39 executing program 4:
socketpair(0x1, 0x3, 0xd3000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd3010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd4000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd4010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd5000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd5010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd6000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd6010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd7000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd7010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd8000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd8010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd9000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xd9010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xda000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xda010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdb000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdb010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdc000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdc010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdd000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdd010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xde000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xde010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdf000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xdf010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe0000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe0010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe1000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe1010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe2000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe2010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe3000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe3010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe4000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe5000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe5010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe6000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe6010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe7000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe7010000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe8000000, &(0x7f0000000180))

00:37:40 executing program 4:
socketpair(0x1, 0x3, 0xe8010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xe9000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xe9010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xea000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xea010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xeb000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xeb010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xec000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xec010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xed000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xed010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xee000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xee010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xef000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xef010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf0000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf0010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf1000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf1010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf2000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf2010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf3000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf3010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf4000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf4010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf5000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf5010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf6000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf6010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf7000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf7010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf8000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf8010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf9000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xf9010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfa000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfa010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfb000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfb010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfc000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfc010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfd000000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfd010000, &(0x7f0000000180))

00:37:41 executing program 4:
socketpair(0x1, 0x3, 0xfe000000, &(0x7f0000000180))

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0xfe010000, &(0x7f0000000180))

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0xfeffffff, &(0x7f0000000180))

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0xff000000, &(0x7f0000000180))

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0xff010000, &(0x7f0000000180))

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0xfffffffe, &(0x7f0000000180))

00:37:42 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x400800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f00000001c0)={0x8000, 0x1, 0x1, 'queue0\x00', 0x98a})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000100)={0x5, 0x3, 0x7})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x6, 0x3, 0x1, 'queue1\x00', 0x5})

00:37:42 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x3)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:42 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bpq0='bpq0\x00', 0x8, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x9, 0x4, [@null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:42 executing program 4:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040))
socketpair(0x8, 0x2, 0x0, &(0x7f0000000080))

00:37:42 executing program 4:
getpid()
r0 = getpid()
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x8, 0x5, 0x7f, 0x7ff, 'syz0\x00', 0x3}, 0x6, 0x4, 0xc822, r0, 0x4, 0x1, 'syz0\x00', &(0x7f00000001c0)=['/-\x00', '\x00', '\\\x00', '!\x00'], 0x8, [], [0x8, 0x2, 0x2, 0x844]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000200))

00:37:42 executing program 4:
setsockopt$bt_l2cap_L2CAP_OPTIONS(0xffffffffffffffff, 0x6, 0x1, &(0x7f0000000040)={0x9, 0xba10, 0x81, 0x8c, 0x0, 0x1, 0x4}, 0xc)
socketpair(0x23, 0x2, 0x7, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000100)=0x21, 0x4)
accept4$bt_l2cap(r0, &(0x7f00000000c0), &(0x7f0000000080)=0xe, 0x80800)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x7)

00:37:42 executing program 4:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:42 executing program 4:
socket(0x15, 0x5, 0x9)
socketpair(0xa, 0x4, 0x7f, &(0x7f00000001c0)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_RMID(r1, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)={0x40, r2, 0x200, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x4044802}, 0x8000)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000140)=0x1, 0x4)
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f0000000640)=""/215)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f0000000000)={0x7ff})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="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"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4004812)

00:37:42 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:42 executing program 4:
socketpair(0x2, 0x80000, 0x0, &(0x7f0000000040))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x4e0c40, 0x0)

00:37:42 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
uname(&(0x7f0000000040)=""/255)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000200)={0xc4, 0x1, 0x6, 0x1, "ede7cd849f4403cacf33f8de8233b530c6b2e74458702f7facbe9cb5bdb32cf9e93fd63c457d0948fad7bf9612a31c351ff644369756af2cea9444493b694b446a6947d80f032fda9b7cbd1f69d0dd94cf4e71e50a496c29e454691738d419ab7da964b15cdc44820a39ebf7253a2d5d08bc49ea7bb6a0dea2008d287748e9a2c52cf85153195e0b7b0842d0bde6ae6f353785bc92d3f62de6cb071793d0f24eb5cac86a0c6ba20b294a670d"})

00:37:42 executing program 4:
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x3, 0x2, 0x8, 0xff, 'syz1\x00', 0x401}, 0x1, 0x100, 0xd0, 0xffffffffffffffff, 0x5, 0x2, 'syz0\x00', &(0x7f0000000000)=['7', ')(,\x00', '-$\x00', '&/\xab]\x00', '\x00'], 0xe, [], [0x3, 0x44, 0x40, 0x8]})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x107800, 0x0)
r1 = getpid()
getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000240)={{0x7, 0x3, 0x8, 0x6, 'syz0\x00', 0x200e615d}, 0x2, 0x40, 0x0, r1, 0x4, 0x3f, 'syz1\x00', &(0x7f0000000200)=['\'\x00', ':\x00', '-$\x00', 'syz1\x00'], 0xc, [], [0x8, 0x982, 0x2, 0x9]})
socketpair(0x1a, 0x3, 0x2, &(0x7f0000000180))
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

[ 1364.326114] audit: type=1326 audit(1603154262.530:393): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20763 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
shmctl$SHM_STAT_ANY(0xffffffffffffffff, 0xf, &(0x7f0000000000)=""/88)

[ 1365.126644] audit: type=1326 audit(1603154263.330:394): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=20763 comm="syz-executor.4" exe="/root/syz-executor.4" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:43 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x0, 0x401, 0x0, 'queue1\x00', 0xfab0})

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000000))

00:37:43 executing program 4:
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x2, 0x5, 0x1, 0x5, 'syz0\x00', 0x21c}, 0x1, 0x400, 0x10001, 0x0, 0x2, 0x80000001, 'syz1\x00', &(0x7f0000000000)=[']R\x00', '-^]():\xa8,}\xbe\\\'-^)-//)p\x00'], 0x18, [], [0x9, 0x0, 0x1, 0x8]})
ioctl$ASHMEM_SET_SIZE(0xffffffffffffffff, 0x40087703, 0xf580)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x490800, 0x0)

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x80000, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x1, 0x2, 0x5, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="240000006d92f955d79133a5a3e522f992f3e48a65", @ANYRES16=0x0, @ANYBLOB="000287000000ffdbdf2500000000080008000300000008000400ac1414bb"], 0x24}, 0x1, 0x0, 0x0, 0x4814}, 0x4800)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x4, 0x0)
accept4(r1, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f00000001c0)=0x80, 0x80000)

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x4, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40000, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x68, 0x0, 0x0, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_LINK={0x8}, @GTPA_O_TEI={0x8, 0x9, 0x3}, @GTPA_LINK={0x8}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @loopback}, @GTPA_NET_NS_FD={0x8, 0x7, r1}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @rand_addr=0x64010102}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x80)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000001c0)={{0x3, 0x3}, {0x3f, 0x40}, 0x10000, 0x5, 0x3})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x4, 0xbfa, 0x8, 0x8, 0x80000001]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40080}, 0x40000)

00:37:43 executing program 4:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x30, 0x2e, 0x61, 0x2e, 0x61, 0x30, 0x0, 0x30]}}, &(0x7f0000000140)=""/13, 0x22, 0xd, 0xffffffff}, 0x20)
r0 = getuid()
getresgid(&(0x7f0000000000)=<r1=>0x0, &(0x7f0000000040), &(0x7f0000000080))
r2 = getpgid(0x0)
r3 = getpid()
getpgid(r3)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f00000000c0)={{0x1, 0xee01, 0xee00, r0, r1, 0x5, 0x4}, 0x9, 0xfc3, 0x9, 0x9, r2, r3, 0x9})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x27, 0x5, 0xe5b6, &(0x7f0000000040)={<r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf2b843cc9b32bef6}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000002}, 0x8805)
accept4(r0, &(0x7f0000000080)=@rc={0x1f, @none}, &(0x7f0000000000)=0x80, 0x800)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$NBD_CLEAR_SOCK(r2, 0xab04)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000240)={{0xb7, 0xfa}, 'port0\x00', 0x4, 0x1a0000, 0x1, 0xeec1, 0x3, 0x3, 0x4, 0x0, 0x3, 0x81})

00:37:43 executing program 4:
sched_getscheduler(0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYRESHEX=r1, @ANYRES16=0x0, @ANYBLOB="010028bd7000fddbdf2502000000080002000300000008000300a3fc1a7d", @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x800)
socketpair(0x1a, 0x5, 0x1000000, &(0x7f0000000180)={<r3=>0xffffffffffffffff})
recvmsg(r3, &(0x7f0000000280)={&(0x7f00000001c0)=@ethernet={0x0, @broadcast}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000040)=""/8, 0x8}], 0x1, &(0x7f0000000240)=""/50, 0x32}, 0x2001)

00:37:43 executing program 4:
setsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x400, 0x4)

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x55f9, &(0x7f0000000000))

00:37:43 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000001c0)=""/4096)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0xc9, 0x8}, {0xce, 0x81}, 0x2, 0x1, 0xe})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:43 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x2, &(0x7f0000000180))
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f0000000000)={0xea, 0x0, {0xffffffffffffffff, 0x0, 0x1f, 0x1, 0x7fff}, 0x2})

00:37:43 executing program 4:
socketpair(0xf, 0x5, 0xfffffffb, &(0x7f0000000180))
openat$dsp1(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp1\x00', 0x400, 0x0)
getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f00000002c0)={{0xa, 0x2, 0x9, 0x10001, 'syz1\x00', 0x1}, 0x0, 0x3, 0x5, r1, 0x3, 0x1aa6fac, 'syz1\x00', &(0x7f0000000280)=['/dev/dsp1\x00', '\xfd\x00', '/dev/vcsa\x00'], 0x16, [], [0x8, 0x4, 0xf6ac, 0x2]})
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000005a0000005a000000030000000000000001000084ff0f00001000000003000000040000000600000001000084f50000000500000001000000010000000e0000000000000e0300000001000000010000000100000f020000000420000077000000070000000aba0000003000"], &(0x7f0000000480)=""/90, 0x77, 0x5a, 0x1}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f0000000200)={0x1, 0xfff, 0x0, 0x5, 0xfffffff7, 0x4})
accept4$netrom(r2, &(0x7f00000000c0)={{0x3, @netrom}, [@remote, @rose, @remote, @default, @netrom, @null, @null, @null]}, &(0x7f0000000140)=0x48, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(0xffffffffffffffff, 0x40a85321, &(0x7f0000000540)={{0x9, 0x43}, 'port0\x00', 0x6a, 0x1000, 0x2, 0xfff, 0x80000000, 0x3, 0x74, 0x0, 0x7, 0x9})

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)={{0xc1, 0x8}, 0x1, 0x4, 0x3, {0xc4, 0x1}, 0x1, 0x3})

00:37:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
accept4(r0, &(0x7f0000000000)=@in6, &(0x7f0000000080)=0x80, 0x80800)

00:37:43 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x8de1c0, 0x0)
wait4(0xffffffffffffffff, 0x0, 0x1000000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r0, 0x80045301, &(0x7f0000000040))

00:37:44 executing program 4:
socketpair(0x2, 0x3, 0xffffffef, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_PURGE_ALL_CACHES(r2, 0x770a, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000006c0)={0x4, 0x3f, 0x1, 'queue1\x00', 0x2})
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x4, 0x1, 0xfff, 0x5, '\x00', 0x8}, 0x1, [0x8, 0x2, 0xd3, 0x8, 0x5, 0x9, 0x0, 0x20, 0x1dc, 0x400, 0x7, 0x4, 0x8, 0x20, 0x4e, 0x4, 0x0, 0x0, 0x7, 0x0, 0x3, 0xfffffffffffffffe, 0x80000001, 0x7, 0x3f, 0x9, 0x5a0c, 0x8, 0x800, 0x400, 0x9, 0x2, 0xffffffff, 0xbb3e, 0x4, 0x1f, 0xff, 0x2cd, 0x73f, 0x9, 0x7fffffff, 0xffff, 0xff, 0x9, 0x81, 0xffffffff, 0x0, 0x1, 0xffffffff, 0xb59, 0x3, 0x7, 0x7, 0x0, 0x3, 0xb76, 0x36c, 0x9, 0x6, 0x74750850, 0x4, 0x7, 0x9e86, 0xffffffff, 0x8, 0x8000, 0x1, 0xc05, 0x4, 0x10001, 0x100000000, 0x7, 0xfff, 0x6, 0x1ff, 0x1000, 0xfffffffffffff801, 0x1, 0xe97a, 0x9, 0x9, 0x1, 0x2, 0x1, 0x6, 0x8, 0x7ff, 0x9, 0xb18, 0x100000001, 0xff, 0x80000001, 0xd9b6, 0x7f, 0xffffffff, 0x7ff, 0x1, 0x8000000000, 0x3, 0x20, 0x10000, 0x7ffffffe, 0x0, 0x1, 0x0, 0x8001, 0x6, 0xfff, 0x200, 0x8000, 0x3, 0x6, 0x0, 0x6, 0xffffffffffff8000, 0xfff, 0x0, 0x26ab, 0x2, 0x1, 0x1000, 0x3, 0x9, 0x4, 0xffffffffffffffff, 0xa6000000000, 0x4, 0x100]})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000780)={0x1f, 0x4, @fixed={[], 0x10}, 0x1, 0x1}, 0xe)
ioctl$SNDCTL_DSP_SETFRAGMENT(r3, 0xc004500a, &(0x7f0000000140)=0x1a9)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="05000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x400c086}, 0x40)

00:37:44 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000001c0)={0xff, 0x5, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f00000000c0)={{0x2}, 'port0\x00', 0x8, 0x800, 0xffffff8d, 0x2, 0x100, 0x6, 0x7ff, 0x0, 0x1, 0x1f})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x3d16, 0x8001, 0x0, 'queue0\x00', 0x86e4})
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x0, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{0x4, 0x0, 0x9e, 0xec}, {0x3, 0x91, 0x80, 0x8}, {0x1ff, 0x0, 0x2, 0x2}, {0x7ff, 0x9d, 0xe4, 0x40}]})
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f0000000900)={&(0x7f0000000640)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/8, 0x8}, {&(0x7f0000000d80)=""/4096, 0x1000}, {&(0x7f0000000700)=""/253, 0xfd}, {&(0x7f0000000800)=""/101, 0x65}], 0x4, &(0x7f00000008c0)=""/9, 0x9}, 0x2000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
recvmsg(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000080)=""/247, 0xf7}, {&(0x7f00000001c0)=""/141, 0x8d}, {&(0x7f0000000280)=""/132, 0x84}, {&(0x7f0000000340)=""/40, 0x28}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/133, 0x85}], 0x6, &(0x7f0000000540)=""/170, 0xaa}, 0x40)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000001d80)={{0x0, 0x2, 0x6affc26a, 0x8, 'syz1\x00', 0x7}, 0x1, [0x8, 0x10000, 0xfff, 0x2, 0x8, 0x597, 0x1, 0x99b, 0x6, 0xfff, 0x100000000, 0x1, 0x4, 0x7, 0x3, 0x0, 0x8000, 0x8, 0xfff, 0x9, 0x3, 0x0, 0xd8, 0x5, 0x7da, 0x0, 0x4, 0x0, 0x100, 0x0, 0xaf, 0x1ff, 0x0, 0x0, 0x0, 0xf8, 0x0, 0x6, 0x2, 0x2, 0x9, 0x4, 0x6, 0x200, 0x4, 0x7, 0x6, 0x7ff, 0x9b, 0xca, 0x200, 0x10001, 0x44, 0x5, 0x7, 0xff, 0x400, 0x1, 0x0, 0x0, 0x81, 0x400, 0x0, 0x100, 0xffffffff, 0x5fe, 0x4, 0x4, 0x7, 0x7fff, 0x4, 0x5, 0xfffffffffffffff9, 0x1, 0xb0e, 0x2, 0x6, 0x3, 0x2, 0x1, 0x9, 0x26f, 0x4, 0x8, 0xfffffffffffffe01, 0x5, 0x9, 0xc0, 0x7, 0x4, 0x100000001, 0xfffffffffffffffe, 0x5f, 0xfffffffffffffc11, 0x3ff, 0x6, 0x20, 0x8, 0x8, 0xeb3, 0x2, 0x1, 0x2, 0xfffffffffffff801, 0x400, 0x8, 0x6, 0xf9d, 0x2, 0x0, 0x100000000, 0x100000000000000, 0xffff, 0x19c0000000000000, 0x7fffffff, 0x3, 0x7ff, 0x2, 0x400, 0x1, 0x5, 0x1, 0x1, 0x83, 0x0, 0x1, 0x5, 0x8001]})
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
getuid()
shmctl$IPC_RMID(r1, 0x0)

00:37:44 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x5, 0x40, 0x0, 0x6c, 0xbf, 0x5}, 0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0xf, 0x80000, 0x80000, &(0x7f0000000000))

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socket(0x6, 0x5, 0xd5)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x2, 0x6, 0x1000, 0x14, 'syz1\x00', 0xc958}, 0x1, [0x3, 0xffffffff, 0x100000001, 0xcf62, 0x5, 0x4, 0x7, 0x8, 0x2, 0x5, 0x3, 0x2, 0x9, 0x4, 0x3ff, 0xa00, 0xfffffffffffffff8, 0x7, 0x7fffffff, 0x9, 0x4000000000000000, 0x8, 0xffffffffcb4a26c8, 0x900000000000000, 0x7, 0x5, 0xffffffff7fffffff, 0x5be, 0x8, 0x5, 0x4e54ccaf, 0xff, 0x3, 0xfffffffffffffffb, 0x3, 0x10000, 0x7b01, 0xeb, 0x293, 0xff, 0x400, 0x7fff, 0x2, 0x3, 0x62d2, 0x44, 0x5, 0x8, 0x81, 0x7, 0x1f, 0x6, 0x600000, 0x7, 0x10000, 0x0, 0x100000000000, 0x0, 0x5, 0x1, 0x6, 0x1ff, 0x400, 0x400, 0x1000, 0x6, 0x1000, 0xfff, 0x1, 0x5, 0xdd9, 0xffffffffffffff7e, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0xffffffffffffff81, 0x9, 0x5, 0x1, 0x100000000, 0xfffffffffffffff9, 0x1f, 0x4, 0x20, 0x4, 0x0, 0x1, 0x21, 0xffffffffffffffe1, 0xd07, 0x8, 0x0, 0x1f, 0x200, 0x9c9, 0x9, 0x3, 0xb7, 0x5, 0xf63b, 0x7f, 0x8, 0x1, 0x915, 0xfffffffffffffff7, 0x7f, 0x2, 0x6, 0x3ff, 0x1, 0xac28, 0x40, 0x8, 0x7fff, 0x4, 0x0, 0x4, 0xa36, 0x4, 0x1, 0x8, 0x80000000]})

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x10000, 0x0)

00:37:44 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x8, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x10000}, 0x8)
socketpair(0x22, 0x3, 0xfffffffd, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x4, 0x3, 0x100, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x28, 0x800, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000000c0)=0x1, 0x4)
r4 = accept4(r1, 0x0, &(0x7f0000000000), 0x80000)
bind$netrom(r0, &(0x7f0000000100)={{0x3, @default}, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48)
bind$netrom(r4, &(0x7f0000000040)={{0x3, @null, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_LOCK(r2, 0xb)

00:37:44 executing program 4:
accept4$netrom(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @default}, [@remote, @default, @remote, @null, @null, @rose, @netrom, @netrom]}, &(0x7f0000000140)=0x48, 0x80000)
socketpair(0x1, 0x3, 0x3, &(0x7f0000000180))

00:37:44 executing program 4:
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4)
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x13, 0x145840)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000080)=""/109)

00:37:44 executing program 4:
socketpair(0x22, 0x80000, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff})
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000040)=0x9463)
accept4(r0, &(0x7f00000000c0)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000140)=0x80, 0x80800)

00:37:44 executing program 4:
socketpair(0x1f, 0x5, 0xfffffffe, &(0x7f0000000180))

00:37:44 executing program 4:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4)

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000000)=0x4, 0x4)

00:37:44 executing program 4:
r0 = shmget$private(0x0, 0x5000, 0x10, &(0x7f0000ffa000/0x5000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/75)

00:37:44 executing program 4:
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000000)={0x81, 0xfffffffc, 0x9f9d, 0xfffffc2d, [], [], [], 0x8000, 0x9, 0x4, 0xfffffffe, "b39289fc9eb4be737cc54f9c60766acb"})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r0, 0x7709, 0x0)
recvmsg(r0, &(0x7f0000000200)={&(0x7f0000000000)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000080)=""/10, 0xa}, {&(0x7f00000000c0)=""/81, 0x51}], 0x2, &(0x7f00000001c0)=""/47, 0x2f}, 0x10000)

00:37:44 executing program 4:
socketpair(0x1, 0x80000, 0x9, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000000)=0x3)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x2001, 0x0)
ioctl$NBD_SET_SIZE(r0, 0xab02, 0x5b)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000040)={0x1}, 0x8)

00:37:44 executing program 4:
socketpair(0x0, 0x800, 0xfffffffe, &(0x7f0000000000))

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$dri(&(0x7f00000002c0)='/dev/dri/card#\x00', 0x101, 0x2000)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000340)={0x1, &(0x7f0000000300)=[{}]})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
recvfrom$netrom(r1, &(0x7f0000000000)=""/110, 0x6e, 0x10022, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0xe02, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004811}, 0x4000)

00:37:44 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_UNLOCK(r0, 0xc)
shmctl$SHM_LOCK(r0, 0xb)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socket(0x10, 0x1, 0x3)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x70, 0x0, 0x400, 0x70bd2b, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @local}, @SEG6_ATTR_DST={0x14, 0x1, @empty}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x4}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x3}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @private2}]}, 0x70}, 0x1, 0x0, 0x0, 0x2400c840}, 0x4050)

00:37:44 executing program 4:
getpgid(0x0)
socketpair(0x27, 0x3, 0x0, &(0x7f0000000000))

00:37:44 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x72240, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000040)={0x2, @tick=0x80000000, 0x0, {0x81, 0xfd}, 0x1f, 0x1, 0xa5})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x1f, 0x6, 0xf7ffffff, &(0x7f0000000180))

00:37:44 executing program 4:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
r1 = getuid()
shmctl$IPC_SET(r0, 0x1, &(0x7f0000000000)={{0x1, r1, 0xffffffffffffffff, 0x0, 0x0, 0x20, 0x9}, 0x1, 0xfffffffffffff954, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x7})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$ASHMEM_PURGE_ALL_CACHES(0xffffffffffffffff, 0x770a, 0x0)

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)='ns/cgroup\x00')

00:37:44 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000000)={0x2, 0xe830, 0x6, {0xe0000000, 0x100}, 0x20000000, 0xd8e})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
recvfrom$netrom(r1, &(0x7f0000000080)=""/27, 0x1b, 0x140, 0x0, 0x0)

00:37:44 executing program 4:
socketpair(0x1, 0xa, 0x8, &(0x7f0000000080))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcsa\x00', 0x202, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r2, 0xc08c5336, &(0x7f00000000c0)={0x8, 0x7ff, 0x0, 'queue0\x00', 0x81})
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000040))
ioctl$DRM_IOCTL_NEW_CTX(r0, 0x40086425, &(0x7f0000000000))

00:37:44 executing program 4:
socketpair(0x1, 0x5, 0x4, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000000080)={{0x4, 0xff}, 'port0\x00', 0x0, 0x804, 0xffff45b3, 0xfffffffa, 0x7, 0xfee, 0x800, 0x0, 0x2, 0x48})
uname(&(0x7f0000000000)=""/65)
getresuid(&(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)

00:37:44 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x4d, 0xff, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:44 executing program 4:
socketpair(0x1, 0x2, 0x7, &(0x7f0000000180))

00:37:44 executing program 4:
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_NAME(r0, 0x81007702, &(0x7f0000000080)=""/136)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000040))

00:37:45 executing program 4:
shmget$private(0x0, 0x1000, 0x54000000, &(0x7f0000ffd000/0x1000)=nil)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x111000, 0x0)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)

00:37:45 executing program 4:
socketpair(0x1, 0x6, 0x3, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = getpid()
getpgid(r0)
r1 = getpid()
getpgid(r1)
getpgid(r1)

00:37:45 executing program 4:
openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='io.bfq.weight\x00', 0x2, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f00000001c0)={{0x7f, 0x2}, {0x19, 0x4}, 0x200, 0x2, 0x40})
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="d9af2b5961b763e3e562da9a168f8324ab2d46dc277956dff99699b5c81424040ae8739a309e0553e164a57ce6a06fa068efa4538c1b0abf7f65c96471320b95698073598b7b4f4d7ea8be4b52884a053918145150c4d2362b24febe5c4c6790a70f740a9e70940b33", @ANYRES16=0x0, @ANYBLOB="100025bd7000fcdbdf2504000000080002000200000008000200000000002400018008000700", @ANYRES32=0x0, @ANYBLOB='\b\x00\a\x00', @ANYRES32=0x0, @ANYRES16=r1, @ANYRESDEC, @ANYBLOB="080003000600000008000200030000000800030004000000"], 0x6c}, 0x1, 0x0, 0x0, 0x10084}, 0x400400d0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x9, &(0x7f0000000080)=0x2)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socketpair(0x1f, 0x80000, 0x4, &(0x7f0000000000))

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x280003, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x2)

00:37:45 executing program 4:
socketpair(0x9, 0x0, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={0x0, &(0x7f0000000040)=""/116})
ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x10000)

00:37:45 executing program 4:
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x23})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x0, 0x3, 0x3, &(0x7f0000000000))

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_RMID(r0, 0x0)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socketpair(0xf, 0x2, 0x5, &(0x7f0000000000))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000040)={{0x4, 0x9}, 'port0\x00', 0x4a, 0x10010, 0xffff, 0x3, 0x7, 0xf3, 0x7, 0x0, 0x2, 0x3})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x4, 0x7f}, {0x1}, 0x4, 0x6, 0x6})

00:37:45 executing program 4:
socketpair(0x22, 0x3, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x2000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000040)={0x2d6, 0x8, 0xfffffffe, {0x1000, 0x9c}, 0x5, 0x80})
r1 = socket(0x11, 0x80804, 0x10000)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xac, r2, 0x8, 0x70bd2a, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xf3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20008004)
socket(0x0, 0xa, 0x7ff)

00:37:45 executing program 4:
socketpair(0x27, 0x3, 0x3, &(0x7f0000000040))

00:37:45 executing program 4:
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1000, 0x110480)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x97)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000))

00:37:45 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x4800, @none, 0x9}, 0xe)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x7ff}, 0x8)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x80000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r1, 0xc058534f, &(0x7f00000001c0)={{0x89, 0x9}, 0x1, 0x80, 0x4, {0x5, 0x4}, 0x25, 0x2})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000080)={0xfffffc01, 0x0, 0x0, 'queue0\x00', 0x7fffffff})

00:37:45 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r2=>0x0})
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r0, 0xc008551c, &(0x7f0000000080)={0x0, 0x8, [0x3f, 0x2]})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x104, r1, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}]}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xe6456d718b8ccdae}]}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x104}, 0x1, 0x0, 0x0, 0x4000080}, 0x10)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socket(0x15, 0x80000, 0x96)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x440801, 0x0)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000000)={0x0, 0x2})
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x7, @fixed={[], 0x10}, 0x3, 0x2}, 0xe)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
recvmsg(r2, &(0x7f00000013c0)={&(0x7f00000001c0)=@xdp, 0x80, &(0x7f0000001380)=[{&(0x7f0000000240)=""/101, 0x65}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f00000012c0)=""/168, 0xa8}, {&(0x7f0000000140)=""/10, 0xa}], 0x4}, 0x41)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd5}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4a}]}]}, 0x5c}}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000001580)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001540)={&(0x7f0000001500)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4044083}, 0x8000)
accept$netrom(r2, &(0x7f0000001400)={{0x3, @rose}, [@null, @default, @default, @default, @null, @netrom]}, &(0x7f0000001480)=0x48)

00:37:45 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x621000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x5c, 0x0, 0x10, 0x70bd2c, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_I_TEI={0x8}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @dev={0xac, 0x14, 0x14, 0x29}}]}, 0x5c}}, 0x20004001)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000600)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x28, 0x0, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0x28}}, 0x10)

