}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) socket$inet_mptcp(0x2, 0x1, 0x106) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001640)) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f0000001740)={0x4c, 0x0, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast1}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}, @L2TP_ATTR_MRU={0x6, 0x1d, 0x39}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_FD={0x8, 0x17, @udp=r2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xcf9}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x200048c4}, 0x0) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:31 executing program 5: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$BTRFS_IOC_START_SYNC(r7, 0x80089418, &(0x7f0000001640)) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) socket$inet_mptcp(0x2, 0x1, 0x106) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, 0xffffffffffffffff]}, 0x80) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r3}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000}) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000}) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) socket$isdn(0x22, 0x3, 0x3) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r3}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) socket$isdn(0x22, 0x3, 0x3) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:31 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) memfd_secret(0x80000) socket$isdn(0x22, 0x3, 0x3) 09:07:31 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) 09:07:31 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) 09:07:31 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) memfd_secret(0x80000) socket$isdn(0x22, 0x3, 0x3) 09:07:31 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) 09:07:31 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) 09:07:32 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) 09:07:32 executing program 0: socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) 09:07:32 executing program 4: socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000}) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 0: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 4: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) 09:07:32 executing program 0: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 4: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 0: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 4: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000}) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) memfd_secret(0x80000) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 0: socket$isdn(0x22, 0x3, 0x0) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:32 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:32 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) memfd_secret(0x80000) socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 1: socket$isdn(0x22, 0x3, 0x3) 09:07:32 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:33 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) socket$isdn(0x22, 0x3, 0x3) 09:07:33 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 1: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) socket$isdn(0x22, 0x3, 0x3) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 09:07:33 executing program 1: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) 09:07:33 executing program 3: socket$isdn(0x22, 0x3, 0x3) 09:07:33 executing program 1: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 3: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 3: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) 09:07:33 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) 09:07:33 executing program 3: socket$isdn(0x22, 0x3, 0x0) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:33 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:33 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) 09:07:33 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) 09:07:33 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:33 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) 09:07:33 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:33 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) 09:07:33 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:33 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:33 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) 09:07:34 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:34 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 09:07:34 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r1) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:34 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 0: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r0) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), 0xffffffffffffffff) 09:07:34 executing program 0: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x8, &(0x7f00000008c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:34 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) 09:07:34 executing program 0: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x7, &(0x7f00000008c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:34 executing program 5: pipe2$watch_queue(0x0, 0x80) 09:07:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:34 executing program 0: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:34 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x6, &(0x7f00000008c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:34 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:34 executing program 0: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:34 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x5, &(0x7f00000008c0)=@framed={{}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 1: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 0: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 0: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 4: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) 09:07:35 executing program 1: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 1: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:35 executing program 5: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:35 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:35 executing program 4: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:35 executing program 5: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:35 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:35 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:35 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) 09:07:36 executing program 3: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 5: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x3, &(0x7f00000008c0)=@framed, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:36 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:36 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:36 executing program 3: pipe2$watch_queue(0x0, 0x80) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:36 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:36 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r2) 09:07:36 executing program 5: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:36 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 5: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 5: pipe2$watch_queue(0x0, 0x80) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:36 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 0: pipe2$watch_queue(0x0, 0x80) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:36 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:36 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:36 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:36 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:36 executing program 2: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:36 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:36 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:36 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:36 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:36 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:37 executing program 2: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) 09:07:37 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:37 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 09:07:37 executing program 2: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x0, 0x0, 0x0, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x80) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) 09:07:37 executing program 4: pipe2$watch_queue(0x0, 0x80) 09:07:37 executing program 2: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) 09:07:37 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:37 executing program 4: pipe2$watch_queue(0x0, 0x80) 09:07:37 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) 09:07:37 executing program 2: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 0: socket$isdn(0x22, 0x3, 0x0) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:37 executing program 4: pipe2$watch_queue(0x0, 0x80) 09:07:37 executing program 5: bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={0xffffffffffffffff, 0x0, 0x0}, 0x10) 09:07:37 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 2: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 5: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:37 executing program 1: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:37 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, &(0x7f0000000c00)=[r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:37 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) 09:07:37 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:37 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:37 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:37 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:37 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:37 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:38 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:38 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:38 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0x3}}, 0x18) 09:07:38 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:38 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, 0x0, 0x0) 09:07:38 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {0x0}}, 0x18) 09:07:38 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) 09:07:38 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:38 executing program 4: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:38 executing program 3: pipe2$watch_queue(0x0, 0x80) 09:07:38 executing program 4: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 0: syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:38 executing program 4: write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) 09:07:38 executing program 3: pipe2$watch_queue(0x0, 0x80) 09:07:38 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 4: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 3: pipe2$watch_queue(0x0, 0x80) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:38 executing program 4: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 2: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 3: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 0: syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:38 executing program 4: pipe2$watch_queue(0x0, 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) 09:07:38 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:38 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) 09:07:38 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) 09:07:38 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) 09:07:38 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:38 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:38 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:38 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', 0x0, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, 0xffffffffffffffff, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:39 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:39 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800}) memfd_secret(0x80000) bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) 09:07:39 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:39 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:39