00:37:45 executing program 4:
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000000)=""/43)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x1000, &(0x7f0000ffc000/0x2000)=nil)
shmctl$SHM_LOCK(r1, 0xb)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x8, 0x7, 0x1, 0x9, 0x6, 0x2})
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='p\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="050000000000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400000000000800070000000000"], 0x60}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002200)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002280)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002600)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002640)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002680)={'team0\x00', <r10=>0x0})
recvmsg(r0, &(0x7f0000002d40)={&(0x7f00000026c0)=@xdp={0x2c, 0x0, <r11=>0x0}, 0x80, &(0x7f0000002bc0)=[{&(0x7f0000002740)=""/88, 0x58}, {&(0x7f00000027c0)}, {&(0x7f0000002800)=""/153, 0x99}, {&(0x7f00000028c0)=""/242, 0xf2}, {&(0x7f00000029c0)=""/201, 0xc9}, {&(0x7f0000002ac0)=""/195, 0xc3}], 0x6, &(0x7f0000002c40)=""/228, 0xe4}, 0x20)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000005b00)={'team0\x00', <r12=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000005b40)={'team0\x00', <r13=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f00000063c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000006380)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8070000", @ANYRES16=r3, @ANYBLOB="00025e5a0000fbdbdf250300000008000100", @ANYRES32=r4, @ANYBLOB="9801028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000300000008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e0000000800040017e6000008000600", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="4400028040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e00000008000400feffffff08000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="c000028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="3c000100240001007b7365725f6c696e6b757000000000000000000000000000000000c0f500000400040008000600"/60, @ANYRES32=r5, @ANYBLOB="40000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000080000008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004008000000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004000300000008000100", @ANYRES32=r9, @ANYBLOB="800002803c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000100000008000600", @ANYRES32=r11, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="5c02028040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b000000080004000600000008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000500030003000000080004000100008040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000050003000b0000000800040007000000080006004fd2627b6356ada3b933765c9de7c2d6d97fcea073604840493b29485f943626a0016bd9f264e7d936c892bbb8fc5b9c753fd05a9679ef180a285d13999bd73647751619fdad28322c6772963234360832bb15c8d0ac8f53cbcaf5394b270781dc3c2ae8d89fb309", @ANYRES32=0x0, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000005000300050000000900040068617368000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c0000000000000000000000050003000300000008000400010000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="b3dab1827109194e59fba43d3773cd18a7e1fe51b496a4a31ccb626ea554d3d7c379e40e"], 0x7d8}, 0x1, 0x0, 0x0, 0x1}, 0x0)

00:37:45 executing program 4:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x226682)
socketpair(0x1, 0x3, 0x7ff, &(0x7f0000000040))

00:37:45 executing program 4:
socketpair(0x1, 0x2, 0x0, &(0x7f0000000180))

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x280003, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x2)

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x280003, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x2)

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x280003, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000380)=0x6, &(0x7f00000003c0)=0x2)

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcsa\x00', 0x280003, 0x0)

00:37:45 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x204800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000080)=0x40, &(0x7f00000000c0)=0x4)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x21, 0x80000, 0x5de6, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x80000, 0x5de6, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x5de6, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:46 executing program 4:
socketpair(0x0, 0x0, 0x0, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:47 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x4d, 0xff, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="05000200060000003000018008000300ac1414aa14000400fc0100000000000000000000d8f0c2565906ca6500000000060005004e220000050002005f00000008000200030000000800020002000000313a29d2c502bd72f041de8562e1595ebf4f9a2a5a2c31cdb7d6ce837fa3e6434108d2df665b01f5bf91f75e587728cea8492dffa5503825a7cb1ef74810e31ec7be3447838f6344665094983c8c9e57aced06c8ef1dc4298745191bd5bc389a321ea8073c33225223c0321e71d6c72bfe4a72f3acc0d39b79ac6a77bada2c569755341d57bb5ba27b1d3f2afb3f00c95c021d8de7f83c36715168e89b1ed0344b130ebb57043ff551c882db5b5dee040b"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4)

00:37:47 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
socket(0x6, 0x5, 0xd5)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x2, 0x6, 0x1000, 0x14, 'syz1\x00', 0xc958}, 0x1, [0x3, 0xffffffff, 0x100000001, 0xcf62, 0x5, 0x4, 0x7, 0x8, 0x2, 0x5, 0x3, 0x2, 0x9, 0x4, 0x3ff, 0xa00, 0xfffffffffffffff8, 0x7, 0x7fffffff, 0x9, 0x4000000000000000, 0x8, 0xffffffffcb4a26c8, 0x900000000000000, 0x7, 0x5, 0xffffffff7fffffff, 0x5be, 0x8, 0x5, 0x4e54ccaf, 0xff, 0x3, 0xfffffffffffffffb, 0x3, 0x10000, 0x7b01, 0xeb, 0x293, 0xff, 0x400, 0x7fff, 0x2, 0x3, 0x62d2, 0x44, 0x5, 0x8, 0x81, 0x7, 0x1f, 0x6, 0x600000, 0x7, 0x10000, 0x0, 0x100000000000, 0x0, 0x5, 0x1, 0x6, 0x1ff, 0x400, 0x400, 0x1000, 0x6, 0x1000, 0xfff, 0x1, 0x5, 0xdd9, 0xffffffffffffff7e, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x5, 0x0, 0x8, 0xffffffffffffff81, 0x9, 0x5, 0x1, 0x100000000, 0xfffffffffffffff9, 0x1f, 0x4, 0x20, 0x4, 0x0, 0x1, 0x21, 0xffffffffffffffe1, 0xd07, 0x8, 0x0, 0x1f, 0x200, 0x9c9, 0x9, 0x3, 0xb7, 0x5, 0xf63b, 0x7f, 0x8, 0x1, 0x915, 0xfffffffffffffff7, 0x7f, 0x2, 0x6, 0x3ff, 0x1, 0xac28, 0x40, 0x8, 0x7fff, 0x4, 0x0, 0x4, 0xa36, 0x4, 0x1, 0x8, 0x80000000]})

00:37:47 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x5, 0x40, 0x0, 0x6c, 0xbf, 0x5}, 0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

00:37:47 executing program 0:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r0, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_INFO(r0, 0xe, &(0x7f00000001c0)=""/4096)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000000)={{0xc9, 0x8}, {0xce, 0x81}, 0x2, 0x1, 0xe})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x5, 0x40, 0x0, 0x6c, 0xbf, 0x5}, 0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

00:37:47 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:47 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x4d, 0xff, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 0:
getpid()
r0 = getpid()
getpgid(r0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f0000000040)={{0x8, 0x5, 0x7f, 0x7ff, 'syz0\x00', 0x3}, 0x6, 0x4, 0xc822, r0, 0x4, 0x1, 'syz0\x00', &(0x7f00000001c0)=['/-\x00', '\x00', '\\\x00', '!\x00'], 0x8, [], [0x8, 0x2, 0x2, 0x844]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
syz_genetlink_get_family_id$mptcp(&(0x7f0000000000)='mptcp_pm\x00')
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(0xffffffffffffffff, 0xc02c5341, &(0x7f0000000200))

00:37:47 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000000))

00:37:47 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4)

00:37:47 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x1, 0x5, 0x40, 0x0, 0x6c, 0xbf, 0x5}, 0xc)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:47 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x4d, 0xff, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:47 executing program 4:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

00:37:47 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f0000000000)=0x1f, 0x4)

00:37:47 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)

00:37:47 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 4:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

00:37:48 executing program 0:
socketpair(0x1, 0x3, 0xbc000000, &(0x7f0000000180))

00:37:48 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 4:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000000))

00:37:48 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)

00:37:48 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

00:37:48 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

00:37:48 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 0:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x90300, 0x0)
shmctl$IPC_INFO(0xffffffffffffffff, 0x3, &(0x7f0000000240)=""/230)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 4:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000000))

00:37:48 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 4:
socketpair(0x1, 0x1, 0x0, 0x0)

00:37:48 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 4:
socketpair(0x1, 0x1, 0x0, 0x0)

00:37:48 executing program 0:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x501000, 0x0)
socketpair(0x2c, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x4440)
r1 = getpid()
r2 = getpgid(r1)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x5, 0x0, 0x7, 0x1, 'syz1\x00', 0x5}, 0x1, 0x1, 0x5, r1, 0x0, 0x8, 'syz0\x00', &(0x7f0000000080), 0x0, [], [0x9, 0xfb28, 0xc2a, 0x7]})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000300)={0x7fff, 0x0, 0x8, 0x4000001, &(0x7f00000003c0)})
getpid()
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sched_getparam(r2, &(0x7f0000000380))
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self\x00', 0x3611c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f0000000080)=0x9, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:48 executing program 2:
openat$vcsa(0xffffffffffffff9c, 0x0, 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x0, 0xff, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="05000200060000003000018008000300ac1414aa14000400fc0100000000000000000000d8f0c2565906ca6500000000060005004e220000050002005f00000008000200030000000800020002000000313a29d2c502bd72f041de8562e1595ebf4f9a2a5a2c31cdb7d6ce837fa3e6434108d2df665b01f5bf91f75e587728cea8492dffa5503825a7cb1ef74810e31ec7be3447838f6344665094983c8c9e57aced06c8ef1dc4298745191bd5bc389a321ea8073c33225223c0321e71d6c72bfe4a72f3acc0d39b79ac6a77bada2c569755341d57bb5ba27b1d3f2afb3f00c95c021d8de7f83c36715168e89b1ed0344b130ebb57043ff551c882db5b5dee040b"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:48 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:48 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 4:
socketpair(0x1, 0x1, 0x0, 0x0)

00:37:48 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x7, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:48 executing program 0:
socketpair(0x1, 0x3, 0xb9010000, &(0x7f0000000180))

00:37:48 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="05000200060000003000018008000300ac1414aa14000400fc0100000000000000000000d8f0c2565906ca6500000000060005004e220000050002005f00000008000200030000000800020002000000313a29d2c502bd72f041de8562e1595ebf4f9a2a5a2c31cdb7d6ce837fa3e6434108d2df665b01f5bf91f75e587728cea8492dffa5503825a7cb1ef74810e31ec7be3447838f6344665094983c8c9e57aced06c8ef1dc4298745191bd5bc389a321ea8073c33225223c0321e71d6c72bfe4a72f3acc0d39b79ac6a77bada2c569755341d57bb5ba27b1d3f2afb3f00c95c021d8de7f83c36715168e89b1ed0344b130ebb57043ff551c882db5b5dee040b"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 4:
socketpair(0x24, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000000)=[0x9, 0x1f, 0x10000], &(0x7f0000000040)=[0x3f, 0x400, 0x9, 0x1], 0xfee1e9280319bad6, 0x3, 0x80003f, &(0x7f0000000080)=[0x4, 0xb30a, 0x1], &(0x7f00000000c0)=[0xfffffff7]})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000d40)={'team0\x00'})
accept4(r0, &(0x7f0000000d80)=@xdp, &(0x7f0000000e00)=0x80, 0x81000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002fc0)={'team0\x00'})

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xaf, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:49 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:49 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:49 executing program 1:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 4:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:49 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:49 executing program 4:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:49 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:49 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:49 executing program 4:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:49 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 4:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:49 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 1:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:49 executing program 4:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:49 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180))

00:37:49 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:49 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:49 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:49 executing program 4:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:49 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:50 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb703, 0x0)

00:37:50 executing program 2:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 4:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb702, 0x0)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:50 executing program 2:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:50 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180))

00:37:50 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:50 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:50 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:50 executing program 2:
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f0000000100))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb703, 0x0)

00:37:50 executing program 4:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb702, 0x0)

00:37:50 executing program 1:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:50 executing program 4:
r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000100))
sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="90000000", @ANYRES16=r0, @ANYBLOB="00b5000008000300040000102c00018008000600feff00070000000000000000000000000000000040ac68060446d227001e2c1623ec6b5242072cb45ee64dda702d1836cb709e584a153bcae5c03d662180676d386712a11acef94bc73ba110c370998782a13181891b31155ea59edc48af512cfbe89a59983499e6389fe8cc7d7aa3acda2331b28e23af07e18a48c747bd5f91311e36ad3ed0bc1ce029352343bb7c0ecec5afff8cd658939f91364741d5fe22ab7b", @ANYRES32=0x0, @ANYBLOB="08000007f100e6fffdd385d4", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0xc0c1}, 0x80)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:50 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:50 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(0xffffffffffffffff, 0xc058534b, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, 0x0)

00:37:50 executing program 1:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:50 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:50 executing program 3:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:50 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:50 executing program 1:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:50 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 0:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:50 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:50 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:50 executing program 1:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:51 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:51 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 0:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:51 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:51 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:51 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:51 executing program 0:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x5460, 0x0)

00:37:51 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:51 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:51 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:51 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:51 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0xfffc, @any, 0x80, 0x1}, 0xe)

00:37:52 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:52 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:52 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x40000)

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:52 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x5460, 0x0)

00:37:52 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:52 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0xb701, 0x0)

00:37:52 executing program 5:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0xb701, 0x0)

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 5:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x541b, 0x0)

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x80, 0x1}, 0xe)

00:37:52 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:52 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

00:37:52 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:52 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 5:
r0 = socket(0x11, 0x3, 0x0)
bind$netrom(r0, 0x0, 0x8000000000000000)

00:37:52 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

00:37:52 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:52 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

00:37:52 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, &(0x7f0000000040)={0x0, 0x0, 0x0})

00:37:52 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:52 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:52 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:52 executing program 2:
r0 = syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:52 executing program 0:
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 5 (fault-call:1 fault-nth:0):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:53 executing program 1 (fault-call:1 fault-nth:0):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:53 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:53 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 2:
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x3e80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:53 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x803e}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:53 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:53 executing program 4:
r0 = socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:53 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:53 executing program 2:
r0 = syz_open_procfs$namespace(0x0, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r0, 0x4b47, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:53 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:53 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x3e80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:53 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:53 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:54 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:54 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:54 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x803e}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 4:
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:54 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0xf0ff7f}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:54 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:54 executing program 2:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:54 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x7ffff000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 4:
r0 = socket(0x0, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x803e0000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0x200000ce)

00:37:54 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:54 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0)

00:37:54 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:54 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0xffffff7f}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:54 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:55 executing program 0:
syz_open_procfs$namespace(0x0, &(0x7f00000007c0)='ns/cgroup\x00')
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x4b47, 0x0)

00:37:55 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x22, 0x6, 0x26d1, &(0x7f0000000000)={<r2=>0xffffffffffffffff, <r3=>0xffffffffffffffff})
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x18, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000)
recvmsg(r2, &(0x7f0000000f40)={&(0x7f00000008c0)=@ll={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @dev}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000940)=""/70, 0x46}, {&(0x7f00000009c0)=""/252, 0xfc}, {&(0x7f0000000ac0)=""/208, 0xd0}, {&(0x7f0000000bc0)=""/114, 0x72}, {&(0x7f0000000c40)=""/225, 0xe1}, {&(0x7f0000000d40)=""/105, 0x69}, {&(0x7f0000000dc0)}], 0x7, &(0x7f0000000e80)=""/182, 0xb6}, 0x2002)
ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000f80)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000fc0)={'team0\x00', <r6=>0x0})
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000200)=0x1, &(0x7f0000000240)=0x4)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f00000010c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001080)={&(0x7f0000001000)={0x78, 0x0, 0x400, 0x70bd2c, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}]}]}, 0x78}, 0x1, 0x0, 0x0, 0xc0}, 0x20044005)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:55 executing program 4:
r0 = socket(0x11, 0x0, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r0, 0x541b, 0x0)

00:37:55 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:55 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x3e80}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:55 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:55 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000001380)={r3, &(0x7f00000013c0)=""/4094})

00:37:55 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40000)

00:37:55 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 0 (fault-call:1 fault-nth:0):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:55 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x803e}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:55 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x44400, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000100)=""/30)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000140)={0x3f5, 0x18, [0x1f, 0x7, 0x8000, 0xffff, 0x1, 0x6696]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x7, 0x4, 0x1, 'queue1\x00', 0x3})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8651, 0x1f, 0x1, 'queue1\x00', 0x6})

00:37:55 executing program 4:
socket(0x11, 0xa, 0x0)
ioctl$ION_IOC_HEAP_QUERY(0xffffffffffffffff, 0x541b, 0x0)

00:37:55 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:55 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:55 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0xa00, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f00000000c0)={0x1, 0x6, 0x0, 'queue0\x00'})
syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f0000000000), 0xe)

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xf0ff7f}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:55 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x44400, 0x0)
setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000040)=0x3, 0x2)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f0000000100)=""/30)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000140)={0x3f5, 0x18, [0x1f, 0x7, 0x8000, 0xffff, 0x1, 0x6696]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x7, 0x4, 0x1, 'queue1\x00', 0x3})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x2000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f00000001c0)={0x8651, 0x1f, 0x1, 'queue1\x00', 0x6})

00:37:55 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x1000000)

00:37:55 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000001380)={r3, &(0x7f00000013c0)=""/4094})

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:55 executing program 4 (fault-call:1 fault-nth:0):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:55 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r1, 0x10, &(0x7f0000000100)={&(0x7f0000000000)=""/157, 0x9d}}, 0x10)

00:37:55 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:55 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000001380)={r3, &(0x7f00000013c0)=""/4094})

00:37:55 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x100000000000000)

00:37:55 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x7ffff000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

[ 1377.698797] FAULT_INJECTION: forcing a failure.
[ 1377.698797] name failslab, interval 1, probability 0, space 0, times 0
[ 1377.782056] CPU: 0 PID: 21927 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
[ 1377.790073] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1377.799529] Call Trace:
[ 1377.802172]  dump_stack+0x22c/0x33e
[ 1377.805817]  should_fail.cold+0xa/0x2f
[ 1377.809724]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1377.814942]  ? lock_acquire+0x170/0x3f0
[ 1377.818936]  __should_failslab+0x153/0x1b6
[ 1377.823179]  should_failslab+0x5/0xf
[ 1377.826906]  kmem_cache_alloc_node+0x245/0x4d0
[ 1377.831504]  __alloc_skb+0x71/0x580
[ 1377.835140]  alloc_skb_with_frags+0x93/0x5d0
[ 1377.839557]  ? mark_held_locks+0xf0/0xf0
[ 1377.843626]  ? find_held_lock+0x2d/0x110
[ 1377.847695]  ? __might_fault+0x11f/0x1d0
[ 1377.851770]  sock_alloc_send_pskb+0x6e6/0x840
[ 1377.856275]  ? lock_downgrade+0x750/0x750
[ 1377.860459]  ? lock_acquire+0x170/0x3f0
[ 1377.864444]  ? find_held_lock+0x2d/0x110
[ 1377.868695]  ? sock_kzfree_s+0x60/0x60
[ 1377.872591]  ? lock_downgrade+0x750/0x750
[ 1377.876758]  ? lock_acquire+0x170/0x3f0
[ 1377.880741]  ? unix_peer_get+0x1b/0x80
[ 1377.884648]  ? do_raw_spin_unlock+0x171/0x240
[ 1377.889163]  unix_dgram_sendmsg+0x3a5/0x12c0
[ 1377.893584]  ? __might_fault+0x192/0x1d0
[ 1377.897656]  ? unix_dgram_poll+0x6b0/0x6b0
[ 1377.901921]  ? __sock_recv_ts_and_drops+0x540/0x540
[ 1377.906955]  ? unix_dgram_poll+0x6b0/0x6b0
[ 1377.911210]  sock_sendmsg+0xc7/0x130
[ 1377.915387]  ___sys_sendmsg+0x7bb/0x8f0
[ 1377.919374]  ? copy_msghdr_from_user+0x440/0x440
[ 1377.924158]  ? find_held_lock+0x2d/0x110
[ 1377.928229]  ? __fget+0x386/0x570
00:37:56 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {<r3=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000001380)={r3, &(0x7f00000013c0)=""/4094})

00:37:56 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x803e0000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:56 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

[ 1377.931722]  ? lock_downgrade+0x750/0x750
[ 1377.935916]  ? check_preemption_disabled+0x41/0x2b0
[ 1377.941389]  ? __fget+0x3ad/0x570
[ 1377.944858]  ? copy_fd_bitmaps+0x2c0/0x2c0
[ 1377.949105]  ? find_held_lock+0x2d/0x110
[ 1377.953177]  ? vfs_write+0x3d7/0x540
[ 1377.956925]  ? __fget_light+0x1d1/0x230
[ 1377.960915]  __x64_sys_sendmsg+0x132/0x220
[ 1377.965148]  ? __sys_sendmsg+0x1b0/0x1b0
[ 1377.969204]  ? vfs_write+0x393/0x540
[ 1377.972937]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
00:37:56 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x84, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x6}, @SEG6_ATTR_DST={0x14, 0x1, @private0}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @mcast2}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r2, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f0000000000)=""/72})
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vcsa\x00', 0x4002c0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc04c5349, &(0x7f0000000300)={0x4, 0x7, 0x5})
geteuid()
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:56 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x8000000000000000)

[ 1377.978328]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 1377.983374]  ? do_syscall_64+0x21/0x670
[ 1377.987362]  do_syscall_64+0xf9/0x670
[ 1377.991172]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1377.996467] RIP: 0033:0x45de59
00:37:56 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xffffff7f}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

[ 1377.996483] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
00:37:56 executing program 4 (fault-call:1 fault-nth:1):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

[ 1377.996491] RSP: 002b:00007f6a47c08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1377.996503] RAX: ffffffffffffffda RBX: 000000000002a640 RCX: 000000000045de59
[ 1377.996511] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
00:37:56 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:56 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8000, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x4040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x8000, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000140)={0x0, 0x1})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000080)={{0x9, 0x81}, {0xff, 0x4}, 0xcf, 0x5, 0x1})
ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x2)
bind$bt_l2cap(r0, 0x0, 0x0)

[ 1377.996520] RBP: 00007f6a47c08ca0 R08: 0000000000000000 R09: 0000000000000000
00:37:56 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0x2000000c, &(0x7f00000000c0)={0x0}}, 0x0)

[ 1377.996528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 1377.996537] R13: 00007ffe8309ec7f R14: 00007f6a47c099c0 R15: 000000000118bf2c
00:37:56 executing program 4 (fault-call:1 fault-nth:2):
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:56 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

[ 1378.220385] FAULT_INJECTION: forcing a failure.
[ 1378.220385] name failslab, interval 1, probability 0, space 0, times 0
[ 1378.220406] CPU: 0 PID: 21962 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
[ 1378.220414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1378.220419] Call Trace:
[ 1378.220441]  dump_stack+0x22c/0x33e
[ 1378.220462]  should_fail.cold+0xa/0x2f
[ 1378.220480]  ? fault_create_debugfs_attr+0x1e0/0x1e0
[ 1378.220496]  ? lock_acquire+0x170/0x3f0
[ 1378.220520]  __should_failslab+0x153/0x1b6
[ 1378.220537]  should_failslab+0x5/0xf
[ 1378.220553]  kmem_cache_alloc_node_trace+0x244/0x4d0
[ 1378.220575]  __kmalloc_node_track_caller+0x38/0x70
[ 1378.220591]  __alloc_skb+0xae/0x580
[ 1378.220611]  alloc_skb_with_frags+0x93/0x5d0
[ 1378.220625]  ? mark_held_locks+0xf0/0xf0
[ 1378.220639]  ? find_held_lock+0x2d/0x110
[ 1378.220654]  ? __might_fault+0x11f/0x1d0
[ 1378.220674]  sock_alloc_send_pskb+0x6e6/0x840
[ 1378.220688]  ? lock_downgrade+0x750/0x750
[ 1378.220700]  ? lock_acquire+0x170/0x3f0
[ 1378.220717]  ? find_held_lock+0x2d/0x110
[ 1378.220740]  ? sock_kzfree_s+0x60/0x60
[ 1378.220754]  ? lock_downgrade+0x750/0x750
[ 1378.220767]  ? lock_acquire+0x170/0x3f0
[ 1378.220793]  ? unix_peer_get+0x1b/0x80
[ 1378.220814]  ? do_raw_spin_unlock+0x171/0x240
[ 1378.220837]  unix_dgram_sendmsg+0x3a5/0x12c0
[ 1378.220859]  ? __might_fault+0x192/0x1d0
[ 1378.220882]  ? unix_dgram_poll+0x6b0/0x6b0
[ 1378.220901]  ? __sock_recv_ts_and_drops+0x540/0x540
[ 1378.220929]  ? unix_dgram_poll+0x6b0/0x6b0
[ 1378.220948]  sock_sendmsg+0xc7/0x130
[ 1378.220965]  ___sys_sendmsg+0x7bb/0x8f0
[ 1378.220984]  ? copy_msghdr_from_user+0x440/0x440
[ 1378.220998]  ? find_held_lock+0x2d/0x110
[ 1378.221016]  ? __fget+0x386/0x570
[ 1378.221036]  ? lock_downgrade+0x750/0x750
[ 1378.221055]  ? check_preemption_disabled+0x41/0x2b0
[ 1378.221074]  ? __fget+0x3ad/0x570
[ 1378.221093]  ? copy_fd_bitmaps+0x2c0/0x2c0
[ 1378.221107]  ? find_held_lock+0x2d/0x110
[ 1378.221122]  ? vfs_write+0x3d7/0x540
[ 1378.221141]  ? __fget_light+0x1d1/0x230
[ 1378.221173]  __x64_sys_sendmsg+0x132/0x220
[ 1378.221188]  ? __sys_sendmsg+0x1b0/0x1b0
[ 1378.221202]  ? vfs_write+0x393/0x540
[ 1378.221230]  ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe
[ 1378.221247]  ? trace_hardirqs_off_caller+0x6e/0x210
[ 1378.221264]  ? do_syscall_64+0x21/0x670
[ 1378.221283]  do_syscall_64+0xf9/0x670
[ 1378.221301]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1378.221313] RIP: 0033:0x45de59
[ 1378.221327] Code: 0d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b3 fb ff c3 66 2e 0f 1f 84 00 00 00 00
[ 1378.221335] RSP: 002b:00007f6a47c08c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[ 1378.221349] RAX: ffffffffffffffda RBX: 000000000002a640 RCX: 000000000045de59
[ 1378.221357] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000004
[ 1378.221366] RBP: 00007f6a47c08ca0 R08: 0000000000000000 R09: 0000000000000000
00:37:56 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000380)={0x3, &(0x7f0000000340)=[{}, {}, {}]})

00:37:56 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x3e80}}, 0x0)

00:37:56 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:56 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:56 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x147200, 0x0)
syz_open_dev$ndb(&(0x7f0000000100)='/dev/nbd#\x00', 0x0, 0x44000)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{<r2=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000000c0)={r2, &(0x7f00000001c0)=""/198})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:56 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = accept4(r0, &(0x7f0000000100)=@l2tp6={0xa, 0x0, 0x0, @mcast2}, &(0x7f00000002c0)=0x80, 0x80800)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)

[ 1378.221376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[ 1378.221386] R13: 00007ffe8309ec7f R14: 00007f6a47c099c0 R15: 000000000118bf2c
00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e}}, 0x0)

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r2, 0x89e2)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:57 executing program 0:
sysinfo(&(0x7f0000000000)=""/228)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
set_tid_address(&(0x7f0000000100))

00:37:57 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(0xffffffffffffffff, 0xc0305302, &(0x7f0000000000)={0x1ff, 0xe408, 0x6, 0x7fffffff, 0x80000000})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x100)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0xf0ff7f}}, 0x0)

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x2, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:57 executing program 0:
socketpair(0x1f, 0x6, 0x20, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x440000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'})
ioctl$NBD_SET_FLAGS(r2, 0xab0a, 0x100000001)
bind$bt_l2cap(r1, 0x0, 0x0)

00:37:57 executing program 1:
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000180)={0x4ccd, 0x7, 0x0, 0xa5, 0xb, 0x5a, 0x2}, 0xc)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000040)='/dev/vcsa\x00')
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r1, 0xc01064bd, &(0x7f0000000100)={&(0x7f00000001c0)="dc2d489997fdda0dd55742bc611797e5ba42a7002c68cdc80a6bb83856f58e46b465e6105b282fe25f914d8643ac7b9249fc63cfb980fad71805237a1a187df8e34d6a56a162ec109cbb590adbce7fd4be6e4c2cea436f8df95c6ca4318f7ca05998a5bb8ae42cc23f60b0284eb972b827fe4288e59646d596c19a18c25dd4ba9ffd5baf7e596f71e7dabc92136916a3f855fb8a276051d71777fe854763c8023df6c22389c85ba02e0e27904a6e344955da93ec26f66d3a", 0xb8})
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r0, 0x40a85321, &(0x7f0000000280)={{0xfc, 0x3}, 'port0\x00', 0x95, 0xa0040, 0x108, 0x401, 0x2a5b, 0x8, 0x81, 0x0, 0x7, 0x8})

00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x1000000}}, 0x0)

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:37:57 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000000)={0x9, 0x1000, 0x1, 'queue0\x00', 0x6})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x11, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:57 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000340))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r0, 0x10, &(0x7f0000000040)={&(0x7f0000000280)=""/151, 0x97}}, 0x10)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_SWITCH_CTX(r2, 0x40086424, &(0x7f0000000100)={0x0, 0x2})

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x7ffff000}}, 0x0)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000300)={0x3, &(0x7f0000000140)=[{}, {}, {}]})

00:37:57 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4$netrom(r0, &(0x7f00000000c0)={{0x3, @rose}, [@default, @netrom, @bcast, @default, @rose, @remote, @default, @null]}, &(0x7f0000000080)=0x48, 0x80800)
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x1100, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:57 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000000)={0x18, 0x0, 0x0, 0x9})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e0000}}, 0x0)

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x3e80, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:57 executing program 0:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={0x0, 0x5a, &(0x7f00000000c0)=""/90})
socketpair(0x18, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001280)='/dev/vcsa\x00', 0x103000, 0x0)
r2 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f0000001340)={{0x7, 0x4, 0x4, 0xffffff90, 'syz1\x00', 0xbdc8}, 0x3, 0x4, 0x3eca, r2, 0x7, 0x0, 'syz0\x00', &(0x7f0000001300)=['/dev/dri/card#\x00', '^*)\x00', '\x00', 'fyz0\x00', '\x00', '$}!-%)\x00', '/dev/dri/card#\x00'], 0x30, [], [0xff, 0x5, 0x7, 0xfffe]})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000040)={0x0, 0x1000, &(0x7f00000001c0)=""/4096})
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x8, 0x86d82d242b64203a)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r3, &(0x7f0000001500)={&(0x7f00000012c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000014c0)={&(0x7f0000001480)={0x2c, 0x0, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040}, 0x80)
socket(0x18, 0x0, 0x2)
getsockopt$netrom_NETROM_T2(r0, 0x103, 0x2, &(0x7f0000001200)=0x3, &(0x7f0000001240)=0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f00000011c0)={0x0, 0x5, 0x7, 0x0, 0x8, 0x1f}, 0xc)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x200000, 0x0)

00:37:57 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000001c0)={0xf0, 0x1, 'client1\x00', 0xffffffff80000002, "28f2f528bd25b17c", "fbb5d029bba83dcaa5fb272f7de0a0973b168f156677f9ef2b7d62c0d34edaeb", 0x2, 0x4010})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000280)={0x6, 0x6, 0x80000000, {0x7, 0xffff11a6}, 0x40, 0x9})
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000000)={0x8, 0x1, 0x0, 'queue0\x00', 0x20})
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, &(0x7f0000000100)={{0x0, 0x1}, {0x20, 0x2}, 0x80000001, 0x4, 0xff})

00:37:57 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:57 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0xffffff7f}}, 0x0)

00:37:57 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))
openat$ion(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ion\x00', 0x210002, 0x0)

00:37:57 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x803e, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x7ffffffff000}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x40000)

00:37:58 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

00:37:58 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))

00:37:58 executing program 0:
socketpair(0x25, 0x3, 0x2, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000040)={0x1000, 0x0, 'client0\x00', 0xffffffff80000006, "027bfeaca2e99620", "e56b49b01db7dcb8c650914dd94d9147531e0c9823d7602e615b9a583c35c410", 0x60, 0x7})

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x34000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0xf0ff7f00000000}}, 0x0)

00:37:58 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:37:58 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(0xffffffffffffffff, 0xc00464be, &(0x7f0000000000)={0x1})

00:37:58 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = getpgid(0xffffffffffffffff)
ptrace$setopts(0x6, r1, 0x2, 0x8)

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x400300, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0xf0ffffff7f0000}}, 0x0)

00:37:58 executing program 1:
socketpair(0x1, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:58 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, 0x0, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}, 0x48)
getpgid(0xffffffffffffffff)

00:37:58 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{0x8, 0x3, 0x0, 0x0, '\x00', 0x9}, 0x0, 0x100, 0x4, 0xffffffffffffffff, 0x3, 0xffffff81, 'syz1\x00', &(0x7f0000000000)=['\x00', '-(\x00', '\'\x00'], 0x6, [], [0x6, 0x1, 0x8001, 0x40]})
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x1000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004400}, 0x40000)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x100000000000000}}, 0x0)

00:37:58 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
recvfrom$netrom(r0, &(0x7f0000000000)=""/229, 0xe5, 0x41, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)

00:37:58 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @null, @netrom={'nr', 0x0}, 0x36, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x40, 0x1, [@default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:37:58 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
accept$netrom(r1, 0x0, &(0x7f0000000080))

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x2000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x40000)

00:37:58 executing program 0:
socketpair(0x1, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket$nl_generic(0x10, 0x3, 0x10)
recvmsg(r1, &(0x7f0000000700)={&(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000080)=""/210, 0xd2}, {&(0x7f00000001c0)=""/153, 0x99}, {&(0x7f0000000280)=""/10, 0xa}, {&(0x7f00000002c0)=""/89, 0x59}, {&(0x7f0000000340)=""/137, 0x89}, {&(0x7f0000000400)=""/84, 0x54}, {&(0x7f0000000480)=""/240, 0xf0}], 0x7, &(0x7f0000000600)=""/195, 0xc3}, 0x2000)
bind$bt_l2cap(r0, 0x0, 0x0)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:37:58 executing program 1:
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000740)={0x4, &(0x7f0000000540)=[{}, {}, {}, {}]})
socketpair(0x1, 0x800, 0x0, &(0x7f0000000080)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
recvmsg(r0, &(0x7f00000003c0)={&(0x7f0000000000)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000640)=[{&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f00000002c0)=""/226, 0xe2}, {&(0x7f0000000780)=""/206, 0xce}, {&(0x7f00000004c0)=""/80, 0x50}, {&(0x7f0000000900)=""/242, 0xf2}, {&(0x7f00000005c0)=""/77, 0x4d}, {0xfffffffffffffffd}], 0x7, &(0x7f0000000100)=""/76, 0x4c}, 0x1)

00:37:58 executing program 3:
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x721280, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x11000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:37:58 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0xffffff7f00000000}}, 0x0)

00:37:58 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:37:58 executing program 1:
socketpair(0x1, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x84200, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r1, 0x3b72, &(0x7f0000000380)=ANY=[@ANYBLOB="83000000020000000008000500000000000001000000006d0d672fbec70b937feb75c49f03fa9d0004fd8ba8e481ee9c7e4becdcf1e38bb8cd3b18a7da2e847e02ba0204aed26fdfeae306d249e478f1a9672746030f24b050ef96e0033fc8121a26cc4a89bcb6be819ab18257117efccb09a7969103baffbb82ed4f62540871b40d229e36a550df051cf5e9381df41cf7a6e4e34e32b12bc59ff098e74aa1d38b051cb60212be0f89d9e80806a7130d019946c97cbfeae05b61461f4aa74b0191e2fbfac0668ed335981fdc6884bad905ccc178ffd4d0c04bb233ba802cb4b9b43c3f55b14d5368799181a66a1641966ade597aa79d1cfb92ba83c5a49062e63df02aaa91ee9615e3040d5ba8af8e931d95c2f6dfef082eea656bd6967f657d23ae4a112564d7d9cf489dfd3f7d80b1655193f0101ebd08530b2dfbfa9947de9be4d1e7517b1a9fb33c9030eb87f6bda22e6161a407bbfc9c4315729f122967c285b6f1d55b7d273d71f8264e2cd8e2be7e0a7a498dfadcd62f0b3c", @ANYRESHEX=r2])
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x7, 0x2)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000080)={0x8, @time={0xc, 0x5a9e}, 0x81, {0x40, 0x6d}, 0x7, 0x1})

00:37:58 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x803e0000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:58 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:37:59 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x8}, 0x0)

[ 1380.836159] audit: type=1326 audit(1603154279.040:395): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22178 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:59 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:37:59 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:37:59 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0xffffff7f, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:37:59 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x3e80}, 0x0)

00:37:59 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(0xffffffffffffffff, 0x40405514, &(0x7f0000000100)={0x1, 0x3, 0x33, 0xffe, 'syz0\x00', 0x101})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = getpid()
getpgid(r1)
shmctl$IPC_SET(0xffffffffffffffff, 0x1, &(0x7f0000000280)={{0x1, 0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x5, 0x9}, 0x1, 0x7, 0xfd67, 0x100000001, r1, 0xffffffffffffffff, 0x3})
clock_gettime(0x0, &(0x7f0000000080))
r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
getsockopt$bt_BT_RCVMTU(r2, 0x112, 0xd, &(0x7f0000000000)=0x84, &(0x7f0000000040)=0x2)
waitid$P_PIDFD(0x3, 0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0))
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x208000)

00:37:59 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x803e}, 0x0)

00:37:59 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:37:59 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xc0}, 0x14}}, 0x0)

[ 1381.630703] audit: type=1326 audit(1603154279.840:396): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22178 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:37:59 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f0000000280)={0x4, 0x8, 0x1, 'queue1\x00', 0x7})
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x7fffffff, 0x4)
r2 = syz_open_dev$dri(&(0x7f0000000040)='/dev/dri/card#\x00', 0x140, 0x3)
ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000100)={0x5, &(0x7f0000000080)=[{}, {}, {}, {}, {<r3=>0x0}]})
ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000001c0)={0x9, 0x3, 0x1, 'queue0\x00', 0x4})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x101000, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_UNLOCK(r5, 0x4008642b, &(0x7f00000003c0)={r3, 0x2c})
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x4058534c, &(0x7f0000000340)={0x6, 0x5, 0x5, 0x6, 0x1ff})

00:37:59 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:37:59 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(0xffffffffffffffff, 0xc1105511, &(0x7f0000000040)={{0x2, 0x5, 0x7, 0x7ff, 'syz0\x00', 0x9}, 0x5, 0x10, 0x1, 0x0, 0xd, 0x8, 'syz1\x00', &(0x7f00000002c0)=['(.&[\x00\x1b\xad\x8d\xad\xc7%kW6:\xb0<t\xa6\x9c\xd1y\t\x84M<<|I\xc8:\xfb\xa3\xe8\x92La\xe2\xef\xae\x12\x16K\x93;a~[rd\xeb\x14\x8f\x1eH\xd7\xcb\xf1+\xb3\xa2O\x8dU\x92\x057 \x91\xc5\x87n\x9aV\xf3\x00\xec\a\xc7\x7f\x06U\xa9\xe9~n\xd0:[\xf2\x9f:\xac\xba\xc7w3\xb1-n\xd5\xb8\x12\x85\x87\xd9\xbcd\x9e\xba\xf7\xb2E+\xfb>\xf9\xb6\x10\xc0\xdaPxV3\x9b\x1a\x16X\xde-(\x05@\xa4b\xd9|\x90\xbf:', '[\x00', 'S\xf2^\x00', '--*^-{(%!{-\x00', ',*%$/&\'*^{$[]\x00', '(-[/#\x00', '.\x8c2\x00', '$.\\\x00', '!])\']\x00', '-\x06\x00\x00\x00\x00', '.\x8c2\x00', '\x00', '-@\\))\x00'], 0xd2, [], [0x2, 0x6, 0x2, 0xf5e]})
ioctl$ASHMEM_GET_SIZE(0xffffffffffffffff, 0x7704, 0x0)
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x80000000, <r1=>0x0}, 0x8)
accept4(r0, 0x0, &(0x7f0000000240), 0x800)
bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0)=r1, 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r2, 0xc0305302, &(0x7f0000000280)={0x9c49, 0x401, 0x4463e06e, 0xe9c, 0x81, 0x8000})
openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x80000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
bind$bt_l2cap(r3, 0x0, 0x45)

00:37:59 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0xf0ff7f}, 0x0)

00:38:00 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:00 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3ec0}, 0x14}}, 0x0)

00:38:00 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000080)=0x5, 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={'nr', 0x0}, 0x1f, 'syz1\x00', @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x3, 0x0, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @null, @bcast, @bcast, @null]})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x1000000}, 0x0)

00:38:00 executing program 1:
socket(0x1e, 0x2, 0xa321)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_SET_SIZE(0xffffffffffffffff, 0xab02, 0x10001)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000000)={0x6, 0x7})

00:38:00 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:00 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x7ffff000}, 0x0)

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x33fe0}, 0x14}}, 0x0)

00:38:00 executing program 0:
socketpair(0x2c, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000040)={0x10000, 0xfffff8cc, 0x2, 0xfffffffe, 0x28, 0x3})

00:38:00 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:00 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
uname(&(0x7f0000000000)=""/8)

00:38:00 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x803e0000}, 0x0)

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x20000094}, 0x14}}, 0x0)

00:38:00 executing program 0:
socketpair(0x28, 0x6, 0x9, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x6, 'syz1\x00', @null, 0xffffff6d, 0x2, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})

00:38:00 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:00 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, &(0x7f0000000080))

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0xffffff7f}, 0x0)

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x7ffff000}, 0x14}}, 0x0)

00:38:00 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r2, 0xc058534f, &(0x7f00000001c0)={{0x7f, 0x9}, 0x0, 0x3b8, 0x6, {0x6, 0x5}, 0x1})
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
accept4(r0, &(0x7f0000000040)=@nfc, &(0x7f0000000000)=0x80, 0x80000)

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x7ffffffff000}, 0x0)

00:38:00 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:00 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$NBD_CLEAR_QUE(r0, 0xab05)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$bt_l2cap(r2, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8004)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x8, 0x28, [0x4, 0x7fff, 0xfd9, 0xc292, 0x80000000, 0x0, 0x0, 0x9, 0x9, 0xed15]})

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0xfffffdef}, 0x14}}, 0x0)

00:38:00 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

[ 1382.430906] audit: type=1326 audit(1603154280.640:397): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0xf0ff7f00000000}, 0x0)

00:38:00 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:00 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, 0x0, 0x0)
getuid()
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x5, @fixed={[], 0x92}, 0x1fd, 0x2}, 0xfffffffffffffe5c)

00:38:00 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:00 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:00 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0xf0ffffff7f0000}, 0x0)

[ 1383.202909] audit: type=1326 audit(1603154281.410:398): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22282 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:38:01 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1ff, @fixed={[], 0x11}}, 0xe)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(0xffffffffffffffff, 0xc10c5541, &(0x7f00000001c0)={0x1f, 0xffffffff})

00:38:01 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:01 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x2}, 0x14}}, 0x0)

00:38:01 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:01 executing program 0:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000000))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2, 0x0)
bind$bt_l2cap(r0, 0x0, 0xe)

00:38:01 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x100000000000000}, 0x0)

00:38:01 executing program 0:
socketpair(0x4, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x2000, 0x40, &(0x7f0000ffe000/0x2000)=nil)
shmctl$SHM_UNLOCK(r1, 0xc)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x2)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:01 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:01 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:01 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:01 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x11}, 0x14}}, 0x0)

00:38:01 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x803e000000000000}, 0x0)

00:38:01 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:01 executing program 1:
socketpair(0x26, 0x3, 0x2, &(0x7f0000000600)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000005c0)={&(0x7f0000000000)=@hci, 0x80, &(0x7f0000000500)=[{&(0x7f00000001c0)=""/202, 0xca}, {&(0x7f0000000080)=""/1, 0x1}, {&(0x7f00000002c0)=""/210, 0xd2}, {&(0x7f0000000100)=""/78, 0x4e}, {&(0x7f00000003c0)=""/199, 0xc7}, {&(0x7f00000004c0)=""/11, 0xb}], 0x6, &(0x7f0000000580)=""/54, 0x36}, 0x40000100)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

00:38:01 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0xffffff7f00000000}, 0x0)

00:38:01 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:01 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x1100}, 0x14}}, 0x0)

00:38:01 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000080))

00:38:01 executing program 0:
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x6, 0x0, 0x2, 0x9, '\x00', 0x9}, 0x0, [0x80000001, 0x3ff, 0x3ff, 0x7, 0x7e, 0x8, 0x8ff7, 0x4000000000000000, 0x200, 0x4, 0x7, 0x7f, 0x6, 0x2, 0x6, 0x100000000, 0xf020, 0x800, 0x361189e7, 0x5, 0x2, 0x10, 0x10001, 0x1, 0x7fff, 0x0, 0x81, 0x6, 0x8, 0x1, 0x88, 0x8001, 0x30000000000000, 0x9, 0xfffffffffffffe00, 0x2, 0x18, 0x40, 0x100000000, 0x9, 0xaf, 0x100000000, 0x1, 0x3, 0x100, 0xffffffff, 0x10001, 0x10000, 0x9, 0x0, 0x80000000, 0x5, 0x5, 0x2, 0x4, 0x202000000000, 0x0, 0x8, 0x3f, 0x3, 0x4, 0x200, 0x1, 0x105b8, 0x4, 0xfff, 0x1ff, 0x5, 0x5, 0xfffffffffffffffe, 0x1, 0x2, 0x4, 0xfff, 0x7ff000, 0x100000000, 0x5, 0x4e, 0x4f6, 0x7, 0x0, 0x4, 0x100000000, 0xfff, 0x42a, 0xcee, 0x400, 0x2, 0x0, 0x7, 0xf23, 0xffffffffffffffff, 0x8d1, 0x80, 0x9, 0x4000000000000, 0xbee, 0xffffffff, 0x9, 0x7, 0x10000, 0xfffffffffffff001, 0x7, 0x80000001, 0x77, 0xfb, 0x7, 0x1, 0x6, 0xe869, 0x4, 0x5fa3, 0x400, 0x9, 0x6, 0x7, 0x4c2, 0xb1, 0x7, 0x7, 0x1, 0x0, 0x100, 0x0, 0x2, 0x2, 0x3, 0x6]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept4(r0, &(0x7f00000006c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000740)=0x80, 0x80000)
bind$bt_l2cap(r1, &(0x7f0000000780)={0x1f, 0x206, @any, 0x1, 0x2}, 0xe)
bind$bt_l2cap(r0, 0x0, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/net\x00')
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r2, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @initdev={0xac, 0x1e, 0x1, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x50}, 0x0)

00:38:01 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:01 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x3e80}, 0x0)

00:38:01 executing program 1:
socketpair(0x1f, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x40, 0x0)

00:38:01 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x3e80}, 0x14}}, 0x0)

00:38:02 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, 0x0, 0x0)

00:38:02 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xcff0}, 0x8)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00'})
bind$bt_l2cap(r0, 0x0, 0x0)
getuid()

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x803e}, 0x14}}, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:02 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x28402, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x141000, 0x0)
ioctl$DRM_IOCTL_MODE_DESTROYPROPBLOB(r2, 0xc00464be, &(0x7f0000000100)={0x1})
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x1, @none, 0x3, 0x2}, 0xe)
r3 = getpid()
setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000140)=0xfffffffb, 0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x101000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r4, 0xc01064bd, &(0x7f0000000440)={&(0x7f0000000340)="299a526077d512dce27166f812f95e7ce8e9e0495a5a4b458b0f4fd17e0901821f7362afeee476008836cdd6baf25083daa2966e24c71225906c08ae3a6d6ff8f0d2727faf6222cb731668bc792bf081ef4d3c720d69e0fdb088562522183bd62200ae4a7fb5e9076f468dc86e6efd968e4d15288237e0373ad0f7af1989a650a18dd45e757fe70f8f4318250008a6ba7576e9aa24d049dc36b442f8357cdc819159bd5d2094dc88715015e6127059723066c20c4e1016ab46901bea691db574f9d183ee", 0xc4})
ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0)
getpgid(r3)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r0, 0xc1105511, &(0x7f00000001c0)={{0x4, 0x4, 0x71aae156, 0xdca, '\x00', 0x3602}, 0x1, 0x3, 0x4, r3, 0x2, 0x4, 'syz0\x00', &(0x7f0000000000)=['[\x00', '/dev/vcsa\x00'], 0xc, [], [0x7, 0xa91, 0x7]})

00:38:02 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x8040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000080)={0x6, 0x81, 0x1f})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000000c0)={0x0, 0x1, 0x1, 'queue0\x00', 0x7fffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00'})
bind$bt_l2cap(r0, 0x0, 0x5c)

00:38:02 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x3e80}, 0x14}}, 0x0)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xf0ff7f}, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:02 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcsa\x00', 0x484602, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000000)={0x6, 0x20, 0x1})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x2000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000280)={0x34, 0x0, &(0x7f0000000240)})
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x24c000, 0x0)
r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000300)={0x3, 0x2, 0xffffffff})
getsockname$netrom(r3, &(0x7f0000000100)={{0x3, @default}, [@null, @remote, @rose, @netrom, @bcast, @bcast, @bcast]}, &(0x7f0000000080)=0x48)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:02 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x1000000}, 0x0)

00:38:02 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000000)={0x9, 0x2, {0xffffffffffffffff, 0x2, 0x24, 0x2, 0x8}, 0x4})

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x2}, 0x14}}, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:02 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:02 executing program 1:
sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="dcb0a8ae7d4e3612fbefe8884230560fdc9c4d813f1193d584b55206902a64cd7cfa77dd2e40d3829b83a8622b614f1fbbbe6a72d49b76251f68ddb1414f1dc4b13130d8", 0x44, 0x870, &(0x7f0000000100)={{0x3, @bcast, 0x6}, [@null, @null, @null, @bcast, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x2, @any, 0xff00}, 0xe)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
sendto$netrom(r0, &(0x7f0000000080)="660c5f03048b06a45b65fb7f51b4bc23e11f72", 0x13, 0x4040, &(0x7f00000001c0)={{0x3, @bcast, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]}, 0x48)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x7ffff000}, 0x0)

00:38:02 executing program 0:
socketpair(0x22, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x42080, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x11}, 0x14}}, 0x0)

00:38:02 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e0000}, 0x0)

00:38:02 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
waitid$P_PIDFD(0x3, r2, &(0x7f0000000040), 0x2, &(0x7f00000001c0))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x115900, 0x0)

00:38:02 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0x27, 0xa, 0x4, &(0x7f0000000000)={<r1=>0xffffffffffffffff})
r2 = accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x800)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f00000000c0), 0x2)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0, 0x803e000000000000}}, 0x0)

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x1100}, 0x14}}, 0x0)

00:38:02 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xffffff7f}, 0x0)

00:38:02 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:02 executing program 1:
socketpair(0x9, 0xa, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = accept4(0xffffffffffffffff, &(0x7f0000000040)=@pppoe={0x18, 0x0, {0x0, @link_local}}, &(0x7f0000000100)=0x80, 0x800)
setsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000140)=0x9, 0x4)

00:38:02 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x3e80}, 0x14}}, 0x0)

00:38:02 executing program 0:
socketpair(0x21, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$netrom(r0, &(0x7f0000000000)={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast]}, 0x48)
bind$bt_l2cap(r1, 0x0, 0xa)

00:38:02 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x7ffffffff000}, 0x0)

00:38:03 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x803e}, 0x14}}, 0x0)

00:38:03 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000040)={{0x1, 0x3, 0x4, 0x2, 'syz1\x00', 0x9}, 0x1, 0x2, 0x30000, 0xffffffffffffffff, 0x2, 0x100, 'syz1\x00', &(0x7f0000000000)=[',{\x00', '&\\+\x00'], 0x7, [], [0x4, 0x1, 0x800, 0x7]})

00:38:03 executing program 1:
socketpair(0x8, 0x80000, 0x3, &(0x7f0000000180))
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000100), 0x1, 0x0)
r0 = socket(0x8, 0x2, 0x1)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r2, 0x80045300, &(0x7f00000001c0))
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x1, @fixed={[], 0x11}, 0x863}, 0xffffffffffffff81)

00:38:03 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xf0ff7f00000000}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x34000}, 0x14}}, 0x0)

00:38:03 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0xffffffff}, 0x8)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ION_IOC_ALLOC(r1, 0xc0184900, &(0x7f0000000040)={0x7fffffff, 0x3a})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r2, 0x81785501, &(0x7f00000001c0)=""/4096)

00:38:03 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xf0ffffff7f0000}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:03 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
socket(0x10, 0x3, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, &(0x7f00000001c0)={{0x3, 0x4, 0xc0000000, 0xe727, '\x00', 0x10000}, 0x2, 0x1, 0xb213, 0xffffffffffffffff, 0x4, 0xc2f, 'syz0\x00', &(0x7f0000000080)=['\\\xb5#^%\x00', 'syz1\x00', 'syz1\x00', 'syz1\x00'], 0x15, [], [0x5, 0x5, 0x3, 0x7]})
clock_gettime(0x2, &(0x7f0000000040))
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000000)={0x9, 0x1, 0x10000, 0x6, 'syz1\x00', 0x204})
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x400300}, 0x14}}, 0x0)

00:38:03 executing program 0:
socketpair(0x1, 0x4, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_SET_BLKSIZE(0xffffffffffffffff, 0xab01, 0xa4)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x100000000000000}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:03 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sched_getscheduler(0xffffffffffffffff)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x1000000}, 0x14}}, 0x0)

00:38:03 executing program 0:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/248)

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e000000000000}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:03 executing program 3:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x2000000}, 0x14}}, 0x0)

00:38:03 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0x80045500, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x410000, 0x0)
ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/137})

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0)

00:38:03 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x11000000}, 0x14}}, 0x0)

00:38:03 executing program 0:
ioctl$NBD_CLEAR_QUE(0xffffffffffffffff, 0xab05)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:03 executing program 1:
socketpair(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0xffffffff, 0x95fa, 0x68})

00:38:03 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:03 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:03 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x803e0000}, 0x14}}, 0x0)

00:38:04 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:04 executing program 1:
socketpair(0x1, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:04 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4$netrom(r1, &(0x7f0000000000)={{0x3, @netrom}, [@netrom, @remote, @null, @rose, @netrom, @remote, @netrom, @default]}, &(0x7f0000000080)=0x48, 0x80400)
bind$bt_l2cap(r0, 0x0, 0x0)
mlock2(&(0x7f0000feb000/0x13000)=nil, 0x13000, 0x0)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0xffffff7f}, 0x14}}, 0x0)

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x3e80}, 0x0)

00:38:04 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, 0x0}, 0x0)

00:38:04 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:04 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000100)={0x800, 0x5, 0x0, 'queue1\x00', 0xa7c75bfe})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0x7fffffff, 0x6, 0x4})
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ashmem\x00', 0x409182, 0x0)

00:38:04 executing program 0:
socketpair(0x10, 0x6, 0xfffffffc, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xa120400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="dad13e86a33725bc1f12df1c000000", @ANYRES16=0x0, @ANYBLOB="01002cbd7000fddbdf25020000000800020008000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20004801}, 0x1)
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$VFIO_GET_API_VERSION(0xffffffffffffffff, 0x3b64)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000000)={0x20, 0x6, 0x1, 0xac, 0x4af1e656})
sched_getscheduler(0xffffffffffffffff)

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x803e}, 0x0)

00:38:04 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/248)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:04 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:04 executing program 0:
socketpair(0x1e, 0x3, 0x14, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000000)=0x52)
r1 = socket(0x2c, 0x8000a, 0x1)
accept4$netrom(r1, 0x0, &(0x7f0000000040), 0x80000)

00:38:04 executing program 1:
socketpair(0x28, 0x1, 0x3447f196, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
set_tid_address(&(0x7f0000000000))

00:38:04 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/248)

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xf0ff7f}, 0x0)

00:38:04 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x2}, 0x14}}, 0x0)

00:38:04 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0x40505331, &(0x7f0000000000)={{0x20}})
socketpair(0x9, 0xa, 0x1, &(0x7f0000000000)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, 0x0, 0x0)
socketpair(0xa, 0x1, 0x3ff, &(0x7f0000000080))

00:38:04 executing program 1:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, &(0x7f00000002c0)=0x80, 0x80000)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000300)={'team0\x00'})
sendto$netrom(0xffffffffffffffff, &(0x7f0000000000)="e376a43d773a85449067a37ce9c59629d338d3e7707f0f0bdd3de6c2291147ee492b3f1db663e8cd69335b87189ca70529a6737d8ba13ddcb0a13eb6923ea621779a4248f7", 0x45, 0x400c0c1, &(0x7f0000000100)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x3, @any, 0x9, 0x1}, 0xe)
bind$bt_l2cap(r2, &(0x7f00000000c0), 0xe)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f00000001c0)=0x401, &(0x7f0000000200)=0x4)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000380)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r5, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8020}, 0x4000000)
ioctl$ASHMEM_SET_SIZE(r4, 0x40087703, 0x4)
shmget$private(0x0, 0x12000, 0x40, &(0x7f0000fed000/0x12000)=nil)

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

00:38:04 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_INFO(r2, 0x3, &(0x7f0000000140)=""/4096)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000040)=""/248)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x11}, 0x14}}, 0x0)

00:38:04 executing program 3:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:04 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
geteuid()

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x7ffff000}, 0x0)

00:38:04 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x4)
getuid()
socketpair(0x5, 0x2, 0x8001, &(0x7f0000000080)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
r3 = shmget$private(0x0, 0x1000, 0x1000, &(0x7f0000ffd000/0x1000)=nil)
shmctl$IPC_RMID(r3, 0x0)
r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000240)='SEG6\x00')
sendmsg$SEG6_CMD_SET_TUNSRC(r2, &(0x7f0000000200)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c00f700d0d7491e282e1ff82c66498a1fffb26544dba2116fb81303a343d6d16a18c9becf5870e8d50b281ab9776a6d9de118ef56c6438ebca8d682078345407f2cb13a79121694642cc7d68d93c7f2c370c34cc7159c90ceb3eb4b2093501cb0769b8c52d34291fd9bacd4ecdae65fc9b172", @ANYRES16=r4, @ANYBLOB="10002abd7000fedbdf250300000014000100fe8000000000000000000000000000bb14000100ff020000000000000000000000000001"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x10)

00:38:04 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000140)=""/4096)

00:38:04 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x1100}, 0x14}}, 0x0)

00:38:04 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x803e0000}, 0x0)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:05 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x80c0)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r1, 0xc0305302, &(0x7f0000000040)={0xb03, 0x1, 0x3b82a76b, 0x2, 0x7, 0x3})

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x3e80}, 0x14}}, 0x0)

00:38:05 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

00:38:05 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x0, 0x15})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:05 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{<r1=>0x0}]})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x4, &(0x7f00000000c0)=[{}, {}, {}, {}]})
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000140)={r1, 0x5})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x803e}, 0x14}}, 0x0)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x3e80)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:05 executing program 1:
r0 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r0, 0x4b47, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)

00:38:05 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)
shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)

00:38:05 executing program 0:
socketpair(0x1, 0x3, 0xfffffffc, &(0x7f0000000180))

00:38:05 executing program 1:
mlock2(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpgid(0x0)
wait4(r1, &(0x7f0000000000), 0x1, &(0x7f00000001c0))
syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x8880)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r2 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffb000/0x3000)=nil)
shmctl$SHM_UNLOCK(r2, 0xc)

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x34000}, 0x14}}, 0x0)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x803e)

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x400300}, 0x14}}, 0x0)

00:38:05 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000000c0)={0xffffffffffffffff, 0x10, &(0x7f0000000080)={&(0x7f0000000000)=""/87, 0x57}}, 0x10)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendto$netrom(r1, &(0x7f0000000100)="70ba6c819464922929d97d3056c751302d08378739", 0x15, 0x4000, &(0x7f00000001c0)={{0x3, @default, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @null]}, 0x48)
r2 = getpid()
getpgid(r2)
sched_getparam(r2, &(0x7f0000000140))

00:38:05 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:05 executing program 1:
shmctl$SHM_STAT_ANY(0x0, 0xf, &(0x7f0000000040)=""/8)
socketpair(0x5, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
clock_gettime(0x5, &(0x7f0000000140))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f0000000240)=ANY=[@ANYBLOB="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"])
shmctl$IPC_RMID(0xffffffffffffffff, 0x0)
r2 = getpid()
getpgid(r2)
sched_rr_get_interval(r2, &(0x7f0000000100))

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x1000000}, 0x14}}, 0x0)

00:38:05 executing program 2:
socketpair(0x4, 0x6, 0x872, &(0x7f0000001140))
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)

00:38:05 executing program 0:
socketpair(0x21, 0x800, 0x0, &(0x7f0000000180))
socket(0x1d, 0x1, 0x3)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x430040, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000040)={&(0x7f0000000000)="7ee7757408af8276356df6648c3b044c3a", 0x11})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x1000000)

00:38:05 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:05 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x2000000}, 0x14}}, 0x0)

00:38:05 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4(r1, &(0x7f0000000100)=@tipc, &(0x7f0000000040)=0x8d, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcsa\x00', 0x4000, 0x0)
accept4(r3, &(0x7f0000000200)=@qipcrtr, &(0x7f0000000280)=0x80, 0xc00)
bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0xfff}, 0xe)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9000, 0x2)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0)

00:38:05 executing program 2:
shmget$private(0x0, 0x4000, 0x54000a04, &(0x7f0000ffc000/0x4000)=nil)

00:38:05 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x7ffff000)

[ 1387.721297] can: request_module (can-proto-3) failed.
00:38:06 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

[ 1387.771840] can: request_module (can-proto-3) failed.
00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x11000000}, 0x14}}, 0x0)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x803e}, 0x0)

00:38:06 executing program 0:
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)={'team0\x00'})
ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x1, @null, @bpq0='bpq0\x00', 0x4, 'syz0\x00', @bcast, 0x3, 0x3, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
bind$bt_l2cap(r1, 0x0, 0x0)

00:38:06 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x5, 0x3}, 0xe)

00:38:06 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

00:38:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x803e0000)

00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x803e0000}, 0x14}}, 0x0)

00:38:06 executing program 0:
openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x462682, 0x0)
socketpair(0x22, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x803e}, 0x0)

00:38:06 executing program 2:
shmget$private(0x0, 0x4000, 0x0, &(0x7f0000ffc000/0x4000)=nil)

00:38:06 executing program 1:
socketpair(0x6, 0x2, 0xfffe0000, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xffffff7f)

00:38:06 executing program 0:
socketpair(0x27, 0x1, 0xfffffffe, &(0x7f0000000180))
syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
socketpair(0x11, 0xa, 0x6, &(0x7f0000000000))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$bt_l2cap(r1, 0x0, 0x0)

00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0xffffff7f}, 0x14}}, 0x0)

00:38:06 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x803e0000}, 0x14}}, 0x0)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x803e}, 0x0)

00:38:06 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$netrom(0xffffffffffffffff, &(0x7f00000001c0)=""/201, 0xc9, 0x83, &(0x7f0000000000)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={[], 0x12}}, 0xe)

00:38:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x7ffffffff000)

00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:06 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:06 executing program 0:
socketpair(0x22, 0x3, 0x2, &(0x7f0000000180))
r0 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x800)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:06 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x803e}, 0x0)

00:38:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f00000000)

00:38:06 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x2}}, 0x14}}, 0x0)

00:38:06 executing program 0:
socketpair(0x1f, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(0xffffffffffffffff, 0x4058534c, &(0x7f0000000000)={0x0, 0xffff, 0x8, 0x6, 0x1, 0x3373})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x400)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0x102)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f00000000c0)={{0x7f, 0x7}, {0x4c, 0x8}, 0x0, 0x2, 0x6})
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvfrom$netrom(0xffffffffffffffff, &(0x7f00000001c0)=""/201, 0xc9, 0x83, &(0x7f0000000000)={{0x3, @null, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={[], 0x12}}, 0xe)

00:38:06 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe)

00:38:06 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ffffff7f0000)

00:38:06 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:06 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x11}}, 0x14}}, 0x0)

00:38:06 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

[ 1388.701244] audit: type=1326 audit(1603154286.910:399): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:38:06 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x0, 0x2, 'client0\x00', 0x0, "37c18dad6edb83ec", "b69336fa950f4fa92394e8712c086faef113a43f4ac8771c0b17734b9ca02aef", 0x4ff, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:07 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x100000000000000)

00:38:07 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:07 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x0, 0x15})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4)

00:38:07 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:07 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x800c0, 0x0)

00:38:07 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0xa4f7, 0x15})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ion\x00', 0x0, 0x0)
ioctl$ION_IOC_ALLOC(r2, 0xc0184900, &(0x7f0000000100)={0x18, 0x6c})

00:38:07 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x2}}, 0x14}}, 0x0)

00:38:07 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x803e000000000000)

00:38:07 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:07 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x0, 0x15})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4)

[ 1389.471725] audit: type=1326 audit(1603154287.680:400): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=22841 comm="syz-executor.0" exe="/root/syz-executor.0" sig=9 arch=c000003e syscall=228 compat=0 ip=0x460cba code=0x0
00:38:07 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x11}}, 0x14}}, 0x0)

00:38:07 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:07 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x0, 0x15})
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000040)=0x6, 0x4)

00:38:07 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xffffff7f00000000)

00:38:07 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x400, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000280)={0x2, 0x24, [0x3ff, 0x7, 0x1000, 0x0, 0x8, 0x5f, 0x9, 0x2, 0x1]})
getsockname$netrom(r0, &(0x7f00000005c0)={{0x3, @bcast}, [@rose, @default, @null, @remote, @null, @remote, @default, @netrom]}, &(0x7f0000000640)=0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f00000001c0))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc0, 0xc0, 0x6, [@volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @int={0xad, 0x0, 0x0, 0x1, 0x0, 0x77, 0x0, 0x7f, 0x7}, @enum={0x9, 0x5, 0x0, 0x6, 0x4, [{0x9, 0x1f}, {0x4, 0x6}, {0x3, 0x967}, {0x10, 0xf844}, {0xe, 0x5}]}, @func={0xc, 0x0, 0x0, 0xc, 0x2}, @func_proto={0x0, 0x9, 0x0, 0xd, 0x0, [{0x6, 0x1}, {0x10, 0x4}, {0xd, 0x4}, {0x1, 0x1}, {0x6, 0x2}, {0xd, 0x1}, {0x3}, {0xc, 0x5}, {0xb, 0x4}]}, @var={0x4, 0x0, 0x0, 0xe, 0x3}]}, {0x0, [0x5f, 0x0, 0x61, 0x30]}}, &(0x7f0000000540)=""/61, 0xde, 0x3d, 0x1}, 0x20)
ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000080)={0x3, 0x4a, 0x4e, 0x9, 0x2, 0xe2})
bind$netrom(r0, &(0x7f0000000000)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x5}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @default, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r1, 0xc10c5541, &(0x7f0000000300)={0x2, 0x1})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000100)={0x0, 0x2})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f00000002c0)={0xcdb6, 0x18, [0x392a9b15, 0x1, 0xf85b, 0x3, 0x55ae, 0x45c9]})
bind$bt_l2cap(r3, &(0x7f00000000c0), 0xe)

00:38:07 executing program 0:
socketpair(0x22, 0x6, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x1100}}, 0x14}}, 0x0)

00:38:08 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000040)=""/95)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:08 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000100)={0x20, 0x1, 0x8, 0x0, 0x15})

00:38:08 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)

00:38:08 executing program 0:
socketpair(0x1, 0x3, 0x3, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x3e80}}, 0x14}}, 0x0)

00:38:08 executing program 0:
socketpair(0x22, 0x3, 0x4, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0x80045500, &(0x7f0000001280))

00:38:08 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

00:38:08 executing program 5:
socketpair(0x1, 0x802, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:08 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x803e}}, 0x14}}, 0x0)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)

00:38:08 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x1000, 0x57, 0x80}, {0x6, 0x2, 0x5, 0x2}]})

00:38:08 executing program 0:
write$cgroup_int(0xffffffffffffffff, &(0x7f00000000c0)=0x1, 0x12)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x20200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r2, 0x40605346, &(0x7f0000000280)={0x7b, 0x2, {0x0, 0x1, 0x1, 0x2}, 0x5})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000000)={0x4, 0x5, 0x1, 'queue1\x00'})
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000001c0)={0x6, 0x7f, 0x0, 'queue1\x00'})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)

00:38:08 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x80, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x24, 0x0, 0x300, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000240)={0x2, 0x1, 0x2, 0xffffccfa, [], [], [], 0x74bb, 0x1f, 0x2, 0x7fff, "8bc7fa2e216df541703a45d55082926b"})
r2 = getpid()
getpgid(r2)

00:38:08 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0xc0}}, 0x0)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f00000012c0)={0x8001, "f975a1"}, 0x6)

00:38:08 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/mnt\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x101a00, 0x0)
sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x64, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@GTPA_LINK={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r2}, @GTPA_VERSION={0x8, 0x2, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_NET_NS_FD={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8000000}, 0x40000)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:08 executing program 1:
socketpair(0x1f, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresuid(&(0x7f0000000080), &(0x7f0000000100), &(0x7f0000000140))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$ASHMEM_GET_NAME(0xffffffffffffffff, 0x81007702, &(0x7f0000000240)=""/250)
getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x6a0800, 0x0)
ioctl$VFIO_GET_API_VERSION(r1, 0x3b64)

00:38:08 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000080)=0xe, 0x80000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:08 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x3ec0}}, 0x0)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:38:08 executing program 0:
socketpair(0xf, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x68040, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x14440, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000000), 0x2)
ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000080)={0x1, 0x0, 0x1ff, 0x3f80000, 'syz0\x00', 0x8})

00:38:08 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200000, 0x0)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0xca9, 0x2}, 0xe)

00:38:08 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:08 executing program 5:
ioctl$ASHMEM_SET_NAME(0xffffffffffffffff, 0x41007701, &(0x7f0000000080)=']/\'-:]\xb0\x00')
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000040)=0x20)
socketpair(0x1, 0x4, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:08 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x33fe0}}, 0x0)

00:38:08 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x10041, 0x0)

00:38:08 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(0xffffffffffffffff, 0xc008551a, &(0x7f0000000040)={0x5, 0xc, [0x9, 0x9, 0x2]})
r2 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r2, 0xc0405519, &(0x7f0000000000)={0x9})
r3 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f00000001c0)={{0x1, 0x4, 0xac3, 0x7c6, 'syz0\x00', 0xffffffff}, 0x4, 0x40, 0x80000000, r3, 0x3, 0x40, 'syz0\x00', &(0x7f0000000080)=['\x00', '\x00', '\x88,{\'\x00'], 0x7, [], [0x0, 0x80, 0x7f, 0x2]})
getpgid(r3)
accept4$bt_l2cap(r0, 0x0, &(0x7f0000000000), 0x1800)

00:38:08 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:09 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x20000094}}, 0x0)

00:38:09 executing program 5:
mlock2(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="9bb53ff469aac37ba9128bc74ed8a6ecbb8103f82e24e5618b91a21fa95405aa1e686441d589b6b0035722ec671c010f816db9a76256b75222a25b29229b156fc3c243ebbddbc6994cb3e68f2ada432b6c50a63cd97504ba3c3cfc1050d1d72b04844b0b88416264a1bc9a939a5fb8459fc8f8719d6ed0813efd0c86a1a83b6a8d9d832c35ca09ac9bf0c7de28620dd87dd14c5477dae493a412e7c6f547b90047522f4e3f81cf3be45e59", 0xab, <r0=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000080)={r0, 0x89, &(0x7f0000000280)=""/137})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x40, 0x18381)

00:38:09 executing program 0:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000018c0)={0xffffffffffffffff, 0x10, &(0x7f0000001880)={&(0x7f0000001780)=""/239, 0xef}}, 0x10)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800)
r2 = accept4$bt_l2cap(r1, &(0x7f0000001900), &(0x7f0000001940)=0xe, 0x100000)
setsockopt$bt_BT_VOICE(r2, 0x112, 0xb, &(0x7f0000001980)=0x63, 0x2)
recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @remote}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000100)=""/52, 0x34}, {&(0x7f00000001c0)=""/223, 0xdf}, {&(0x7f00000002c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f00000012c0)=""/18, 0x12}, {&(0x7f0000001300)=""/237, 0xed}, {&(0x7f0000001400)=""/102, 0x66}, {&(0x7f0000001480)=""/5, 0x5}, {&(0x7f00000014c0)=""/131, 0x83}], 0x9, &(0x7f0000001640)=""/234, 0xea}, 0x40000000)
socketpair(0x1d, 0x3, 0xb4ee, &(0x7f0000001a00)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
bind$netrom(r3, &(0x7f0000001a40)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x6}, [@bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)
r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
bind$bt_l2cap(r4, &(0x7f00000019c0)={0x1f, 0x5, @any, 0x7, 0x1}, 0xe)

00:38:09 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x448500, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)

00:38:09 executing program 1:
r0 = shmget$private(0x0, 0x3000, 0x400, &(0x7f0000ffd000/0x3000)=nil)
shmctl$SHM_LOCK(r0, 0xb)
socketpair(0x2c, 0x1, 0x0, &(0x7f0000000180))
openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400000, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
getresgid(&(0x7f0000000040), &(0x7f0000000080)=<r2=>0x0, &(0x7f00000000c0))
getresgid(&(0x7f0000000100), &(0x7f0000000140)=<r3=>0x0, &(0x7f00000001c0))
r4 = getpgid(0xffffffffffffffff)
r5 = geteuid()
r6 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r6, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$IPC_SET(r6, 0x1, &(0x7f0000000200)={{0x2, 0xee00, r2, r5, r3, 0x80, 0x3}, 0x4, 0x2006, 0x8, 0x2, r4, 0xffffffffffffffff, 0x2})

00:38:09 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:09 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x7ffff000}}, 0x0)

00:38:09 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f0000000140))
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/nvram\x00', 0x8100, 0x0)
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000340)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r1, &(0x7f0000000400)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x300}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r2, 0x20, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0xc004)
socketpair(0x1d, 0x800, 0xb, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f00000001c0)={0x1, 0x1, 0x0, 0x400, &(0x7f0000000080)=[{}]})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0xc04c5349, &(0x7f0000000240)={0x5, 0x80000001, 0x99a4})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:09 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)

00:38:09 executing program 1:
socketpair(0x3, 0x80000, 0x4, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @fixed={[], 0x10}}, 0xe)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ashmem\x00', 0x400001, 0x0)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000100)='-)}}\x1c-#,)\xd2}%{[-$:%\x00')
openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x80840, 0x0)

00:38:09 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:09 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0xfffffdef}}, 0x0)

00:38:09 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:09 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f0000000380)={&(0x7f00000001c0)=@isdn, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/121, 0x79}, {&(0x7f0000000080)=""/41, 0x29}, {&(0x7f00000002c0)=""/115, 0x73}], 0x3, &(0x7f0000000340)=""/37, 0x25}, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x8000, 0x0)

00:38:10 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0xfffffd98)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x2000, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000001c0)={{0x7, 0x0, 0x7fff, 0x0, '\x00', 0x191b}, 0x1, [0x2, 0xffffffffffffffc1, 0x9, 0x6, 0x4, 0x6, 0x10000, 0x80000000, 0xf920, 0x1, 0x7, 0x1, 0x4, 0x4b, 0xfffffffffffffff9, 0x3, 0x4, 0x5, 0x6, 0xfffffffffffffff9, 0xfff, 0x0, 0x441, 0xfff, 0x3, 0x3, 0x887, 0x1, 0xdc5, 0x3, 0x1, 0x2, 0xa0e1, 0x401, 0x9, 0x41, 0x9, 0xfffffffffffffffd, 0x0, 0x7fff, 0xfffffffffffffff9, 0x376, 0x2, 0x4, 0x7f, 0x9, 0x6, 0x3ff, 0x10000, 0x8000, 0x2, 0x8, 0x3, 0x100000000, 0x6, 0x1, 0x7, 0x8, 0x2, 0x0, 0x1, 0x577f, 0x80, 0x1, 0xfe, 0x8, 0x0, 0x1, 0x7fffffff, 0x7fff, 0xffffffff, 0x8, 0x101, 0xffffffffffff0000, 0x1, 0x5, 0x1ff, 0x1, 0x1, 0x5, 0x80000000, 0x100000001, 0x80, 0x1, 0x7fff, 0x1ff, 0x40, 0xfff, 0x522, 0x71, 0x80000001, 0x8, 0x5, 0x10000, 0x100000000, 0xfffffffffffffffb, 0x5, 0x80000001, 0x0, 0x5365, 0xc5f2, 0xfffffffffffffffa, 0xcc, 0x40, 0x8, 0x1, 0x7ff, 0x401, 0x1, 0x800000000000005, 0x6, 0xde96, 0x3, 0x9, 0x80, 0x6, 0x5, 0x5, 0x0, 0x7fff, 0x71, 0xfff, 0x7, 0xa1bd, 0xd06, 0xd785, 0xff, 0x2]})
openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x46201, 0x0)

00:38:10 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)

00:38:10 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0)={0x1f, 0x0, @none}, 0xe)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20000, 0x0)
accept4$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f0000000140)=0xe, 0x800)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r2 = getpid()
ptrace(0xffffffffffffffff, r2)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000100)=0x2, 0x2)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x2}, 0x0)

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:10 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6c, 0x6c, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x1, 0x7}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x8e, 0x1000, 0x1}, 0x20)

00:38:10 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4$netrom(r1, &(0x7f0000000000)={{0x3, @bcast}, [@bcast, @default, @netrom, @bcast, @null, @netrom, @null, @null]}, &(0x7f0000000080)=0x48, 0x80000)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={0x0, 0xa3, &(0x7f00000001c0)=""/163})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x8}, 0x0)

00:38:10 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x101600, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_DELPDP(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, 0x0, 0x300, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @loopback}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_MS_ADDRESS={0x8, 0x5, @broadcast}, @GTPA_NET_NS_FD={0x8, 0x7, r2}]}, 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x10)
getsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2)
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe)

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:10 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:10 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0xa}, 0x0)

00:38:10 executing program 0:
socketpair(0x1, 0x3, 0x9, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000000)={0x6, 0x1, {0xffffffffffffffff, 0x0, 0x1, 0x3, 0xff}})

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0xf0ff7f)

00:38:10 executing program 5:
socketpair(0xa365e716c6fba4c2, 0x800, 0xfffffffc, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f0000000540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000500)={&(0x7f0000000a40)={0x25c, 0x0, 0x4, 0x70bd27, 0x25dfdbfd, {}, [{{0x8}, {0x7c, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x8}}, {0x8, 0x6, r3}}}]}}, {{0x8, 0x1, r4}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x401}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x40}, 0x4000000)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
r6 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000f80)={{0x3, @netrom}, [@remote, @rose, @bcast, @rose, @remote, @null, @null, @null]}, &(0x7f0000001000)=0x48, 0x800)
getpeername$netrom(r6, &(0x7f0000000040)={{0x3, @rose}, [@netrom, @default, @null, @rose, @bcast, @netrom, @rose, @netrom]}, &(0x7f0000000140)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4004844}, 0x0)
r7 = accept4(r5, 0x0, &(0x7f0000000580), 0x80000)
sendmsg$SEG6_CMD_SET_TUNSRC(r7, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x60, 0x0, 0x20, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0xc, 0x4, [0x8, 0x82]}, @SEG6_ATTR_SECRET={0xc, 0x4, [0x9, 0x1]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x6}, @SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x2}, @SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x22e0}]}, 0x60}, 0x1, 0x0, 0x0, 0x809}, 0x44018)
r8 = openat$pidfd(0xffffffffffffff9c, &(0x7f0000000700)='/proc/self\x00', 0x100, 0x0)
waitid$P_PIDFD(0x3, r8, &(0x7f0000000740), 0x20000000, &(0x7f00000007c0))
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r9, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r9, 0x40087703, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000980)={0x7fff, 0x2, 'client0\x00', 0xffffffff80000005, "fe059d233f92c5dd", "d4fb2b4b1f2db1979724fa05e9d6e223eff423962f95d42be11841049f5f456e", 0x40, 0x10001})
uname(&(0x7f0000000880)=""/160)

00:38:10 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:10 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x8000, 0x0)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0xffffff1f}, 0x0)

00:38:10 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = getpid()
r4 = getpgid(r3)
syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid\x00')
r5 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
sched_getscheduler(r4)
sendmsg$TEAM_CMD_NOOP(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r5, 0x5, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x7c, r5, 0x10, 0x70bd26, 0x25dfdbfc, {}, [{{0x8}, {0x60, 0x2, 0x0, 0x1, [{0x5c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x2c, 0x4, [{0x0, 0xf7, 0x8, 0x2}, {0x0, 0x7f, 0x9, 0x6}, {0x1f, 0x1, 0x3f, 0x80000000}, {0x0, 0x5, 0x5, 0x2}, {0x8, 0x21, 0x9, 0x9}]}}}]}}]}, 0x7c}, 0x1, 0x0, 0x0, 0x10000}, 0x45010)

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0xf0ff7f)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x2}, 0x0)

00:38:10 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r1, 0xc08c5334, &(0x7f00000001c0)={0x6, 0x6, 0x0, 'queue1\x00', 0x40f6})

00:38:10 executing program 3:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:10 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0xf0ff7f)

00:38:10 executing program 0:
socket$nl_generic(0x10, 0x3, 0x10)
socketpair(0x9, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x11}, 0x0)

00:38:10 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000000)=0xffffff8f, &(0x7f0000000040)=0x4)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)

00:38:10 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000040)='SEG6\x00')

00:38:10 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:10 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x1100}, 0x0)

00:38:10 executing program 0:
socketpair(0x2a, 0x3, 0xfffffffc, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0xf0ff7f)

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:11 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
socketpair(0x1e, 0x4, 0x5, &(0x7f0000000000))

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x3e80}, 0x0)

00:38:11 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x200408c1}, 0x11)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xf0ff7f)

00:38:11 executing program 0:
socketpair(0x25, 0x5, 0x6, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$DRM_IOCTL_GET_CTX(0xffffffffffffffff, 0xc0086423, &(0x7f0000000000))

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:11 executing program 1:
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x121001, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/seq\x00', 0x41)
ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000640))
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000140))
r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0)
setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f00000007c0)=0x2, 0x4)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000280)={{0x1b, 0x6}, 'port0\x00', 0x6, 0x54f2fcd9bb2aca53, 0x4, 0xffffff08, 0x2, 0x5, 0x2, 0x0, 0x2, 0x80})
ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f00000000c0)=0x8)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x1ff, 0x0, 'client0\x00', 0xffffffff80000006, "450129726d3f0a72", "abd7e2a6ded9b3ccc563c5d8db7019d912cde82752cb1664edbfea3126774057", 0x80, 0x5})
r3 = accept$netrom(r2, &(0x7f0000000340)={{}, [@remote, @netrom, @bcast, @bcast, @default, @null, @default, @bcast]}, &(0x7f00000003c0)=0x48)
recvmsg(r3, &(0x7f0000000480)={&(0x7f0000000400)=@caif=@util, 0x80, &(0x7f0000000500)=[{&(0x7f00000005c0)=""/87, 0x57}], 0x1, &(0x7f0000000540)=""/40, 0x28}, 0x40012141)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/seq\x00', 0x6d0240)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xf0ff7f)

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x803e}, 0x0)

00:38:11 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x2100, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x0, 0x2}, 'port0\x00', 0x8a, 0x0, 0xffffff81, 0xff, 0x6, 0x0, 0x4, 0x0, 0x0, 0xff})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000080))

00:38:11 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000200)={0x1269c92b, 0x0, 0x7c, {0x7f, 0x1}, 0x86, 0xffffffff})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = accept4$netrom(r0, &(0x7f00000003c0)={{0x3, @null}, [@rose, @rose, @netrom, @bcast, @default, @rose, @bcast, @null]}, &(0x7f0000000140)=0x48, 0x80000)
recvmsg(r2, &(0x7f0000001780)={&(0x7f0000000440)=@xdp, 0x80, &(0x7f0000000740)=[{&(0x7f00000004c0)=""/50, 0x32}, {&(0x7f0000000500)=""/239, 0xef}, {&(0x7f0000000600)}, {&(0x7f0000000640)=""/217, 0xd9}], 0x4, &(0x7f0000000780)=""/4096, 0x1000}, 0x42)
r3 = accept4$netrom(r0, &(0x7f0000000000)={{}, [@remote, @remote, @remote, @default, @netrom, @rose, @rose, @null]}, &(0x7f0000000080)=0x48, 0x800)
accept$netrom(r3, &(0x7f00000000c0)={{0x3, @null}, [@null, @netrom, @null, @bcast, @remote, @netrom, @netrom]}, &(0x7f00000001c0)=0x48)
bind$bt_l2cap(r1, 0x0, 0x0)

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x54, 0x54, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}, @restrict={0x6, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x76, 0x1000, 0x1}, 0x20)

00:38:11 executing program 1:
socketpair(0x28, 0x3, 0xffffffff, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x0, 0x1}, 0xfffffe7d)

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x34000}, 0x0)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0xf0ff7f)

00:38:11 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x4000005, 0x1, {0x0, 0x2, 0x800, 0x1, 0x40}, 0x5})
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000280))
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f00000001c0)={0x80000005, 0x401, 0x1, {0x170, 0x80000000}, 0x0, 0x7fffffff})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snd/seq\x00', 0x42100)
setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000240)={0x100, "36d4bc"}, 0x6)
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/snd/seq\x00', 0x2449c0)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r3, 0x80045301, &(0x7f0000000300))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:11 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x4)

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x3, 0x7fff}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x6a, 0x1000, 0x1}, 0x20)

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x400300}, 0x0)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:11 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f00000001c0)={{0x7, 0x2, 0x1, 0x7ff, '\x00', 0x6}, 0x1, [0x9, 0x9, 0x1619, 0x1, 0x200, 0x9, 0xe50, 0xf7fa, 0x7, 0x7, 0x5, 0x0, 0x87, 0x8, 0x40, 0x3, 0x101, 0xfffffffffffffffd, 0x8, 0xffffffffd38cd505, 0x101, 0xc2, 0x200000004000000, 0x68, 0xb05, 0x9, 0x5, 0x20000000000000, 0x100000000, 0x20, 0x8, 0x7, 0x8f, 0x1ff, 0x7fff, 0x1ee000000000000, 0x0, 0x0, 0x3, 0x8d2, 0x4, 0x6, 0xfffffffffffffffd, 0x80000001, 0x9, 0xa63, 0x7fffffff, 0x3ff, 0x1, 0xfffffffffffffff7, 0x80000001, 0x4, 0x3, 0x0, 0x0, 0x8001, 0xe33, 0x2, 0x8, 0x7c, 0x0, 0x4, 0xfc4e, 0x7, 0x3, 0x9fb0, 0xfff, 0x4, 0xb0, 0x0, 0xd7ff, 0x10000, 0x1000, 0x5, 0x8de, 0x1, 0x6443, 0x2, 0x7fffffff, 0x4, 0x5, 0xffff, 0x7fff, 0x3, 0x3, 0x5, 0xd6, 0x2, 0x9, 0x400, 0x3, 0x435, 0x1ff, 0x1, 0x4000000000000000, 0x400, 0x2, 0x0, 0x3, 0xe17, 0x306, 0x401, 0x100000000, 0x0, 0x3, 0x3, 0xffffffffffffffc9, 0x6, 0x3, 0xba9, 0x580, 0x38534000000000, 0xd6, 0x3ff, 0xfaa4, 0x2, 0xffffffffffffffc1, 0x81, 0x6, 0x2, 0xcec3, 0x4, 0x8, 0x8, 0x1, 0x3ff, 0x1f, 0x4]})

00:38:11 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x400000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f00000000c0))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x20000090)
wait4(0xffffffffffffffff, &(0x7f0000000140), 0x40000000, 0x0)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}, @fwd={0x1}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x52, 0x1000, 0x1}, 0x20)

00:38:11 executing program 0:
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self\x00', 0x10002, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x1000000}, 0x0)

00:38:11 executing program 1:
socketpair(0x1c, 0x7fe, 0x61a, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x20, 0x1}, 0xe)
recvmsg(r0, &(0x7f0000001740)={&(0x7f0000000040)=@ipx, 0x80, &(0x7f00000015c0)=[{&(0x7f0000000100)=""/34, 0x22}, {&(0x7f0000000140)=""/100, 0x64}, {&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000280)=""/150, 0x96}, {&(0x7f0000000340)=""/22, 0x16}, {&(0x7f0000000380)=""/43, 0x2b}, {&(0x7f00000003c0)=""/140, 0x8c}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/4, 0x4}, {&(0x7f00000014c0)=""/248, 0xf8}], 0xa, &(0x7f0000001680)=""/171, 0xab}, 0x2000)

00:38:11 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:11 executing program 5:
r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x8a040, 0x0)
socketpair(0x1, 0xa, 0x400, &(0x7f0000000180)={<r1=>0xffffffffffffffff, <r2=>0xffffffffffffffff})
sched_getscheduler(0xffffffffffffffff)
ioctl$VFIO_GET_API_VERSION(r0, 0x3b64)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000001c0)='mptcp_pm\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000003e40)={'team0\x00'})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'team0\x00', <r4=>0x0})
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000003f80)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000003f40)={&(0x7f0000003e80)={0x84, r3, 0x200, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x81}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x80}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x871ca7adbe9b71b9}, 0x40000)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x81c0, 0x0)

00:38:11 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x2000000}, 0x0)

00:38:11 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0xc, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:12 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000000)={0x9, 0x3, 0x1, 0xff, 0x0, 0x2, 0x7}, 0xc)

00:38:12 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x4)

00:38:12 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x400)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000080)={0x8, 0x80000000, 0x0, 'queue1\x00', 0x8})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000000)=0x7fff, 0x4)
recvmsg(r1, &(0x7f0000000280)={&(0x7f00000001c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000140), 0x0, &(0x7f0000000240)=""/58, 0x3a}, 0x40000167)
r3 = getpid()
getpgid(r3)
ptrace(0x4208, r3)

00:38:12 executing program 0:
socketpair(0x4, 0x80000, 0xfffffffd, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
getsockname$netrom(r0, &(0x7f0000000100)={{0x3, @null}, [@netrom, @null, @netrom, @bcast, @netrom, @netrom, @default, @default]}, &(0x7f0000000180)=0x48)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
bind$bt_l2cap(r3, 0x0, 0xffffffffffffff19)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x8, 0x4)
socket(0x1e, 0x4, 0x0)
r4 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffe000/0x1000)=nil)
shmctl$SHM_LOCK(r4, 0xb)
r5 = socket(0x2, 0x800, 0x8)
bind$netrom(r5, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)

00:38:12 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:12 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x11000000}, 0x0)

00:38:12 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000200)={0x43a, 0x200, 0x0, 'queue0\x00'})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(0xffffffffffffffff, 0xc0605345, &(0x7f00000002c0)={0x9, 0x0, {0x2, 0x2, 0x1, 0x1, 0x6}, 0x2e9})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
socket$nl_generic(0x10, 0x3, 0x10)
uname(&(0x7f0000000340)=""/5)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x2c, r2, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x2}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x40)

00:38:12 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x4)

00:38:12 executing program 1:
socketpair(0x15, 0x3, 0xb, &(0x7f0000000000)={<r0=>0xffffffffffffffff})
r1 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000040), 0x80000)
bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0xfd4a, @fixed={[], 0x11}, 0xffff}, 0xe)

00:38:12 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10140, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(r0, 0x3b72, &(0x7f0000000140)={0x7e, 0x3, 0xfffffffffffffffc, 0x0, "b6c0faba5433d016a3e0db71266d2b1e0a1baebca3c72b706192e24704561485d3c25460f4a785a3e3862132f27c867debf60ae66afbbb278a4164da88b2283057d810fbd1722a85642360abfb57bd9cc918ed9502396fb3e1707d60c8bcd9687feaf875a10d"})

00:38:12 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:12 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x803e0000}, 0x0)

00:38:12 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x4)

00:38:12 executing program 1:
socketpair(0x1, 0x3, 0x7, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xffff, @fixed={[], 0x12}, 0x0, 0x1}, 0xffffffffffffff57)

00:38:12 executing program 5:
socketpair(0x1a, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:12 executing program 0:
socketpair(0x1, 0x4, 0x5, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = accept4$netrom(0xffffffffffffffff, &(0x7f0000000040)={{0x3, @netrom}, [@netrom, @bcast, @default, @null, @bcast, @default, @netrom, @null]}, &(0x7f00000000c0)=0x48, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000100)={0x1, @bcast, @rose={'rose', 0x0}, 0x7fffffff, 'syz1\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xbc4, 0x5, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]})
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000000))
r2 = openat$vfio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vfio/vfio\x00', 0x48a002, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r2, 0x3b65, 0x8)
clock_gettime(0x0, &(0x7f0000000240))
bind$bt_l2cap(r0, 0x0, 0x0)
prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000200))

00:38:12 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0xffffff7f}, 0x0)

00:38:12 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:12 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)

00:38:12 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
recvfrom$netrom(r1, &(0x7f00000001c0)=""/172, 0xac, 0x12020, &(0x7f0000000040)={{0x3, @null, 0x3}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:12 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x5, 0x4)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:12 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x40030000000000}, 0x0)

00:38:12 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile={0x0, 0x0, 0x0, 0x9, 0x5}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:12 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, &(0x7f0000000040)={0xfffffffb, 0x2, {0x0, 0x2, 0x4d29, 0x0, 0x4}, 0x4})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x80, 0x0, 0x20, 0x70bd28, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00'}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x40800}, 0x4000)

00:38:12 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x40, 0x0)

00:38:12 executing program 0:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000011c0)={0x2d0, 0xfffffeff, 0x5})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
recvmsg(r1, &(0x7f0000001300)={0x0, 0xfffffecc, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/4085, 0xff5}, {&(0x7f00000000c0)=""/80, 0x50}, {&(0x7f0000001380)=""/254, 0xfe}, {&(0x7f00000012c0)=""/10, 0xa}], 0x4}, 0x120)
bind$bt_l2cap(r1, 0x0, 0x0)
r2 = openat$ion(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ion\x00', 0x100, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r2, 0xc0184908, &(0x7f0000000080)={0x34, 0x0, &(0x7f0000000040)})

00:38:12 executing program 1:
r0 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmctl$SHM_UNLOCK(r0, 0xc)
r1 = syz_open_dev$sndctrl(&(0x7f00000005c0)='/dev/snd/controlC#\x00', 0x0, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f00000000c0)={0x9, 0x3, 0x0, 0x0, &(0x7f0000000000)=[{}, {}, {}]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$bt_l2cap(r2, &(0x7f00000000c0), 0xe)

00:38:12 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x100000000000000}, 0x0)

00:38:13 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x200000000000000}, 0x0)

00:38:13 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000280)={{0x5, 0x6, 0x0, 0xffff, 'syz0\x00', 0x3}, 0x1, [0xfffffffffffffffe, 0x200, 0x1, 0x800, 0x0, 0x1f, 0x0, 0x3, 0x7, 0x3, 0x9, 0x5, 0x81, 0x3, 0x1, 0x2, 0x5, 0x0, 0x20, 0x215, 0x3f, 0x0, 0x0, 0x8, 0x5362, 0x6, 0x401, 0x1, 0x6, 0x4, 0x1f, 0x7fffffff, 0xa04, 0x6, 0xfffffffffffffff7, 0x4, 0x6, 0x7f, 0x3f, 0x1, 0x0, 0x53a, 0x80, 0x5, 0xed7, 0x5, 0x6, 0x7, 0x0, 0xfff, 0x7ff, 0x4, 0x6, 0x2, 0x0, 0x100, 0x8, 0x0, 0x80, 0x5, 0x0, 0x55d5db5f, 0x6, 0x4, 0x1000, 0x4, 0x100, 0x100000000, 0x2, 0x7, 0x4, 0xffffffff00000001, 0x0, 0x2, 0x9, 0x69d6, 0x80000000, 0xfffffffffffffff7, 0x4, 0xfffffffffffff564, 0x8, 0x2, 0x1, 0x0, 0x7, 0x5c9, 0x24, 0xb7, 0xff, 0x9, 0xfffffffffffffffb, 0x10001, 0x8, 0x8, 0x0, 0x2, 0x5, 0x3, 0x7, 0x8, 0x9, 0x800, 0x4, 0x1, 0x800, 0x6, 0x1, 0x0, 0x100, 0xf12, 0x7ff, 0x4, 0x9, 0x81, 0x4, 0x4, 0x8, 0x2, 0x7, 0x5, 0x7, 0x0, 0x0, 0x5, 0x7, 0xfff, 0x1e97, 0x3ff]})
shmctl$SHM_STAT_ANY(r1, 0xf, &(0x7f00000001c0)=""/152)

00:38:13 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
accept4(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80, 0x180800)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
r2 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
syz_open_dev$dri(&(0x7f0000000140)='/dev/dri/card#\x00', 0x4, 0x414400)
shmat(r2, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_INFO(r2, 0xe, &(0x7f00000001c0)=""/30)

00:38:13 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
bind$bt_l2cap(r1, 0x0, 0x0)
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:13 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:13 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
waitid$P_PIDFD(0x3, r2, 0x0, 0x4, &(0x7f0000000240))
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000040)={0x20, 0x0, 0x4, 0x1})
r3 = getpid()
rt_sigqueueinfo(r3, 0x10, &(0x7f00000001c0)={0x3f, 0x8, 0x8})

00:38:13 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x1100000000000000}, 0x0)

00:38:13 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:13 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000000)="df1ab5f74b3f93b52f12cbb6ba92afcdb35630796c6a3880e4dc839fd872f92288d9632d1bcc2830b3945f049d55a3eb9505161d311beed49b8d38b869edcc6e18483bcb79d35b74b49838ef451e302b9c58", 0x52)

00:38:13 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x803e000000000000}, 0x0)

00:38:13 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x2e, 0x1000, 0x1}, 0x20)

00:38:13 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = socket(0x25, 0x2, 0x2)
r2 = accept$netrom(r1, &(0x7f0000000240)={{0x3, @null}, [@rose, @null, @null, @rose, @netrom, @remote, @bcast, @rose]}, &(0x7f00000002c0)=0x48)
recvfrom$netrom(r2, &(0x7f0000000300)=""/29, 0x1d, 0x40000002, &(0x7f0000000340)={{0x3, @bcast, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
sendmsg$SEG6_CMD_SET_TUNSRC(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='h\b\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fbdbdf250300000008000200080000000500060003000000080003008000000014000100fc02000000000000000000000000000010000400090000000100000007000000080003000101000008000300000000000500060080000000"], 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:13 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:13 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
recvfrom$netrom(r1, &(0x7f0000000080)=""/32, 0x20, 0x0, &(0x7f00000000c0)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x4}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
bind$bt_l2cap(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(0xffffffffffffffff, 0xc058534f, &(0x7f0000000000)={{0x8, 0x9}, 0x1, 0xfffffffb, 0x8002, {0x1, 0xfd}, 0x9, 0x35ac0789})

00:38:13 executing program 1:
socketpair(0x2, 0x3, 0x2, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:13 executing program 1:
socketpair(0x1, 0x3, 0xfffffffd, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @any, 0x800}, 0xe)
r1 = getpid()
getpgid(r1)
syz_open_procfs$namespace(r1, &(0x7f0000000040)='ns/pid_for_children\x00')

00:38:13 executing program 2:
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:14 executing program 5:
syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x2e, 0x1000, 0x1}, 0x20)

00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0xffffff7f00000000}, 0x0)

00:38:14 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast, 0x3}, [@null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000000)=0x10000, &(0x7f0000000040)=0x4)
syz_open_dev$sndctrl(&(0x7f0000000140)='/dev/snd/controlC#\x00', 0x1f, 0x101000)
bind$bt_l2cap(r0, 0x0, 0x0)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080)={0x1f, 0x401, @none, 0xfffd, 0x2}, 0xe)

00:38:14 executing program 2:
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:14 executing program 1:
socketpair(0x29, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = getpid()
getpgid(r1)
capget(&(0x7f0000000040)={0x20071026, r1}, &(0x7f0000000080)={0x5, 0xffff, 0x80, 0x6, 0x81, 0xfff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x101100, 0x0)
ioctl$NBD_SET_SIZE(r2, 0xab02, 0x7fff)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:14 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0xa, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x2e, 0x1000, 0x1}, 0x20)

00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x2}, 0x0)

00:38:14 executing program 0:
socketpair(0x23, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

00:38:14 executing program 2:
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:14 executing program 5:
socketpair(0x1d, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000040)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x11}, 0x0)

00:38:14 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000000))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000280)={r1, 0x10, &(0x7f0000000240)={&(0x7f00000001c0)=""/126, 0x7e}}, 0x10)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000c26bd7000fddbdf2506000000080003000600000008eb010005000000"], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x10)

00:38:14 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = getpid()
getpgid(r1)
sched_rr_get_interval(r1, &(0x7f0000000000))

00:38:14 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

[ 1396.274824] can: request_module (can-proto-0) failed.
00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

[ 1396.305322] can: request_module (can-proto-0) failed.
00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x1100}, 0x0)

00:38:14 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:14 executing program 0:
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000080))
socketpair(0x18, 0xa, 0x24, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:14 executing program 1:
sendto$netrom(0xffffffffffffffff, &(0x7f0000000200)="3ccf23db95e4686c9c9c9a60269f3bee42e0d8e25242d9f7d90e31bde4db3a2dfaec6628e0cd11cef4d2f8782f85bebde7db17b0d9dd8548a84cf343e6a880ed42d7b842cbedb93e5dbedf1e1cb9c6dd9d245afaab96d7", 0x57, 0x10, &(0x7f0000000280)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @default]}, 0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x9, 0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x0, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x40002}, 0x44841)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcsa\x00', 0x2, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(r2, 0x7706, &(0x7f0000000340))
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:14 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x3e80}, 0x0)

00:38:14 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
socketpair(0x2a, 0x6, 0x10001, &(0x7f0000000080)={<r1=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @any, 0x5, 0x2}, 0xe)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:14 executing program 1:
sendmsg$SEG6_CMD_GET_TUNSRC(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012dbd7000fddbdf250400000008000300010400000800020003000400050005000200000014000100fe8000000000000000000000000000aa14000100fc0100"/78], 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x8095)
r0 = socket(0x2, 0xa, 0x1)
syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0)='SEG6\x00')
ptrace(0x4208, 0xffffffffffffffff)
sendmsg$SEG6_CMD_SET_TUNSRC(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB, @ANYBLOB="2efa2ffbb3c0dee80b05a92bda44c99ff07f192d79ddc6082306761432248f055c448b8ca122dec1754b0f43cabb5d66ce11d3833f40869c2428f82344c9b3e0a76a255856ad24a4dd8ef73c1876bc3dea1f19dfb021724beefd271f2e236175b844f8", @ANYBLOB="10002dbd7000fbdbdf250300000008000300180b0000"], 0x1c}, 0x1, 0x0, 0x0, 0x20000001}, 0x20040010)
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)

00:38:14 executing program 0:
socketpair(0x20, 0xa, 0x7ff, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:14 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:14 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:14 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x803e}, 0x0)

00:38:14 executing program 1:
socketpair(0xf, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x80000000, &(0x7f0000000040)=0x4)

00:38:15 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x6, 0x80a, 0x7, &(0x7f0000000140)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
accept4(r2, 0x0, &(0x7f00000001c0), 0x800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000125bd7000fbdbdf25010000000800040000000000080008000300000008000200020000000000"], 0x44}}, 0x20000804)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
getsockname$netrom(r0, &(0x7f00000004c0)={{}, [@netrom, @null, @netrom, @rose, @remote, @remote, @netrom, @null]}, &(0x7f0000000540)=0x48)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x95)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
getsockopt$bt_BT_RCVMTU(r3, 0x112, 0xd, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x2)

00:38:15 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000080)=0x8001, 0x2)
getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')

00:38:15 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x34000}, 0x0)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:15 executing program 0:
socketpair(0x17, 0x6, 0x49946, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:15 executing program 1:
socketpair(0xb, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x4c9000, 0x0)
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f0000000100)={0x2, 0x0, 0x3, {0x80000001, 0xfff}, 0xffffffff, 0x8})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00'})

00:38:15 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_PVERSION(0xffffffffffffffff, 0x80045300, &(0x7f0000000080))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:15 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x400300}, 0x0)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:15 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:15 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcsa\x00', 0x4000, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000200)={0x2, 0x29, &(0x7f00000001c0)=""/41})
r2 = socket(0x1f, 0x80000, 0x0)
getsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f0000000040)=0x10001, &(0x7f0000000080)=0x4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:15 executing program 0:
socketpair(0x3, 0x3, 0x5, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:15 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x1000000}, 0x0)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:15 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x4, 0x5, 0x0, 0x7fffffff, 'syz0\x00', 0xae70}, 0x0, [0xffffffffffffff7f, 0x3, 0xea, 0x0, 0x7, 0xfffffffffffffffb, 0x6d1150dc, 0x0, 0x607b, 0x6, 0x3, 0x2, 0x1e78, 0x25f, 0x2, 0x8, 0xa4e, 0x9, 0x3ff, 0x3, 0xfe, 0x9, 0xb0d6, 0x4, 0x6, 0x3f, 0x101, 0x8c4e, 0x6, 0x3, 0x7, 0x0, 0x100000001, 0x8, 0x1000, 0x81, 0x8001, 0x80000000, 0x9fa, 0xe8d, 0x8, 0x7, 0x2, 0x0, 0x5d, 0x9982, 0x401, 0x587, 0x1, 0x40, 0x401, 0x9, 0x7, 0x59, 0x8, 0x6ef, 0x7fffffff, 0x22, 0x96b3, 0x320, 0x20, 0x0, 0x1000, 0x7, 0x5, 0x40, 0x9, 0x9, 0xfff, 0x1ff, 0x67f, 0x7, 0xff, 0x3, 0x50000000000000, 0xff, 0x75, 0x3, 0x9, 0x8, 0x8, 0x2, 0x8, 0x100000001, 0x1, 0x1, 0x7, 0x20, 0x6, 0x1, 0x3f, 0x81, 0x1, 0x80000001, 0x200, 0x5, 0x4d8, 0x4, 0x5, 0x1, 0x0, 0x1bd, 0x0, 0x1ffc00000000, 0x5, 0x1, 0xfffffffffffffff8, 0x10000, 0x10001, 0x6, 0x2, 0x2850, 0x1, 0x0, 0xa92a, 0x2, 0x100000000, 0x8, 0x100000001, 0xf2, 0xff, 0x3, 0x4, 0x7, 0x7, 0x9, 0x100000001, 0x7fffffff]})

00:38:15 executing program 0:
socketpair(0x1, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:15 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
accept4(r1, &(0x7f0000000040)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x80, 0x80800)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:15 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x2000000}, 0x0)

00:38:15 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, &(0x7f00000001c0)={{0x9, 0x2, 0x5, 0x5, 'syz0\x00', 0x6}, 0x1, [0x2, 0x50bb, 0x200, 0x100, 0x5, 0xa9, 0x7, 0x60, 0xffffffffffffffff, 0xead, 0x6, 0x9, 0xe, 0x0, 0x8, 0x6, 0x5, 0x96, 0x2, 0x100000000, 0x8, 0x8001, 0xffffffffffffffb8, 0x3, 0x1, 0x0, 0x80000001, 0x8000, 0x5, 0x4, 0x120000000, 0x36, 0x8, 0xff, 0x7, 0x0, 0x3d35122c, 0xfb, 0x7d, 0xfffffffffffff800, 0x0, 0xc7ef5324, 0xffffffffffff9a24, 0x5b, 0x7, 0x401, 0x8000, 0x70, 0x49e, 0x3, 0x5, 0x80000000, 0x0, 0x4, 0x1000, 0x100, 0x138b, 0x5, 0x8000, 0x1, 0x2, 0x8, 0x0, 0x7, 0x7, 0x101, 0x7fffffff, 0x40000000000000, 0x1, 0x4, 0x5, 0x0, 0x5, 0x0, 0x3, 0x1, 0xffffffffffff8000, 0xffffffffffff730e, 0xffffffffffff0000, 0x10040000, 0x34, 0x40, 0x9, 0x6, 0x8, 0x6, 0x10001, 0x7, 0x6, 0x9d, 0x2, 0xb215, 0xfffffffffffffffd, 0x3, 0x0, 0x8000, 0x22, 0x6, 0x1f, 0x100, 0x480000, 0x2, 0x8e, 0x8, 0x0, 0x7, 0xfff, 0x6, 0xae, 0x3, 0x6, 0x5, 0x101, 0x8e, 0x3, 0x10001, 0x8, 0x8, 0x0, 0x1ae, 0x6, 0xaf4, 0x4c12d18c, 0x6, 0xffffffffffffffe1, 0x37, 0x6, 0x8001]})
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc04c5349, &(0x7f0000000000)={0x8, 0x3f, 0xffffffff})
setsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000080)=0x1, 0x2)

00:38:15 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:15 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x100, 0x70bd27, 0x25dfdbfb, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @multicast1}]}, 0x1c}}, 0x40000)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000280)=""/4096, 0x44, 0x1000, 0x1}, 0x20)

00:38:15 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x11000000}, 0x0)

00:38:15 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)

00:38:15 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x8, 0x14000)
ioctl$DRM_IOCTL_NEW_CTX(r1, 0x40086425, &(0x7f0000000100)={0x0, 0x3})
r2 = accept4$netrom(r0, 0x0, &(0x7f0000000000), 0x80800)
setsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, &(0x7f0000000040)=0x10001, 0x4)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:15 executing program 0:
socketpair(0x28, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f0000000280)={{0x3c}, 'port0\x00', 0x54, 0x800, 0x2, 0x2, 0x1, 0x31, 0x89d6, 0x0, 0x3, 0x30})
bind$bt_l2cap(r0, 0x0, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000000)=0x1, &(0x7f0000000240)=0x62)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f0000000180)={0x3, 0x1, 'client1\x00', 0x2, "d95a53ff9d8e5fa1", "0a4df535514e9ae6c4f059023c1c82a43fc8e0702e8fb3468df0d15dc8bb1b90", 0x81, 0x9})

00:38:15 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:15 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x803e0000}, 0x0)

00:38:16 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
shmctl$IPC_INFO(0x0, 0x3, &(0x7f0000000040)=""/122)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:16 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="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", 0xfc, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={r2, 0x12, &(0x7f0000000080)=""/18})

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000280)=""/4096, 0x42, 0x1000, 0x1}, 0x20)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:16 executing program 0:
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000000)=""/51)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(0xffffffffffffffff, 0x40505330, &(0x7f0000000340)={{0xc1, 0x1}, {0x7f, 0xff}, 0x8b, 0x1, 0x40})
bind$bt_l2cap(r0, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="82252fa25e00"/20, @ANYRES16=0x0, @ANYBLOB="00012abd7000fcdbdf250200000024000180060001000a0000000800030000000000050002006e0000000800030000000000"], 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4000000)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000240)={0x1, @default, @netrom={'nr', 0x0}, 0x81, 'syz1\x00', @default, 0x9, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null]})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f00000002c0)={0x179247cb, 0x2, {0xffffffffffffffff, 0x2, 0xf5, 0x2, 0x1}})

00:38:16 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000040)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = getpid()
getpgid(r1)
sched_getscheduler(r1)

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0)

00:38:16 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x12080, 0x0)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000280)=""/4096, 0x41, 0x1000, 0x1}, 0x20)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:16 executing program 0:
socketpair(0x9, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:16 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000040)={0x200, 0x5, 0x1, 0x4, &(0x7f00000001c0)=[{}, {}, {}, {}, {}]})
socketpair(0x28, 0x3, 0x7f, &(0x7f0000000000))

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x40030000000000}, 0x0)

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x40, 0x1000, 0x1}, 0x20)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendto$netrom(0xffffffffffffffff, &(0x7f00000001c0)="45ada73a48d2ed73dfa07ab232f8289d0db6143faea2b95de33bbf902fd387ce004230a4dd4710cfc6ced1ad5d4b7c397d0986420f6efa25cd1f7291e59f4631720597148044c9310638ccf6283a0093a76af618ed232d0d87482db38fe48fe5453aaa8a7955b08df3f18d783f35137a402a9d4322df269303fe232d342ac77552cb3f96f7a85b750fc1f5a7be0a6779048519ad1b5f7a2b9ab986dccf9433d40a8a885504ad35769e0da062f313d2034c5b312f3ed39664c9e7509413e963cde2a23a9b1c4c41d2699311c1b4e9172d37", 0xd1, 0x20000004, 0x0, 0x0)

00:38:16 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0xe2000, 0x0)
ioctl$ION_IOC_HEAP_QUERY(r1, 0xc0184908, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000140)})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000080)={0x0, 0x56, &(0x7f0000000000)=""/86})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000000c0), 0xe)

00:38:16 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000000)=0x7, &(0x7f0000000040)=0x4)
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0)

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x100000000000000}, 0x0)

00:38:16 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/seq\x00', 0x490281)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r1, 0x80045300, &(0x7f0000000240))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="240000004c1eb20db79be487b0adb57ab57acb36d0df2e1d3bfdee0ca2315330fb04047a8d152898b5340d5b693d7495a0ed34", @ANYRES16=0x0, @ANYBLOB="8853d3dd7000fbdbdf2502800000080002000200002008000300010000009e332d"], 0x24}, 0x1, 0x0, 0x0, 0x20080010}, 0x800)

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/4096, 0x3f, 0x1000, 0x1}, 0x20)

00:38:16 executing program 1:
socketpair(0x47933153d2524549, 0x3, 0x1, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:16 executing program 0:
socketpair(0x1, 0x6, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
socket(0x1e, 0x3, 0x8)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, 0x0, 0x0, 0x0, 0x0, 0x0)

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000, 0x1}, 0x20)

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x200000000000000}, 0x0)

00:38:16 executing program 5:
socketpair(0x23, 0xa, 0x1000, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:16 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
accept4$bt_l2cap(r0, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x80000)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$bt_l2cap(r1, 0x0, 0xffffffffffffff87)

00:38:16 executing program 1:
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000040)={0x40, @tick=0x80000000, 0x2f, {0x4, 0xd9}, 0x8, 0x0, 0x7f})
socketpair(0x29, 0x3, 0x80000002, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/seq\x00', 0xc0155b539a7a99fe)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f00000001c0)={{0x1, 0x2}, 'port1\x00', 0xf8, 0xd0040, 0x1f, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x6, 0x2})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x22, @tick=0x6, 0x2, {0x7, 0x81}, 0x0, 0x1, 0x1})

00:38:16 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:16 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
sendto$netrom(r0, 0x0, 0x0, 0x20000004, 0x0, 0x0)

00:38:16 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x1100000000000000}, 0x0)

00:38:17 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = socket(0xb, 0x2, 0x7)
bind$bt_l2cap(r0, 0x0, 0xfffffffffffffee5)

00:38:17 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x30500, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x7, 0x1, 0x3, [], [], [], 0xff, 0x8000, 0x5, 0x4, "9cbca11761ca9bec356dc1eecf8eebe8"})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000300)={{0x3, 0x0, 0x81, 0x2, 'syz1\x00', 0x80}, 0x5, 0x200, 0x38c, 0x0, 0x2, 0x3, 'syz0\x00', &(0x7f0000000140)=['-#\'}\x00', '/dev/vcsa\x00'], 0xf, [], [0xe039, 0x80, 0x838, 0x8]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$bt_l2cap(r1, &(0x7f00000000c0), 0xe)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x4)

00:38:17 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:17 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x12080, 0x0)
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:17 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x803e000000000000}, 0x0)

00:38:17 executing program 0:
socketpair(0x1, 0xa, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:17 executing program 5:
r0 = getpgid(0xffffffffffffffff)
getpgid(r0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x9d3a654b16280055, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0xffffff7f00000000}, 0x0)

00:38:17 executing program 1:
waitid$P_PIDFD(0x3, 0xffffffffffffffff, &(0x7f0000000040), 0x40000000, &(0x7f00000000c0))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f0000000000), 0xe)

00:38:17 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x30500, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x7, 0x1, 0x3, [], [], [], 0xff, 0x8000, 0x5, 0x4, "9cbca11761ca9bec356dc1eecf8eebe8"})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000300)={{0x3, 0x0, 0x81, 0x2, 'syz1\x00', 0x80}, 0x5, 0x200, 0x38c, 0x0, 0x2, 0x3, 'syz0\x00', &(0x7f0000000140)=['-#\'}\x00', '/dev/vcsa\x00'], 0xf, [], [0xe039, 0x80, 0x838, 0x8]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvram\x00', 0x666401, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f0000000000)={0x6, 0xff, 0x0, 'queue0\x00', 0x600000})

00:38:17 executing program 5:
socketpair(0x21, 0x3, 0x1000, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:17 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x0, @none, 0x3}, 0xffffffffffffff17)

00:38:17 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:17 executing program 2:
r0 = getpgid(0xffffffffffffffff)
getpgid(r0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
openat$pidfd(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self\x00', 0x9d3a654b16280055, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 0:
socketpair(0x11, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:17 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:17 executing program 1:
socketpair(0x1, 0x80000, 0x4, &(0x7f0000000040)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = accept4$bt_l2cap(r0, 0x0, &(0x7f0000000080), 0x800)
getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000100), &(0x7f00000000c0)=0x4)
bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x3, 0x2}, 0xe)

00:38:17 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c)
getpgid(0x0)

00:38:17 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x7ff], &(0x7f0000000100)=[0x8, 0xa9f, 0x3f, 0xbafd, 0x7, 0xb7b, 0x159], 0x1, 0x5, 0x4, &(0x7f0000000140)=[0x9, 0x318b, 0x7, 0x3, 0x0], &(0x7f00000001c0)=[0x20]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')

00:38:17 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2}, 0x0)

00:38:17 executing program 2:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x30500, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000080))
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x9, 0x7, 0x1, 0x3, [], [], [], 0xff, 0x8000, 0x5, 0x4, "9cbca11761ca9bec356dc1eecf8eebe8"})
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000300)={{0x3, 0x0, 0x81, 0x2, 'syz1\x00', 0x80}, 0x5, 0x200, 0x38c, 0x0, 0x2, 0x3, 'syz0\x00', &(0x7f0000000140)=['-#\'}\x00', '/dev/vcsa\x00'], 0xf, [], [0xe039, 0x80, 0x838, 0x8]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x13, 0xc, [0x4, 0x13, 0x8]})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3, 0x2)

00:38:17 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000200)={0x0, 0x1, &(0x7f00000000c0)=[0x7ff], &(0x7f0000000100)=[0x8, 0xa9f, 0x3f, 0xbafd, 0x7, 0xb7b, 0x159], 0x1, 0x5, 0x4, &(0x7f0000000140)=[0x9, 0x318b, 0x7, 0x3, 0x0], &(0x7f00000001c0)=[0x20]})
syz_init_net_socket$netrom(0x6, 0x5, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
syz_genetlink_get_family_id$SEG6(&(0x7f0000000000)='SEG6\x00')

00:38:17 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_DO_IT(0xffffffffffffffff, 0xab03)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:17 executing program 1:
accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @rose, @bcast, @rose, @null, @null, @default, @bcast]}, &(0x7f0000000080)=0x48)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)

00:38:17 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x11}, 0x0)

00:38:17 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1100}, 0x0)

00:38:18 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0xffffff7f}, 0x0)

00:38:18 executing program 5:
getsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000000040), 0x2)
socketpair(0xb, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:18 executing program 0:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {<r0=>0x0}, {}, {}, {}, {}]})
r1 = getpid()
ptrace$setopts(0x4200, r1, 0x53d, 0x80000)
ioctl$DRM_IOCTL_SWITCH_CTX(0xffffffffffffffff, 0x40086424, &(0x7f0000000080)={r0, 0x3})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
bind$bt_l2cap(r2, 0x0, 0x0)
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)

00:38:18 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(0xffffffffffffffff, 0xc008551c, &(0x7f0000000000)={0x13, 0xc, [0x4, 0x13, 0x8]})
bind$bt_l2cap(r0, 0x0, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$bt_BT_SNDMTU(r1, 0x112, 0xc, &(0x7f0000000040)=0x3, 0x2)

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="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", 0xfc, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={r2, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x3e80}, 0x0)

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="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", 0xfc, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={r2, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000040)={0x81, 0x5, 0x5, 0xc1, 0x98, 0x9, 0x4}, 0xc)
ioctl$VFIO_IOMMU_MAP_DMA(0xffffffffffffffff, 0x3b71, &(0x7f0000000340)={0x20, 0x1, 0x0, 0xcd, 0x2})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/nvram\x00', 0x30200, 0x0)
ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000200)={0x9, 0x24, [0x8, 0x3, 0x18f2, 0x2, 0x8, 0x9, 0x3, 0x20, 0x4]})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00'})
sendmsg$SEG6_CMD_SETHMAC(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="68007a05", @ANYRES16=0x0, @ANYBLOB="000125bd7000fedbdf250100000004000400050006003f00000005000600010000001800040003000000ffffffffbd98000056000000ff03000008000200e50900001000040001000000000000009300000005000500000000000800030001000000"], 0x68}, 0x1, 0x0, 0x0, 0x8010}, 0x20000000)

00:38:18 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1100}, 0x0)

00:38:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:18 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x22080)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000100)={0x6, &(0x7f00000000c0)=[{}, {}, {<r3=>0x0}, {}, {}, {}]})
ioctl$DRM_IOCTL_NEW_CTX(r2, 0x40086425, &(0x7f0000000140)={r3, 0x3})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(r2, 0xab07, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
bind$bt_l2cap(r0, 0x0, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x1, 0x0)
ioctl$ASHMEM_SET_NAME(r4, 0x41007701, &(0x7f0000000080)='-/\x00')

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000040)={&(0x7f00000001c0)="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", 0xfc, <r2=>0x0})
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={r2, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x803e}, 0x0)

00:38:18 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x10000, 0x0)
ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0)

00:38:18 executing program 0:
socketpair(0x1, 0x4, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = shmget$private(0x0, 0x1000, 0x20, &(0x7f0000ffc000/0x1000)=nil)
shmctl$SHM_LOCK(r2, 0xb)
r3 = accept4(r0, &(0x7f0000000000)=@pppoe={0x18, 0x0, {0x0, @random}}, &(0x7f0000000080)=0x80, 0x81000)
shmctl$SHM_UNLOCK(0xffffffffffffffff, 0xc)
ioctl$SIOCNRDECOBS(r3, 0x89e2)
bind$bt_l2cap(r1, 0x0, 0x0)

00:38:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:18 executing program 5:
socketpair(0x1e, 0x3, 0x401, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x10)

00:38:18 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, 0x0, 0x0)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0)

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
r1 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r1, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x34000}, 0x0)

00:38:18 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x11000000}, 0x0)

00:38:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:18 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080)='gtp\x00')
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480)='/dev/nvram\x00', 0x84043, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r3, 0xc058534b, &(0x7f00000004c0)={0x4b9cf8d0, 0x101, 0x8000, 0xa0, 0xfffffff9, 0x52ff5d69})
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x2c, r2, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_O_TEI={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_LINK={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x841}, 0x20000000)
r4 = accept4$netrom(r1, &(0x7f0000000240)={{0x3, @default}, [@remote, @default, @remote, @bcast, @netrom, @rose, @remote, @rose]}, &(0x7f00000002c0)=0x48, 0x800)
recvfrom$netrom(r4, &(0x7f0000000300)=""/252, 0xfc, 0x12000, &(0x7f0000000400)={{0x3, @bcast, 0x6}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}, 0x48)

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x400300}, 0x0)

00:38:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:18 executing program 0:
socketpair(0x1, 0x6, 0xffff, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0x1, 0xff, 0xfff, {0x3f, 0x80000001}, 0xf19, 0x20})
bind$bt_l2cap(r0, 0x0, 0x0)
r2 = getpid()
getpgid(r2)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, &(0x7f00000000c0)=0x8, 0x4)
ptrace$setopts(0xc60c, r2, 0x3, 0x4)
ioctl$DRM_IOCTL_UNLOCK(0xffffffffffffffff, 0x4008642b, &(0x7f0000000000)={0x0, 0x20})

00:38:18 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 5:
socketpair(0x1a, 0xa, 0x0, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_CARD_INFO(0xffffffffffffffff, 0x81785501, &(0x7f00000001c0)=""/242)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:18 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:18 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:18 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r2, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:18 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:18 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x1000000}, 0x0)

00:38:19 executing program 5:
socketpair(0x1, 0x5, 0xfd0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r1, 0x40bc5311, &(0x7f00000001c0)={0x0, 0x1, 'client0\x00', 0x80000000, "d748fd049f964348", "39539775fb00bd2015c4a4b140e713270b1f06c152e267f7e3be35518e1d4562", 0x7fffffff, 0x1f6})
ioctl$DRM_IOCTL_UNLOCK(r1, 0x4008642b, &(0x7f0000000040)={0x0, 0x2})

00:38:19 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bind$bt_l2cap(r0, &(0x7f00000000c0), 0xe)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x2000000}, 0x0)

00:38:19 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r2, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:19 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 5:
socketpair(0x15, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000041}, 0x0)

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x11000000}, 0x0)

00:38:19 executing program 3:
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(0xffffffffffffffff, 0x40bc5311, &(0x7f00000002c0)={0x4, 0x1, 'client1\x00', 0x4, "91079647eca099fc", "ecf6fa455fc9791b3b07a63399c4a7249fcaa1db3d31812e665f2843d92da879", 0x9, 0x4})
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r2, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:19 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_GET_INFO(r1, 0x3b70, &(0x7f00000001c0)={0x18, 0x0, 0x0, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
accept4(r0, &(0x7f0000000040)=@llc, &(0x7f0000000140)=0x80, 0x800)

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x803e0000}, 0x0)

00:38:19 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:19 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r2, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:19 executing program 5:
clock_gettime(0x2, &(0x7f0000000000))
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x80040)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, &(0x7f00000001c0)={0x4, 0x2, 'client1\x00', 0xffffffff80000007, "61150d1dc24d68fc", "83196165c4209523de205b1c948014e1fd0b000000000000721a78d8d2670116", 0x8})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20000, 0x0)
write$sndseq(r2, &(0x7f0000000140), 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0)

00:38:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:19 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
r0 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r1, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x2)

00:38:19 executing program 5:
socketpair(0x1, 0x3, 0x20, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bind$netrom(r0, &(0x7f0000000040)={{0x3, @default, 0x8}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}, 0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:19 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:19 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:19 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:19 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x11)

00:38:20 executing program 5:
socketpair(0x2a, 0x5, 0x29, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$ASHMEM_SET_PROT_MASK(0xffffffffffffffff, 0x40087705, &(0x7f0000000240)={0x4, 0x5})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000300)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x8c, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x44000}, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
ioctl$NBD_SET_FLAGS(0xffffffffffffffff, 0xab0a, 0x7)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100c}, 0xc, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="92f8224b4c495f9138e34eb42efb57265032182aa4dd71847fc9874d2ae7228c1acf324e", @ANYRES16=r3, @ANYBLOB="010027bd7000ffdbdf25b20fcb41578be700030002000000040001800c000180060024aa8b6c01000000000000000000000068c95e5bdcdd02ebfb3dedc243f975f296108def46ffa1762325b3544b60302fd0403ea40b30b6a446cb66dbf58b62671fc4e1e413ad5a1ac3319e75f27e38f2a72592898a28674e250ee05750bf019cd18984c99b5893599a0f908fcf621709b985727b6525f58402a1729bf2923061404f7ba66b5eb00906c53a"], 0x34}}, 0x4044000)

00:38:20 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x51, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:20 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x1100)

00:38:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x39, 0x1000, 0x1}, 0x20)

00:38:20 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:20 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x3e80)

00:38:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x2b, 0x1000, 0x1}, 0x20)

00:38:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x39, 0x1000, 0x1}, 0x20)

00:38:20 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:20 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x803e)

00:38:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x2b, 0x1000, 0x1}, 0x20)

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x39, 0x1000, 0x1}, 0x20)

00:38:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x2b, 0x1000, 0x1}, 0x20)

00:38:20 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x34000)

00:38:20 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:20 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000240)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000340)={'team0\x00', <r4=>0x0})
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000380)={0x390, 0x0, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [{{0x8, 0x1, r2}, {0x110, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x6, 0x1, 0x0, 0x5}, {0x45, 0x7f, 0x4, 0x3}, {0x9, 0x7f, 0x4, 0x5}]}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x3f}}, {0x8}}}]}}, {{0x8}, {0xac, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x100}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8}, {0x1a8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x88}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x10001}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x7}}}]}}]}, 0x390}, 0x1, 0x0, 0x0, 0x2004}, 0x10)
sysinfo(&(0x7f00000001c0)=""/102)

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x2d, 0x1000, 0x1}, 0x20)

00:38:20 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:20 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x400300)

00:38:20 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:20 executing program 0:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000))
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:20 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0xe0083, 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000080)=0x80000000, 0x4)

00:38:20 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x2d, 0x1000, 0x1}, 0x20)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:21 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x1000000)

00:38:21 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000040), 0x2)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x9, [@volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x2d, 0x1000, 0x1}, 0x20)

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x2000000)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:21 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:21 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x42000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000001c0)={{0x4, 0x40}, 'port1\x00', 0x8, 0x40000, 0x9, 0xfff, 0x6, 0x2, 0x5, 0x0, 0x5, 0x4})

00:38:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x11000000)

00:38:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:21 executing program 5:
r0 = accept4(0xffffffffffffffff, &(0x7f0000000440)=@rc={0x1f, @fixed}, &(0x7f00000004c0)=0x80, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x58, 0x0, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7b}]}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x8081}, 0x24000010)
ioctl$ASHMEM_GET_PROT_MASK(r1, 0x7706, &(0x7f0000000300))
r3 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000540)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010026bd7000fddbdf250200000008008300af0000002cb0ef6c967f8c101a4c098299641549f715eadeabb4eb401bc26255fc947f9518af53bf115c6c59405cabe31eadeff4096af84107c5ed23d178449fbf50673ec2798c035d4489d8467559dc2bca6ba7427cd9e7013b3f79d476d9979c4817e98c498cdd8794d3999412e6caeb00f1ad2bfd9453b060c10a76e906fc2a5343e9d14e3169da887208953d569fcbd08b0419c38ea749c3baf5509f650f8d6cc7c713dbb3e8bd5a7fa5c264e923b3972220f7e70d37f0456540eff5afbf8e674b949fa9"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40804)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r4=>0xffffffffffffffff})
r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x10000, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0xd4, 0x0, 0x300, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_ADDR={0x60, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x20000000}, 0x10008000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r4, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x803e0000)

00:38:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:21 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x2440)
ioctl$NBD_SET_SIZE_BLOCKS(r1, 0xab07, 0x680)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0xffffff7f)

00:38:21 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000280)=""/4096, 0x42, 0x1000, 0x1}, 0x20)

00:38:21 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x51, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x0, 0x0})

00:38:21 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
uname(&(0x7f0000000040)=""/30)
socketpair(0x27, 0xa, 0x43, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x1, 'client0\x00', 0x1, "a7a45a4278225243", "0add7077b19eef80094ad32118bb34cd91a2cf483d4422b832702f34928cabf0", 0x800, 0x4})
prctl$PR_GET_SECCOMP(0x15)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:21 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x40030000000000)

00:38:21 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000280)=""/4096, 0x41, 0x1000, 0x1}, 0x20)

00:38:21 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:22 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:22 executing program 5:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/seq\x00', 0x290000)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r0, 0xc02c5341, &(0x7f00000001c0))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x8850}, 0x4000000)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000080)=0x34)
shmget$private(0x0, 0x4000, 0x70, &(0x7f0000ffc000/0x4000)=nil)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x100000000000000)

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x40, 0x1000, 0x1}, 0x20)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x0)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x45, 0x1000, 0x1}, 0x20)

00:38:22 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000040)={0x7, 0x4, 0x9, 0x1, 'syz0\x00', 0x185})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:22 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
uname(&(0x7f0000000040)=""/30)
socketpair(0x27, 0xa, 0x43, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x1, 'client0\x00', 0x1, "a7a45a4278225243", "0add7077b19eef80094ad32118bb34cd91a2cf483d4422b832702f34928cabf0", 0x800, 0x4})
prctl$PR_GET_SECCOMP(0x15)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x200000000000000)

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/4096, 0x3f, 0x1000, 0x1}, 0x20)

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000280)=""/4096, 0x44, 0x1000, 0x1}, 0x20)

00:38:22 executing program 0:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:22 executing program 5:
socketpair(0x22, 0x800, 0x2, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x1100000000000000)

00:38:22 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
uname(&(0x7f0000000040)=""/30)
socketpair(0x27, 0xa, 0x43, &(0x7f0000000080))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f00000001c0)={0x0, 0x1, 'client0\x00', 0x1, "a7a45a4278225243", "0add7077b19eef80094ad32118bb34cd91a2cf483d4422b832702f34928cabf0", 0x800, 0x4})
prctl$PR_GET_SECCOMP(0x15)
syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/time\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:22 executing program 0:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000, 0x1}, 0x20)

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x43, 0x1000, 0x1}, 0x20)

00:38:22 executing program 5:
socketpair(0x10, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x4000000)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x803e000000000000)

00:38:22 executing program 0:
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(0xffffffffffffffff, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)

00:38:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000280)=""/4096, 0x42, 0x1000, 0x1}, 0x20)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0xffffff7f00000000)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, 0x0, 0x0)

00:38:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000280)=""/4096, 0x41, 0x1000, 0x1}, 0x20)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1f}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, [], 0x1}}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x5c}}, 0x4000000)

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, 0x0, 0x0)

00:38:22 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x40, 0x1000, 0x1}, 0x20)

00:38:22 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
getsockopt$netrom_NETROM_N2(r0, 0x103, 0x3, &(0x7f0000000040)=0x10001, &(0x7f0000000080)=0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000280)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000c00)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000023c0)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000002800)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004f00)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000050c0)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000006680)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000006e00)={'team0\x00', <r10=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000076c0)={'team0\x00', <r11=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000008c40)={'team0\x00', <r12=>0x0})
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f00000092c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000009280)={&(0x7f0000008c80)={0x5fc, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [{{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000000}}, {0x8, 0x6, r3}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x268, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8, 0x4, r8}}, {0x8, 0x7, 0x400}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x193e}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x1e96d497}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xe6}}}]}}, {{0x8, 0x1, r10}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r11}}}, {0x3c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0xc, 0x4, [{0x5dd1, 0x1, 0x1, 0xff}]}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r12}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x401}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x47d}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x23140}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x100}}, {0x8}}}]}}]}, 0x5fc}, 0x1, 0x0, 0x0, 0x40001}, 0x1)

00:38:22 executing program 4:
socketpair(0x2b, 0x5, 0x0, &(0x7f0000000180))

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, 0x0, 0x0)

00:38:22 executing program 3:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:22 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/4096, 0x3f, 0x1000, 0x1}, 0x20)

00:38:22 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000280))
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x480000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
r7 = accept$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@bcast, @default, @default, @default, @remote, @null, @default]}, &(0x7f0000000140)=0x70)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000002c0)={0xf1, 0x7fffffff, 0x1, 'queue1\x00'})
accept4(r7, &(0x7f0000000040)=@isdn, &(0x7f0000000000)=0x80, 0x80800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

00:38:22 executing program 5:
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5335, &(0x7f00000001c0)={0xffffffff, 0x73f97956, 0x0, 'queue1\x00', 0x1})
socketpair(0x1, 0x3, 0x9, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:22 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}], 0xa8)

00:38:22 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:23 executing program 3:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000, 0x1}, 0x20)

00:38:23 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x40)

00:38:23 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
shmctl$SHM_INFO(r1, 0xe, &(0x7f0000000000)=""/51)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:23 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}], 0x8c)

00:38:23 executing program 3:
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:23 executing program 5:
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x7)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x2)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$NBD_DO_IT(r1, 0xab03)

00:38:23 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000240)='/dev/nvram\x00', 0x8000, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r3, 0x80045500, &(0x7f0000000280))
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)
r5 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000380)='/dev/vcsa\x00', 0x480000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r5, 0xc08c5335, 0x0)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r6, 0xc08c5335, 0x0)
r7 = accept$netrom(r3, &(0x7f00000001c0)={{0x3, @netrom}, [@bcast, @default, @default, @default, @remote, @null, @default]}, &(0x7f0000000140)=0x70)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r5, 0xc08c5334, &(0x7f00000002c0)={0xf1, 0x7fffffff, 0x1, 'queue1\x00'})
accept4(r7, &(0x7f0000000040)=@isdn, &(0x7f0000000000)=0x80, 0x80800)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x0)

00:38:23 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000040)=0x4)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nvram\x00', 0x214840, 0x0)
ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000001c0))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000093cc25e9d59e304c9f6f1c96a45400d833ed000000000000000006000007"], 0x14}}, 0x0)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}], 0x70)

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:23 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 5:
seccomp$SECCOMP_SET_MODE_FILTER(0x1, 0x4, &(0x7f0000000140)={0x1, &(0x7f0000000040)=[{0x3f, 0x0, 0x3f, 0x3}]})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000080)={0x83, @tick=0x3, 0x2, {0x3, 0x4}, 0x20, 0x0, 0xff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r2, 0xc05c5340, &(0x7f00000001c0)={0xc4, 0x2, 0xfffffc01, {0x8, 0xfffffff9}, 0x9, 0x101})

00:38:23 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x803e000000000000)

00:38:23 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}], 0x54)

00:38:23 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, 0x0, 0x3e, 0x0, 0x1}, 0x20)

00:38:23 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0xb, [@const={0xe, 0x0, 0x0, 0xa, 0x5}, @fwd={0x7}, @restrict={0x8, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x5, 0x6}}, @int={0x4, 0x0, 0x0, 0x1, 0x0, 0x5a, 0x0, 0x14, 0x5}, @restrict={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x2e, 0x2e, 0x30, 0x5f, 0x5f, 0x61, 0x5f, 0x61, 0x5f]}}, &(0x7f00000001c0)=""/166, 0x7b, 0xa6}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x1}, 0x0)

00:38:23 executing program 1:
socketpair(0x4, 0x800, 0x0, &(0x7f0000000000)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ashmem\x00', 0x21c040, 0x0)
r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r2, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}, {0x4, 0x8, 0x7, 0x5, @time={0x5, 0x1}, {0x16, 0x4}, {0x8, 0x9}, @time=@time={0xcf, 0x33}}, {0x40, 0x3, 0x8, 0x55, @tick=0x1, {0x0, 0x3f}, {0x0, 0xb5}, @queue={0x9, {0x7614, 0x1}}}, {0x6, 0x5, 0x9, 0x8, @tick=0x3ff, {0x80}, {0x6, 0x1}, @raw32={[0x80000000, 0xbdb, 0x4]}}, {0x0, 0x96, 0x0, 0x5, @time={0x3c, 0x4}, {0x2}, {0x3f, 0x56}, @result={0xfffffffe, 0x10000}}, {0x9, 0x9, 0x8, 0x1b, @time={0x4, 0x80000000}, {0x3f, 0x8}, {0x6, 0x1}, @quote={{0x8, 0x8}, 0x7, &(0x7f0000000180)={0x96, 0xcf, 0x2, 0x0, @tick=0x49, {0x2e, 0x6}, {0x94, 0x7}, @time=@tick=0x3f}}}], 0xc4)
ioctl$ASHMEM_SET_NAME(r1, 0x41007701, &(0x7f0000000080)='#\x00\x90a\xf4\x8a]s\xd0\x06\x0f\xa8n^K\x10\x14\xb1>\xe3~\xaa\xdc\x19\x8dHm\xefs\xc8\xde\x7f\b\xc7\xb4\xe3AP\t|~7@\x19\x1e\xdcz\x8e\xd0G\xb0\x88q\x8f#!\xfc\bn\x00{f\xa0`\xcb\xf9c0\xd9\xd9A\x1cz\xe8\x1a\xb7\xa3\xd6\xc0\x94\xfav-G\x9fL\x9bb:\xd3\xae\x13uC\xaf\xb2l`\xf5\x04c\x04\x1cI\x80\r\xba\xc2\xe1\xb9\x96')
bind$bt_l2cap(r0, 0x0, 0x0)

00:38:23 executing program 3:
r0 = syz_open_dev$dri(0x0, 0x0, 0xc2001)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}, {0x8, 0x4, 0x4, 0x3, @time={0x5, 0x2}, {0x8, 0x5}, {0x2}, @ext={0x28, &(0x7f0000000140)="0f416aa606dc2b44e2e75acc44339a0c6eebc68278d92d2f3aa8433bbf76fe1c8e400cf344541ccf"}}], 0x38)

00:38:23 executing program 4:
socketpair(0x1, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x24000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f00000001c0)={{0x56, 0x80}, 'port1\x00', 0x8, 0x80008, 0x80000000, 0x7fffffff, 0xffff, 0x4, 0x9, 0x0, 0x7, 0x7f})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:23 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x81, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:23 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
r3 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r6=>0x0})
seccomp$SECCOMP_GET_ACTION_AVAIL(0x2, 0x0, &(0x7f0000000200)=0x20)
sendmsg$TEAM_CMD_PORT_LIST_GET(r2, &(0x7f0000000840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000800)={&(0x7f00000003c0)={0x43c, r3, 0x4, 0x70bd28, 0x25dfdbfd, {}, [{{0x8}, {0x174, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x3ff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x80}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x8000}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x4, 0x0, 0xff, 0x1}, {0x0, 0x9, 0x8, 0x8}]}}}, {0x6c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x3c, 0x4, [{0x0, 0xff, 0x1, 0x2}, {0xffff, 0x3f, 0x81, 0x600000}, {0x8000, 0xfa, 0x6, 0x3}, {0xff, 0x8, 0x9, 0x1}, {0x0, 0x3f, 0x2, 0x6}, {0x20, 0x9, 0xa5, 0x8}, {0x3, 0x85, 0xdf}]}}}]}}, {{0x8, 0x1, r5}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}]}}]}, 0x43c}, 0x1, 0x0, 0x0, 0x24008011}, 0x20008000)

00:38:23 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:23 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

00:38:23 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0), 0x0)

00:38:23 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:23 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2}}, @volatile]}}, &(0x7f0000000280)=""/4096, 0x3e, 0x1000}, 0x20)

00:38:23 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:23 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(0xffffffffffffffff, 0xc0a85352, &(0x7f00000001c0)={{0x4, 0x80}, 'port0\x00', 0x0, 0xa0000, 0x33e7, 0x3, 0xff, 0x0, 0x3, 0x0, 0x5, 0x38})

00:38:23 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}, @volatile]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x46, 0x1000, 0x1}, 0x20)

00:38:23 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0), 0x0)

00:38:24 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:24 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})

00:38:24 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
prctl$PR_SET_CHILD_SUBREAPER(0x24, 0x0)

00:38:24 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:24 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0), 0x0)

00:38:24 executing program 4:
sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x20004000)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfc}, 0x14}}, 0x0)
ioctl$ASHMEM_GET_PROT_MASK(0xffffffffffffffff, 0x7706, &(0x7f0000000200))

00:38:24 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket(0xb, 0x80000, 0x7fff)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:24 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:24 executing program 3:
syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(0xffffffffffffffff, 0xc01064ac, &(0x7f0000000100)={0x0, 0x12, &(0x7f0000000080)=""/18})

00:38:24 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:24 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000000)={'team0\x00'})

00:38:24 executing program 4:
socketpair(0x1, 0x3, 0x10000002, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0001000000000000000006000000"], 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$VFIO_IOMMU_MAP_DMA(r1, 0x3b71, &(0x7f0000000000)={0x20, 0x1, 0x80000001, 0x8, 0x6})

00:38:24 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:24 executing program 4:
r0 = getpid()
getpgid(r0)
ptrace(0x11, r0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:24 executing program 5:
openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x143000, 0x0)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r2 = accept4(r0, &(0x7f00000001c0)=@qipcrtr, &(0x7f0000000080)=0x80, 0xc00)
r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000240)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r3, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x38}, 0x1, 0x0, 0x0, 0x20000001}, 0x20004001)

00:38:24 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:24 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:24 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:24 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:25 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x30, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x30}, 0x1, 0x0, 0x0, 0x20048044}, 0x4040050)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:25 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:25 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
accept$netrom(r0, &(0x7f0000000000)={{0x3, @null}, [@bcast, @null, @rose, @rose, @default, @bcast, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:25 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:25 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f00000001c0)={0xaa, 0x3, 0x1ff, 0x5, "7bd215f7e22ba4034917a34c19439e11efb119a9c3e839e6eedf1165f8501634a4dac3e3896b84e63d156d2a6ea696904250307d27c7e5b8bf4cc396439e38748db0210c4da5a182a70b5318654074ef39e81fab7bd9eda9bc4f1ccc338dc7e49a442864ab9c7d1c9e1022221d6a06bc6c5d303e5cd5ae838c48c46b6d159df00b2eab50ae8d30ef0bf3e4ab2b2bf1d715ea"})

00:38:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, 0x0)

00:38:25 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x0, 0x4, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:25 executing program 4:
sched_getparam(0x0, &(0x7f0000000000))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = getpgid(0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0x5, 0x3, 0x10001, 0x1, 'syz1\x00', 0xfffff800}, 0x4, 0x20000000, 0x1, r2, 0x9, 0xe5d, 'syz1\x00', &(0x7f0000000040)=['+!\x00', '$@\x00', '\\\\\x00', '!\xbb^\x00', '\x00', '\x00', 'e^\x00', ']&$\xaa\x00', '\'\x00'], 0x19, [], [0x3, 0x6, 0x2, 0x873b]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:25 executing program 3:
r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_MODE_GETPROPBLOB(r0, 0xc01064ac, &(0x7f0000000100)={0x0, 0x0, 0x0})

00:38:25 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time={0xfffffff7, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:25 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$SNDRV_CTL_IOCTL_POWER_STATE(0xffffffffffffffff, 0x800455d1, &(0x7f0000000040))

00:38:25 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x3, 0xe9}, {0x1f, 0x8}, 0x4, 0x2, 0x5})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:25 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x0, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:26 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time={0x0, 0x40}, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:26 executing program 4:
prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000000))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
recvmsg(r0, &(0x7f0000001240)={&(0x7f0000000140)=@nl=@proc, 0x80, &(0x7f00000011c0)=[{&(0x7f0000000040)}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001200)=""/49, 0x31}, 0x10040)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001280)=ANY=[@ANYBLOB="34b82875868ebaa61548a5f2e9b8d126d75813358d7ff23729b86ad0bdfdac875f8cd2ee1803d203e540222931ddb35b9526f8e9e8fd4af4628d0d943ac634692ed91f1daa0a475bcbf6cb4ddfaa3ead628ffea7c20bf7a7bf2095e06c3e6c6f43e783b7f5a56a1311c1d712f2f0bdf5d09ce51f83a1a0d400a40ab47daf0fc20803220740fbc6817d8dd3bc4c3019c8daf140548076f27202e3afe1e16190a86d682f66b46f9e7ee5da338a109d7a3955c082d7108dff781cef83feeaaa5cf6f967d8b392f4e9ced8b702c6037e7b26e99f6fd9b9390c143db6bdd99fe153e12ec36c557a4818684919e42e801c4f5ffffffffffffffffc47c0fe30ee", @ANYRES16=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x14}}, 0x0)

00:38:26 executing program 3:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={0x0, &(0x7f0000000280)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:26 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:26 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
r2 = syz_genetlink_get_family_id$team(&(0x7f0000000040)='team\x00')
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x60, r2, 0x5, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x60}}, 0x0)
r3 = accept4(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, <r4=>0x0}, &(0x7f0000000080)=0x80, 0x80000)
sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x180, r2, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @user_linkup={{{0x24, 0x1, 'user_linkup\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x50, 0x2, 0x0, 0x1, [{0x4c, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x1c, 0x4, [{0x101, 0x7f, 0x20, 0x4}, {0x0, 0x20, 0x4, 0x1000}, {0x40, 0x20, 0x6, 0x5}]}}}]}}]}, 0x180}, 0x1, 0x0, 0x0, 0x20000000}, 0x8083)
accept4(r0, &(0x7f0000000400)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000480)=0x80, 0x80800)
getsockopt$netrom_NETROM_N2(r3, 0x103, 0x3, &(0x7f00000004c0)=0x5d, &(0x7f0000000500)=0x4)

00:38:26 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x22, 0x1000, 0x1}, 0x20)

00:38:26 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80a0}, 0x8010)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x16}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x8001, 0x5, 0x4, 0x949]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80)

00:38:26 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000000)={{0x3, 0xe9}, {0x1f, 0x8}, 0x4, 0x2, 0x5})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:26 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {0x4}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:26 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x22, 0x1000, 0x1}, 0x20)

00:38:26 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000800)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x14, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x0, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x0, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x0, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x9d}]}, @MPTCP_PM_ATTR_ADDR={0x0, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x0, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x28}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x0, 0x4, @mcast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x0, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x0, 0x2, 0x40}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x0, 0x2, 0x2}]}, 0x56}, 0x1, 0x0, 0x0, 0x2000c000}, 0x0)

00:38:26 executing program 5:
socketpair(0x1, 0x1, 0x1ffffffc, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$VFIO_GET_API_VERSION(r0, 0x3b64)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0xc000}, 0x0)

00:38:26 executing program 3:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x50, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x80a0}, 0x8010)
r2 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000280)='SEG6\x00')
sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x68, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_ALGID={0x5, 0x6, 0x2}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x16}}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x8001}, @SEG6_ATTR_SECRET={0x18, 0x4, [0x2, 0x8001, 0x5, 0x4, 0x949]}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}]}, 0x68}, 0x1, 0x0, 0x0, 0x40}, 0x80)

00:38:27 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:27 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {0x40, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:27 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0xa}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x22, 0x1000, 0x1}, 0x20)

00:38:27 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:27 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
setsockopt$netrom_NETROM_N2(r1, 0x103, 0x3, &(0x7f0000000000)=0x1, 0x4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000306000000bc42a282150a82d85d05b4cb71d72e37db8ab1b7fd34e9a05df5513fa033"], 0x14}}, 0x0)

00:38:27 executing program 5:
socketpair(0x4, 0x2, 0x6f6, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r1, 0xc0605345, &(0x7f0000000040)={0x4, 0x2, {0x0, 0x1, 0x6, 0x2}, 0x7f})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:27 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:27 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {0x0, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:27 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000), 0x2)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:27 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:27 executing program 5:
sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x44, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @multicast2}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x41c1}, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'team0\x00', <r0=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000580)={'team0\x00', <r1=>0x0})
accept4(0xffffffffffffffff, &(0x7f0000000dc0)=@can={0x1d, <r2=>0x0}, &(0x7f0000000e40)=0x80, 0x80800)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000f80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000e80)={0xb4, 0x0, 0x100, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @local}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={[], [], @loopback}}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000000}, 0x404c880)
socketpair(0x22, 0xd, 0x20ffff, &(0x7f0000000180)={0xffffffffffffffff, <r3=>0xffffffffffffffff})
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsa\x00', 0x101402, 0x0)
accept$netrom(r4, 0x0, &(0x7f0000000080))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r3, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:27 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:28 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:28 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:28 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x4, 0x10000, 0x9, 0x2, 0x1, 0x8c})

00:38:28 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:28 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:28 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:28 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x1000, 0x1}}], 0x1c)

00:38:28 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:28 executing program 5:
socketpair(0x1, 0x6, 0xe80, &(0x7f0000000040)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:28 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00fea0ca3f88d39583d2ff070000"], 0x14}}, 0x0)

00:38:28 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x0, 0x0, 0x2}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:28 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:29 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {}, @control={0x0, 0x0, 0x1}}], 0x1c)

00:38:29 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd, 0xd, 0x2, [@datasec={0x0, 0x0, 0x0, 0xf, 0x1, [], 'k'}]}}, &(0x7f0000000300)=""/201, 0x2a, 0xc9, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:29 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:29 executing program 2:
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:29 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
accept4(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, <r3=>0x0}, &(0x7f0000000140)=0x80, 0x1000)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="09d5c16c9edafd4e767b2cffa5fe0003000030d89219c2d649dca373"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x40090)

00:38:29 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0xa, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e, 0x0]}}, &(0x7f0000000280)=""/4096, 0x3a, 0x1000, 0x1}, 0x20)

00:38:29 executing program 0:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {}, @control}], 0x1c)

00:38:29 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x40000)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x4, 0x4)

00:38:29 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x804)

00:38:29 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x39, 0x1000, 0x1}, 0x20)

00:38:29 executing program 2:
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:29 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:29 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61, 0x5f]}}, &(0x7f0000000280)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:29 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000040)={0xf5, 0xf2, 0x2})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TIMER(r2, 0xc0605345, &(0x7f00000001c0)={0xfffffffe, 0x0, {0x2, 0x3, 0xffffffff, 0x3, 0x1}, 0x5})

00:38:29 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T4(0xffffffffffffffff, 0x103, 0x6, &(0x7f0000000040)=0x2, &(0x7f0000000080)=0x4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000000c0)={0x0}}, 0x40000)
setsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000140)=0x4, 0x4)

00:38:29 executing program 2:
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:29 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/seq\x00', 0x20000)
ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000040))
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0xffffffffffffff8a, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4cfeffff", @ANYRES16=0x0, @ANYBLOB="10080000000000002000060000000000018000000600050000000000020008000000000003000a01010200000100020000000000020007000000000003000000000000000180"], 0x14}}, 0x0)
syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')

00:38:29 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:29 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:29 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0, 0x61]}}, &(0x7f0000000280)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:29 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040)='gtp\x00')
accept4(r0, &(0x7f00000001c0)=@xdp={0x2c, 0x0, <r3=>0x0}, &(0x7f0000000140)=0x80, 0x1000)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="05022dbd7000fddbdf250100000008000100", @ANYRES32=r3, @ANYBLOB='\b\x00\a\x00', @ANYRES32=r4, @ANYBLOB="09d5c16c9edafd4e767b2cffa5fe0003000030d89219c2d649dca373"], 0x24}, 0x1, 0x0, 0x0, 0x8094}, 0x40090)

00:38:29 executing program 5:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x5, 0x7, 0x2, 0x490, [], [], [], 0x5, 0x8000, 0x7fff, 0x7, "48ad90980a72186543f56097a2fe751a"})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
ioctl$NBD_CLEAR_QUE(r2, 0xab05)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000040))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:29 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:29 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$VFIO_CHECK_EXTENSION(r0, 0x3b65, 0x6)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x70bd29}, 0x14}}, 0x1)

00:38:30 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30, 0x0]}}, &(0x7f0000000280)=""/4096, 0x36, 0x1000, 0x1}, 0x20)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x4, 0x10000, 0x9, 0x2, 0x1, 0x8c})

00:38:30 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x48, r1, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@SEG6_ATTR_SECRET={0x10, 0x4, [0x5c77, 0xfff, 0x6]}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x7fffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x4}, @SEG6_ATTR_DST={0x14, 0x1, @remote}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x800)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendto$netrom(r2, &(0x7f0000000040)="9eae3a8b6ef6155e1d09efc756f1c51529799f92c4fbb1f8fa2ebecccde21e23b6fd84e8385a518226acf1f2ac851158cadb5357e5c5e93c0acce59e40d254b917714c8005adcfe805d23e4e96e6b7da7e5bf1cc4543e445cbbe63af6b68983c18c367b191d46d19770a03d27b8b40cc", 0x70, 0x4004050, 0x0, 0x0)

00:38:30 executing program 4:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r0, 0xc1205531, &(0x7f00000001c0)={0x6e, 0x21b, 0x1, 0xe4, [], [], [], 0x3, 0x1f, 0x7fff, 0x9b7, "d0219c860006031e364b27ad8d012461"})
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="1500000077c29968d2f411a2ccfee6362a5d90396943d4f7a511bb7753c65c3d2c6f6cc77f9215b0f2b7b7b5129e4a8fd91fd923c5bd0ab017deed1e1c4922558e62c7534a95e4e6e29046ff174ab26f7aeda4acc23208eb13a198a5970629336227d08a5574dfdddcb51208e05b8e31e81179fb9e0c4f75a1078b55c282aaa0211887341fe3ad46fa1ec1bb468aa7610487d90ee84be48ede950dd1601b42cda875e0effb1c6bbef87dabc59d526a9322a86be2cf73daf1a44e02883d4dc29f94337f2804", @ANYRES16=0x0, @ANYBLOB="000025bd70000000000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)

00:38:30 executing program 2:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e, 0x30]}}, &(0x7f0000000280)=""/4096, 0x35, 0x1000, 0x1}, 0x20)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x4, 0x10000, 0x9, 0x2, 0x1, 0x8c})

00:38:30 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x25dfdbfe}, 0x14}}, 0x0)

00:38:30 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x4)

00:38:30 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0, 0x2e]}}, &(0x7f0000000280)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:30 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80200, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f00000001c0)={0x4, 0x10000, 0x9, 0x2, 0x1, 0x8c})

00:38:30 executing program 5:
socketpair(0x23, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:30 executing program 4:
socketpair(0x11, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x1)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
shmat(0x0, &(0x7f0000ffe000/0x1000)=nil, 0x6000)
getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, &(0x7f0000000040), 0x2)
getsockname$netrom(r0, &(0x7f00000002c0)={{0x3, @default}, [@null, @default, @rose, @remote, @default, @null, @netrom, @default]}, &(0x7f0000000080)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0)
ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)="b2fdf29d97ca2595307e3542b0acd34fe90acd853e83bd04a72845901b2434e993b6f7b24f44ec4220af546fc2b54b6f3f715683733c2a516d14238f522cdd399c28c589800f197533e152a3a52e7d80bb29562857604d5e5ebc92a2fab82b9f7326ffeca2b4dd147a62663f6228fe70327094368237a710387cee1a0d107249c4c62a8a0183663f62846b92dd837cc8b0292dd461b816cada70bfb8a9fd7018a51f05c7e956a31f2d4c6818fa36c7186c1d4a12045b9d9f8f6a0d31d793de9ec3f38cbb6c12ecd23b75d7e76606cb453ff97bafc50690270540862f09f2430eca6c4fe85852d13d0251aaa243b426362441acec5a", 0xf5})

00:38:30 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}, {0x0, [0x0]}}, &(0x7f0000000280)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:30 executing program 5:
socketpair(0x3, 0x2, 0xfffffffc, &(0x7f0000000080)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socket$nl_generic(0x10, 0x3, 0x10)
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x301800, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, 0x0, 0x801, 0x70bd2d, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004801}, 0xc000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000000)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20004000}, 0x4040890)
syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0)

00:38:30 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x0, 0x200000}, 0x14}}, 0x0)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)
openat$vfio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vfio/vfio\x00', 0x80200, 0x0)

00:38:30 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 2:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 5:
socketpair(0x1, 0x5, 0xfffffffe, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000280)=""/4096, 0x32, 0x1000, 0x1}, 0x20)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000040)={0x7, 0x3, 0x8, 0x7, 0x2, 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:30 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000000)=0x5, &(0x7f0000000040)=0x4)

00:38:30 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:30 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
r1 = accept$netrom(r0, &(0x7f0000000040)={{}, [@null, @remote, @bcast, @bcast, @netrom, @rose, @null, @default]}, &(0x7f0000000140)=0x48)
ioctl$VFIO_IOMMU_GET_INFO(0xffffffffffffffff, 0x3b70, &(0x7f0000000280)={0x18, 0x0, 0x0, 0xff})
syz_genetlink_get_family_id$SEG6(&(0x7f00000002c0)='SEG6\x00')
recvfrom$netrom(r1, &(0x7f00000001c0)=""/13, 0xd, 0x0, &(0x7f0000000200)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}, 0x48)

00:38:30 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:30 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:30 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

00:38:30 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x22a000)
ioctl$NBD_SET_SIZE_BLOCKS(r0, 0xab07, 0x8)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

00:38:31 executing program 5:
socketpair(0x1, 0x3, 0x21, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(0xffffffffffffffff, 0xc0bc5310, &(0x7f00000001c0))
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000140)={0x6, &(0x7f0000000080)=[{}, {<r2=>0x0}, {}, {}, {}, {}]})
ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000280)={r2, 0x1})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00'})

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, 0x0, 0x32, 0x0, 0x1}, 0x20)

00:38:31 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x100040c5}, 0x2004c811)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000280)=""/4096, 0x32, 0x1000}, 0x20)

00:38:31 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 5:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:31 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000040)={'team0\x00', <r2=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001880)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000018c0)={'team0\x00', <r5=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001900)={'team0\x00', <r6=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001a00)={'team0\x00', <r7=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001b00)={'team0\x00', <r8=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001b40)={'team0\x00', <r9=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001e00)={'team0\x00', <r10=>0x0})
sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000002740)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002700)={&(0x7f0000001e40)=ANY=[@ANYBLOB="88080000", @ANYRES16=0x0, @ANYBLOB="000125bd7000ffdbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="0400028008000100", @ANYRES32=r2, @ANYBLOB="6c0102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=r3, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400d3ffffff3800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000800000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000500030003000000080004000300000008000100", @ANYRES32=0x0, @ANYBLOB="3801028044000100240001006270665f686173685f66756e6300000000000000000000000000000000000000050003000b00000014000400ff7fc76b050000001f00d2f9ff01000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="08000700000000003800010024000100616374697665706f727400000000000000000000000000000000000000000000050003000300000008000400", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004009e03000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000050003000300000008000400", @ANYRES32=r5, @ANYBLOB="080007000000000008000100", @ANYRES32=0x0, @ANYBLOB="2c02028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b000000080004000000000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="40000100240001006d6f64650000000000000000000000000000000000000000000000000000000005000300050000000f000400726f756e64726f62696e000040000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000700000008000600", @ANYRES32=r6, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004000500000008000600", @ANYRES32=r7, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r8, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000500030003000000080004009102000008000100", @ANYRES32=r9, @ANYBLOB="340102803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="3800010024000100616374c9697665706f7274000000000100000000001500000000000000000000000500030003000000080004", @ANYRES32=r10, @ANYBLOB="40000100240001007072696f72697479000000000000000000000000000000000000000000000000050003000e000000080004001000000008000600", @ANYRES32=0x0, @ANYBLOB="44000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000110004006163746976656261636b75700000000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004000200000008000100", @ANYRES32=0x0, @ANYBLOB="6801028040000100240001006c625f686173685f737461747300000000000000000000000000000000000000050003000b00000008000400fe030000080007000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400ff03000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000050003000300000008000400000800003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000005000300030000000800040008000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000500030003000000080004000400000008000600", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="400002803c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000005000300060000000400040008000600", @ANYRES32=0x0, @ANYBLOB], 0x888}, 0x1, 0x0, 0x0, 0x4004001}, 0x40)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, 0x0, 0x8, 0x70bd27, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x44810}, 0x4000)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000280)=""/4096, 0x32, 0x1000}, 0x20)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:31 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000007b3654"], 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x40, 0x0)
syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00')
ioctl$NBD_DO_IT(r1, 0xab03)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
recvmsg(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:31 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4}}]}}, &(0x7f0000000280)=""/4096, 0x32, 0x1000}, 0x20)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:31 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)=0x4, 0x12)

00:38:31 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x4)

00:38:31 executing program 1:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/seq\x00', 0x81)
write$sndseq(r0, &(0x7f00000001c0)=[{0x0, 0x7f, 0x0, 0x0, @time, {}, {0x0, 0x2}, @control={0x1, 0x1000, 0x1}}], 0x1c)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:31 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, 0x0, 0x2)

00:38:31 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:31 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:31 executing program 4:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYRESHEX=r0, @ANYRESDEC=r0, @ANYBLOB="00000b102ab249942c7e06000000"], 0x14}}, 0x0)

00:38:32 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:32 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x4)

00:38:32 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, 0x0, 0x2)

00:38:32 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:32 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:32 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:32 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={0x0}}, 0x4)

00:38:32 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, 0x0, 0x2)

00:38:32 executing program 0:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:32 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:32 executing program 4:
r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0)
getsockopt$bt_l2cap_L2CAP_LM(r0, 0x6, 0x3, &(0x7f00000004c0), &(0x7f0000000500)=0x4)
socketpair(0x16, 0x5, 0xffffffff, &(0x7f0000000180)={0xffffffffffffffff, <r1=>0xffffffffffffffff})
socketpair(0x10, 0x6, 0x9, &(0x7f0000000000)={0xffffffffffffffff, <r2=>0xffffffffffffffff})
getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000040)=0x1, &(0x7f0000000140)=0x4)
bind$netrom(r2, &(0x7f00000001c0)={{0x3, @bcast, 0x4}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x0, 0x4}, 0x14}}, 0x0)
r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r2, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, r3, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x40880}, 0x40)
r4 = accept4(r2, 0x0, &(0x7f0000000380), 0x800)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x3c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x20044000)

00:38:32 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:32 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:32 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0, 0x0, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:32 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:32 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:32 executing program 5:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:32 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="3c020900000000d95a253b266b720a3efd02c74153b2af442b79c1210a6000c11785d4ddf38b7511c9cbc8da832450b0fbb07e4d24940cd73c80c67f2a25d0714c934be6c8cb6f5ce3e407b81d294dad299eba72ab3cfed1b4fd8ce00e0cf7a970f8825c85e0f79fc4fb25d0282282fcbddaf5fb56964cfcbe9001ea604f88c2388ac45a1e2fb720407470a460081a1056dab7143390f8540a4723a641fcbc904d8499206559a230c214e5ce252d8590ffb63905d5af343fd504043ff6b96f7c9f37597dfe889e56346bcc16e2d3ad8cca2e545aad08cce6e6311e7fdcfd71e29a3ad2379374fb965f", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f00000001c0)={0x9, 0x0, 'client1\x00', 0x4, "dc0463f4a5dda5af", "209c83164910b2eaa713211df3578e064c3355cc1223f65c86fddaef6f94cf6b", 0x8, 0x8})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa04c0}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14004000", @ANYRES16=0x0, @ANYBLOB="100025bd7000fddbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x2000001}, 0x10)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000040}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x1c, r4, 0x2, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004010}, 0x20000000)

00:38:33 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:33 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:33 executing program 5:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:33 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:33 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x2c, 0x10c00)
ioctl$DRM_IOCTL_DMA(r2, 0xc0406429, &(0x7f0000000780)={0x0, 0xa, &(0x7f0000000040)=[0x955d, 0x0, 0x71eb, 0xc526, 0x7e20, 0x400, 0x8, 0x8001, 0x1, 0x1], &(0x7f0000000080)=[0x6], 0x0, 0x8, 0xfffffffa, &(0x7f0000000140)=[0x100, 0x7, 0x4, 0x2, 0x7ff, 0x8458, 0x1ff, 0x3], &(0x7f0000000740)=[0x3, 0x1ff, 0x5, 0x3ff, 0xea, 0x2, 0x20, 0xfffffffd]})
ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r1, 0xc4c85513, &(0x7f00000001c0)={{0x3, 0x3, 0x8000, 0x1f, 'syz1\x00', 0x3}, 0x1, [0xfffffffffffffff7, 0x6, 0x1, 0x1, 0x3b, 0xfffffffeffffffff, 0x1, 0x8, 0x5, 0x1, 0x7a, 0x900000, 0x5325, 0x9, 0x8, 0x100000000, 0x7f, 0x7, 0x3f, 0x6, 0x1, 0x5, 0x401, 0x1000, 0x4, 0x6, 0x3f, 0x3, 0x200, 0x7ff, 0x0, 0x7fffffff, 0x4, 0x4, 0x2, 0x2, 0x9, 0x401, 0xfff, 0x0, 0xfffffffffffffe00, 0x0, 0x3, 0x1ff, 0x935, 0x5, 0x5e, 0x4, 0x81, 0x7, 0xfffffffffffffffe, 0x3, 0xffff, 0x4, 0x9cd4, 0x101, 0x8, 0x8, 0x4, 0x400, 0xffffffffffffffc1, 0x81, 0x6, 0x81, 0x200, 0xfffffffffffffffd, 0x80, 0x20, 0x8, 0x80a, 0xd89, 0xa0, 0x7fffffff, 0x0, 0x6369481e, 0x7a, 0x3ff, 0xfffffffffffffff9, 0x7, 0x100000000, 0x4, 0x9, 0x8, 0x1, 0x1, 0xff, 0x60, 0x8001, 0x9, 0x7, 0x7, 0xd5, 0x8, 0x1, 0x21, 0x74, 0x10000, 0xfffffffffffff000, 0x8, 0x6, 0x6, 0x9, 0x1, 0x3, 0x0, 0xfff, 0x1, 0x80000000800, 0xa4f, 0x501, 0x7ff, 0x46, 0x3, 0xfffffffffffff8cb, 0x8, 0xee, 0xfffffffffffffbbc, 0xfffffffffffffffa, 0x45bc, 0x7, 0x0, 0xffffffffffff0001, 0xb, 0x400, 0x400, 0x101, 0xffff, 0x9]})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1457dc91055227e4e5fdab559ac911ae77a6211a3a55c1eb28886fb614b8e6778fceb30a9b3814be6bdba2cad457b35574b0d68373", @ANYRES16=0x0, @ANYBLOB="0100000001040800000000000000"], 0x14}}, 0x20000005)

00:38:33 executing program 5:
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:33 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)=""/72, 0x48}, {&(0x7f00000001c0)=""/4096, 0x1000}], 0x2, &(0x7f00000011c0)=""/204, 0xcc}, 0x2)

00:38:33 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:33 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:33 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x20800, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f00000001c0))
syz_genetlink_get_family_id$team(&(0x7f0000000000)='team\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00002dbd7000020000004c914ee0fea5256b7565b7ec06000000"], 0x34}, 0x1, 0x0, 0x0, 0x400c001}, 0x0)

00:38:33 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:33 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x2)

00:38:33 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:33 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:34 executing program 4:
socketpair(0x5, 0x3, 0xffffffff, &(0x7f0000000140)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x0, 0x0)
ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000000040)=0x7f)
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x200082, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x0)

00:38:34 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:34 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

[ 1415.907571] ================================================================================
[ 1415.916363] UBSAN: Undefined behaviour in sound/core/oss/pcm_oss.c:720:23
[ 1415.923297] shift exponent 127 is too large for 32-bit type 'int'
[ 1415.929554] CPU: 1 PID: 24897 Comm: syz-executor.4 Not tainted 4.19.152-syzkaller #0
[ 1415.937454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[ 1415.946867] Call Trace:
[ 1415.949464]  dump_stack+0x22c/0x33e
[ 1415.953107]  ubsan_epilogue+0xe/0x3a
[ 1415.956867]  __ubsan_handle_shift_out_of_bounds.cold+0x1c4/0x250
[ 1415.963025]  ? get_slabinfo+0x41/0x100
[ 1415.967109]  ? snd_interval_refine+0x2c8/0x560
[ 1415.971745]  ? plug_client_size+0x1ca/0x3e0
[ 1415.976089]  snd_pcm_oss_change_params_locked.cold+0xf7/0x11a
[ 1415.982000]  ? snd_pcm_oss_open+0x50/0x50
[ 1415.986147]  ? snd_pcm_oss_make_ready+0xc4/0x2e0
[ 1415.990909]  ? ww_mutex_unlock+0x2f0/0x2f0
[ 1415.995289]  ? do_lock_file_wait+0x4c0/0x4c0
[ 1415.999702]  ? _raw_spin_unlock_irqrestore+0x6a/0xf0
00:38:34 executing program 5:
socketpair(0x0, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

[ 1416.004814]  ? mark_held_locks+0xf0/0xf0
[ 1416.008888]  snd_pcm_oss_make_ready+0xe6/0x2e0
[ 1416.013578]  ? snd_pcm_oss_sync+0x870/0x870
[ 1416.017924]  snd_pcm_oss_sync+0x1de/0x870
[ 1416.022079]  ? fcntl_setlk+0xf20/0xf20
[ 1416.025990]  ? task_work_run+0x115/0x1c0
[ 1416.030060]  ? snd_pcm_oss_sync+0x870/0x870
[ 1416.034388]  snd_pcm_oss_release+0x26c/0x300
[ 1416.038840]  ? snd_pcm_oss_sync+0x870/0x870
[ 1416.043169]  __fput+0x2ce/0x8a0
[ 1416.046474]  task_work_run+0x141/0x1c0
[ 1416.050377]  exit_to_usermode_loop+0x269/0x2c0
[ 1416.055147]  do_syscall_64+0x57c/0x670
[ 1416.059057]  entry_SYSCALL_64_after_hwframe+0x49/0xbe
[ 1416.064774] RIP: 0033:0x4177b1
[ 1416.067976] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 a4 1a 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01
[ 1416.087931] RSP: 002b:00007ffe8309ecf0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003
[ 1416.095736] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00000000004177b1
[ 1416.103125] RDX: fffffffffffffff7 RSI: 000000000000183f RDI: 0000000000000005
[ 1416.110402] RBP: 0000000000000001 R08: 0000000078ccd83f R09: 0000000078ccd843
[ 1416.117765] R10: 00007ffe8309edd0 R11: 0000000000000293 R12: 000000000118c9a0
[ 1416.125043] R13: 000000000118c9a0 R14: 00000000000003e8 R15: 000000000118bfd4
[ 1416.132420] ================================================================================
00:38:34 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:34 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:34 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:34 executing program 0:
socketpair(0x1, 0x3, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:34 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r2 = accept$netrom(r0, &(0x7f0000000000)={{0x3, @bcast}, [@rose, @default, @bcast, @rose, @default, @default, @default, @bcast]}, &(0x7f0000000140)=0x48)
getpeername$netrom(r2, &(0x7f00000001c0)={{0x3, @bcast}, [@rose, @bcast, @bcast, @default, @null, @null, @default, @rose]}, &(0x7f0000000240)=0x48)
getsockopt$netrom_NETROM_T2(r1, 0x103, 0x2, &(0x7f0000000280)=0x2, &(0x7f00000002c0)=0x4)

00:38:34 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

00:38:34 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:34 executing program 1:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:34 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xa0, 0xa0, 0x7, [@int={0x3, 0x0, 0x0, 0x1, 0x0, 0x1e, 0x0, 0x70, 0x6}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x8000}}, @var={0x1, 0x0, 0x0, 0xe, 0x1}, @fwd={0xa}, @volatile={0x5, 0x0, 0x0, 0x9, 0x4}, @func={0x6, 0x0, 0x0, 0xc, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x2, 0x3f}}, @var={0x1, 0x0, 0x0, 0xe, 0x4, 0x1}, @int={0x0, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x64, 0x5}, @typedef={0x1, 0x0, 0x0, 0x8, 0x1}]}, {0x0, [0x4f, 0x5f, 0x0, 0x61, 0x61]}}, &(0x7f0000000000)=""/8, 0xbf, 0x8}, 0x20)

00:38:34 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:34 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:35 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:35 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:35 executing program 5:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:35 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', <r2=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x94, 0x0, 0x100, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010102}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x94}, 0x1, 0x0, 0x0, 0x40000}, 0x0)

00:38:35 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0, @ANYBLOB="f2ffffffffffffff000006000000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:35 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:35 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

00:38:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:35 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x0, 0x0)
getsockopt$netrom_NETROM_IDLE(r1, 0x103, 0x7, &(0x7f0000000040)=0x3, &(0x7f0000000140)=0x4)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="00000000000003000000000000009d479d5ba0137da9"], 0x14}}, 0x0)

00:38:35 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:35 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x20000040)

00:38:35 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x20000040)

00:38:35 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:35 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:35 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:35 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$NBD_SET_SIZE(r1, 0xab02, 0x81)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400f6ff9b5e8abe5ab9b391879a45ea", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:35 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x20000040)

00:38:35 executing program 5:
socketpair(0x1, 0x3, 0x0, 0x0)
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:36 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
recvmsg(r0, &(0x7f00000012c0)={0x0, 0x0, 0x0}, 0x0)

00:38:36 executing program 4:
socketpair(0x5, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x1, 0x4)

00:38:36 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:36 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:36 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:36 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:36 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:36 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:36 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:36 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:36 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2)

00:38:36 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:37 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:37 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
getpeername$netrom(0xffffffffffffffff, &(0x7f0000000080)={{}, [@null, @rose, @remote, @netrom, @default, @remote, @bcast, @default]}, &(0x7f0000000140)=0x48)

00:38:37 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:37 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
getsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000)=0x8, &(0x7f0000000040)=0x2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:37 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2)

00:38:37 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:37 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:37 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r1, 0x89e2)

00:38:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:37 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, &(0x7f0000000140))

00:38:37 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x200002, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000000)=0x60, 0x2)

00:38:37 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:37 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:37 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

00:38:37 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0xfffffdf8}}, 0x0)

00:38:37 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:37 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

00:38:37 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SIOCNRDECOBS(r1, 0x89e2)

00:38:37 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:37 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000", @ANYRES16=0x0], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:37 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001580)={'team0\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x60, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
r4 = accept4(r0, &(0x7f00000001c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80, 0x80000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x4, 0x9, 0x7, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x200808c1}, 0x68000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:37 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
getpeername$netrom(r0, 0x0, 0x0)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14790000"], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

[ 1419.842676] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'.
00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="157b9f1a", @ANYRES16=0x0, @ANYBLOB="00000000000000000000060000002f3c3e799750c7753ea498b60f5ff9b62ee94bcc344ae1"], 0x14}}, 0x0)

00:38:38 executing program 5:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040)='mptcp_pm\x00')
ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000001580)={'team0\x00', <r3=>0x0})
sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f0000001680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x60, r2, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x20000044)
r4 = accept4(r0, &(0x7f00000001c0)=@sco={0x1f, @none}, &(0x7f0000000140)=0x80, 0x80000)
r5 = socket$nl_generic(0x10, 0x3, 0x10)
r6 = syz_genetlink_get_family_id$SEG6(&(0x7f00000000c0)='SEG6\x00')
sendmsg$SEG6_CMD_GET_TUNSRC(r5, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="84000000", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf2504000000080003000700000008000300eab20000050006000700000018000400080000000000000009000000040000000500000008000300ffffff7f0500050004000000140001"], 0x84}}, 0x0)
sendmsg$SEG6_CMD_SET_TUNSRC(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@SEG6_ATTR_SECRET={0x18, 0x4, [0x1, 0x4, 0x9, 0x7, 0x0]}, @SEG6_ATTR_DST={0x14, 0x1, @mcast1}, @SEG6_ATTR_DST={0x14, 0x1, @private2={0xfc, 0x2, [], 0x1}}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x200808c1}, 0x68000)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x20000040)

00:38:38 executing program 4:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

[ 1420.058502] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.5'.
00:38:38 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x20000040)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:38 executing program 4:
socketpair(0x3, 0x3, 0x1, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:38 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:38 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SIOCNRDECOBS(r0, 0x89e2)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:38 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0)

00:38:38 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x38, 0x286000)
r2 = getpid()
getpgid(r2)
r3 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nvram\x00', 0x0, 0x0)
ioctl$VFIO_SET_IOMMU(r3, 0x3b66, 0x7)
ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r1, 0xc1105511, &(0x7f00000001c0)={{0x3, 0x7, 0x9, 0x60, 'syz0\x00', 0xc}, 0x6, 0x40, 0x80000000, r2, 0x0, 0x1ff, 'syz1\x00', &(0x7f0000000100), 0x0, [], [0x1, 0x0, 0x6, 0x8]})
getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000040)=0x6, &(0x7f0000000080)=0x4)
ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000000)=0x4)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:38 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x0)

00:38:38 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:38 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:38 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:38 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = shmget$private(0x0, 0x2000, 0x0, &(0x7f0000ffd000/0x2000)=nil)
shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x5800)
getresgid(&(0x7f0000000000)=<r2=>0x0, &(0x7f0000000040), &(0x7f0000000140))
r3 = getpid()
getpgid(r3)
r4 = getpid()
shmctl$IPC_SET(r1, 0x1, &(0x7f00000001c0)={{0x0, 0xffffffffffffffff, 0xee00, 0x0, r2, 0x120, 0x1}, 0x8, 0xfff, 0x626, 0xfffffffffffffffc, r3, r4, 0x9})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:38 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:38 executing program 0:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[], 0x14}}, 0x20000040)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, 0x0, 0x0)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
sched_rr_get_interval(0xffffffffffffffff, &(0x7f0000000000))

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:39 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{<r1=>0x0}]})
ioctl$DRM_IOCTL_GET_SAREA_CTX(0xffffffffffffffff, 0xc010641d, &(0x7f0000000140)={r1, &(0x7f00000001c0)=""/237})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x20, 0x1000, 0x1}, 0x20)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000001340)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$thread_pidfd(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self\x00', 0x480200, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYRESHEX=r0, @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r1, 0xc0bc5310, &(0x7f00000001c0))

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x20, 0x1000, 0x1}, 0x20)

00:38:39 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x36, 0x1000, 0x1}, 0x20)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:39 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))
ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{<r0=>0x0}]})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcsa\x00', 0x14002, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r1, 0xc08c5336, &(0x7f0000000200)={0x5, 0x6, 0x0, 'queue0\x00', 0x6})
ioctl$DRM_IOCTL_RM_CTX(0xffffffffffffffff, 0xc0086421, &(0x7f0000000140)={r0, 0x6})
socket(0x9, 0x6, 0x5)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r2, &(0x7f0000000080)={0x0, 0xa6f97887, &(0x7f00000000c0)={&(0x7f00000001c0)={0x14, 0x0, 0x400, 0x70bd27, 0x3}, 0x14}, 0x1, 0x0, 0x0, 0x8880}, 0x8081)

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x8}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x20, 0x1000, 0x1}, 0x20)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f0000001340)=""/4096, 0x35, 0x1000, 0x1}, 0x20)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:39 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:39 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:39 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:39 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:39 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)={'team0\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000040020000000000006000000080002876e5c044950000100000008000300050000000c00018008000700", @ANYRES32=r1, @ANYBLOB="080002000300000008000300030000001cfe018006000100020000000600010002000000080006000200000008000600010000000600010002000000"], 0x6c}}, 0x0)

00:38:39 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="00000000000074ee95fd68f9f641eed5d5e26c2ac1f9af"], 0x14}}, 0x0)

00:38:39 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@fwd]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)
socketpair(0x10, 0x4, 0x8, &(0x7f00000003c0))

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:40 executing program 4:
socketpair(0x2b, 0x5, 0x5, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000001340)=""/4096, 0x2b, 0x1000, 0x1}, 0x20)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd={0x2}, @restrict]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)
shmctl$SHM_INFO(0xffffffffffffffff, 0xe, &(0x7f0000000400)=""/10)

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000600000046bdd54ed4529c95c39e311f1c9f76d56dbfe31593ee3e8513e38cfb33d50d50d5fb95f696482a"], 0x14}}, 0x0)

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x6, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2a, 0x1000, 0x1}, 0x20)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
set_tid_address(&(0x7f0000000000))

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8, 0x7, r3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x2}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f0000001340)=""/4096, 0x29, 0x1000, 0x1}, 0x20)

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x8, [@restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x2c, 0x1000, 0x1}, 0x20)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x8400, &(0x7f0000000180)={<r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, 0x0, 0x200, 0x100002}, 0x14}, 0x1, 0x0, 0x0, 0x4000181}, 0x4)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r2, 0xc08c5335, 0x0)
accept$netrom(r2, &(0x7f0000000080)={{0x3, @default}, [@netrom, @rose, @rose, @bcast, @netrom, @rose, @bcast, @null]}, &(0x7f0000000140)=0x48)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, r2, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f0000000140)={0x8, 0x6, 0x0, 0x4, 'syz1\x00', 0x6})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000000000000000000000600000018e9659363170cdc370442994ea8e93c0357d1c6657fca4736bd1d83026460b6e65e"], 0x14}}, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000040)={0x1000, 0x8001, 0xec2, {0x3, 0x7}, 0x8, 0x4})

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff, <r1=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r1, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)
syz_genetlink_get_family_id$gtp(&(0x7f0000000280)='gtp\x00')

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x8, [@fwd, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x38, 0x1000, 0x1}, 0x20)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000000040)={0x9, 0x3, 0x5, 0x3ff, 'syz1\x00', 0xcde})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="f772000180", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:40 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:40 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:40 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:40 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
getresgid(&(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140))
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:40 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61, 0x0]}}, &(0x7f0000001340)=""/4096, 0x37, 0x1000, 0x1}, 0x20)

00:38:40 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB], 0x14}}, 0x0)
getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000140)=0x8002, &(0x7f0000000000)=0x2)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:41 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:41 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
getresgid(&(0x7f0000000000), 0x0, 0x0)
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:41 executing program 4:
socketpair(0xb, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}}, 0x0)
geteuid()
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
sendmsg$SEG6_CMD_SETHMAC(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000040)={0x28, 0x0, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, [], 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4080)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x6, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0, 0x61]}}, &(0x7f0000001340)=""/4096, 0x36, 0x1000, 0x1}, 0x20)

00:38:41 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

00:38:41 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:41 executing program 0:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x5, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f, 0x0]}}, &(0x7f0000001340)=""/4096, 0x35, 0x1000, 0x1}, 0x20)

00:38:41 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
openat$dsp1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x220003, 0x0)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00')
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r1, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}]}, 0x1c}}, 0x0)

00:38:41 executing program 3:
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

00:38:41 executing program 0:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:41 executing program 3:
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

00:38:41 executing program 3:
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 0:
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000}, 0x20)

00:38:41 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000003c0)=0x80, 0x81000)
getpeername$netrom(r1, &(0x7f0000000400)={{0x3, @netrom}, [@bcast, @rose, @default, @remote, @remote, @bcast, @null, @null]}, &(0x7f0000000480)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e09cc573", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000142a9139034d9df70dad4fd883c2fe79121a48229e710faeafcb6bcfc0548048feef70992e7364912a59721e450093522896e567b417017f5dc7163efb63e589cea6978f3481fba5e632c833b2c6d412ce61", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf2503000000080002000800000008000300020000000800020004000000080003000100000008000200080000000800020005000000080002000300000040000180050002000600000014000400fc010000000000000000000000000000060001000200000008000700", @ANYRES32, @ANYRES16=r3], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000804)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
recvmsg(r0, &(0x7f00000008c0)={&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f00000006c0)=""/28, 0x1c}, {&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)}], 0x5, &(0x7f0000000880)=""/30, 0x1e}, 0x300)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f00000001c0)=0x7)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000}, 0x20)

00:38:41 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 0:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:41 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:41 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000}, 0x20)

00:38:41 executing program 0:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:41 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:41 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0010009db7e96ad36aa24c002281ff01ef8365162ea5aab8edb2df35ab7a030745c5edf2"], 0x14}}, 0x0)
sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x3f}]}, 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x4)

00:38:42 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@fwd={0x2}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x27, 0x1000, 0x1}, 0x20)

00:38:42 executing program 3:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:42 executing program 0:
socketpair(0x0, 0x1, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:42 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x20)

00:38:42 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:42 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:42 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x0]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000a4c8b2aba13af3082ef9b3be75ab93632b9a2bfad87256a37b2ad487927b76d6d8638261c1f0768cf51cc926782df718c07916e32dd2d975ef302b72887c5897f0e4cee328889e1ad46325c27e0578d3d616bda136793620d68c4dfe8c6235a401124e815241c0b67840d379a1928cdd3b5da5aebbc59dd17f29755f99c9455b6f3a8d281588766e74dc90a64cdf66323b46d4b61e48509375bbeb5f4b7e9500cbb58e16d4ecce9cb2c6d972d33c5cdbf2f314c272dfd06644484b6ab17cb3afad82b3075b3be7889532a731e56f2a3e946aebc09adc6d74216ca05bfdedd3415db5", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x20)

00:38:42 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000, 0x1}, 0x20)

00:38:42 executing program 4:
socketpair(0x1, 0x80000, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x4000014)

00:38:42 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:42 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x28, 0x0, 0x1}, 0x20)

00:38:42 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:42 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:42 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
socketpair(0xb, 0x5, 0x7, &(0x7f0000000000))
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="00800000afe1edead8b08d3ddf69179ccedc42a97ce852c8db20fc2a465b13ead5caf1ccbf72be918c3d17c70f749aa065250c7f9106312bee619b041b032c3f38fa15d034544cb3d73e67cd79a13567ad75a537e4d8175327cdb5a4b9ba9d043fa80d60bdcfd47189bbabad8977ca5f855322ff8bc328a876587d98a1aafbcc58", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:42 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000}, 0x20)

00:38:42 executing program 3:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept$netrom(r0, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:42 executing program 0:
socketpair(0x1, 0x0, 0x0, &(0x7f0000000240)={<r0=>0xffffffffffffffff})
sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:42 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000}, 0x20)

00:38:43 executing program 4:
socketpair(0x21, 0x800, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nvram\x00', 0x40000, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r1, 0x4040534e, &(0x7f0000000140)={0x10, @time={0x8, 0x3}, 0x5, {0xee, 0x3f}, 0x1f, 0x2, 0x2})
openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x20880, 0x0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="92c7d53a", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/4096, 0x33, 0x1000, 0x1}, 0x20)

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000}, 0x20)

00:38:43 executing program 4:
r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x400000)
ioctl$NBD_DO_IT(r0, 0xab03)
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180))

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, 0x0)
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 2:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000}, 0x20)

00:38:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000512ee9fa4552141e3a59d232f693a699a2dd8d9acbfb97b01cb3d94915a36fcb11671644be92cc09f03a867a55b6112a60e2efd60afecf8a337dbf9a1293a3f7e21770a8c8387bbf7e607fe0c37954e01d7bd37d6c8b8f56f60af7ba3d2b10f7df8e4440384625d2a38d75a9b75b57e11ee3ccd6e6374d8cbcb436a4085c946e54d94881a57212497578d198ddd892e4703a374588ed7ffe64bc28c00f0a03ab59242714fa38ab7a55b7f668ec7a1349adeefc"], 0x14}}, 0x0)
r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000140)={0x4, &(0x7f0000000080)=[{}, {<r2=>0x0}, {}, {}]})
ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000580)={r2, 0x4, &(0x7f0000000480)=[0x7734, 0x8, 0x69d7b35c, 0x800], &(0x7f00000004c0)=[0xffff4e7b, 0x4], 0x10, 0x2, 0x0, &(0x7f0000000500)=[0x3, 0x5], &(0x7f0000000540)=[0x7fff]})
r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/seq\x00', 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r3, 0xc0505350, &(0x7f0000000300)={{0x2, 0xff}, {0x3f}, 0x1f, 0x1, 0x7})
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, 0x0)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000600)='/dev/vcsa\x00', 0x86800, 0x0)
r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00')
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000740)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x1c, r5, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x20000845)
r6 = getpgid(0x0)
r7 = shmget$private(0x0, 0x2000, 0x1, &(0x7f0000ffc000/0x2000)=nil)
setrlimit(0x2, &(0x7f00000005c0)={0xfffffffffffffff7, 0x7})
shmat(r7, &(0x7f0000ffd000/0x3000)=nil, 0x1000)
ioctl$NBD_SET_FLAGS(r1, 0xab0a, 0xf6)
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x2, 0x5, 0x8, 0x5dce, 'syz0\x00', 0x80000001}, 0x3, 0x40, 0xff, r6, 0x9, 0x3, 'syz0\x00', &(0x7f0000000000)=['/@!%}\x00', ':[\x00', '+\x00', '\x00', '\x00', ',\x00', '--\'\x00', '*-\x00', '$$\x00'], 0x19, [], [0x8f31, 0x2, 0x8000]})
socket(0x4, 0x5, 0x2)

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, 0x0)
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:43 executing program 2:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
accept4(r0, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f00000003c0)=0x80, 0x81000)
getpeername$netrom(r1, &(0x7f0000000400)={{0x3, @netrom}, [@bcast, @rose, @default, @remote, @remote, @bcast, @null, @null]}, &(0x7f0000000480)=0x48)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="e09cc573", @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)
r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x8000, 0x0)
r3 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r3, 0xc08c5335, 0x0)
sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000280)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c000000142a9139034d9df70dad4fd883c2fe79121a48229e710faeafcb6bcfc0548048feef70992e7364912a59721e450093522896e567b417017f5dc7163efb63e589cea6978f3481fba5e632c833b2c6d412ce61", @ANYRES16=0x0, @ANYBLOB="200025bd7000fddbdf2503000000080002000800000008000300020000000800020004000000080003000100000008000200080000000800020005000000080002000300000040000180050002000600000014000400fc010000000000000000000000000000060001000200000008000700", @ANYRES32, @ANYRES16=r3], 0x8c}, 0x1, 0x0, 0x0, 0x1}, 0x4000804)
r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/vcsa\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r4, 0xc08c5335, 0x0)
recvmsg(r0, &(0x7f00000008c0)={&(0x7f00000004c0)=@x25={0x9, @remote}, 0x80, &(0x7f0000000800)=[{&(0x7f0000000540)=""/162, 0xa2}, {&(0x7f0000000600)=""/139, 0x8b}, {&(0x7f00000006c0)=""/28, 0x1c}, {&(0x7f0000000700)=""/158, 0x9e}, {&(0x7f00000007c0)}], 0x5, &(0x7f0000000880)=""/30, 0x1e}, 0x300)
ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r4, 0x40045542, &(0x7f00000001c0)=0x7)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={0x0, &(0x7f0000001340)=""/4096, 0x0, 0x1000, 0x1}, 0x20)

00:38:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
ioctl$NBD_SET_SIZE_BLOCKS(0xffffffffffffffff, 0xab07, 0x400)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="527d81cacdb3eb43a039a032b507c0125f103c8c751b249a70fcdfa2ac67f9abc82fccdb66a7564ddbb7fe7bd3472c634e20a909da9df044aa3e0f54f1158f15984d6aa2d16c05ab9b30c19f6c5e9bc6dc4419ef90e327b4488517f91d4321abcf300fc10450c24700"/121, @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)

00:38:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x34, 0x0, 0x1}, 0x20)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 1:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@fwd={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x28, 0x1000, 0x1}, 0x20)

00:38:43 executing program 3:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
accept$netrom(0xffffffffffffffff, &(0x7f00000001c0)={{0x3, @netrom}, [@rose, @rose, @netrom, @default, @default, @remote, @default, @null]}, &(0x7f0000000040)=0x48)

00:38:43 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002340)={&(0x7f0000001300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x4, [@fwd={0x2}, @restrict={0x0, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x0, 0x5f]}}, &(0x7f0000001340)=""/4096, 0x34, 0x1000}, 0x20)

00:38:43 executing program 0:
socketpair(0x1, 0x1, 0x0, &(0x7f0000000240))
sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x50, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @multicast1}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_NET_NS_FD={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_LINK={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @empty}, @GTPA_I_TEI={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x20040005}, 0x200000d5)

00:38:43 executing program 4:
socketpair(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, <r0=>0xffffffffffffffff})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0000000000000000000006000000"], 0x14}}, 0x0)
r1 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffffc0, 0x200002)
r2 = getpid()
ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r1, 0xc1105517, &(0x7f00000001c0)={{0x0, 0xf, 0x5, 0x8, '\x00', 0x7}, 0x3, 0x30, 0x800, r2, 0x3, 0x0, 'syz1\x00', &(0x7f0000000040)=['\xea!%\'[+:^]].[\xfe-!!%\x00', '\x00', ',\x00'], 0x15, [], [0xd8, 0x1, 0x1, 0x6]})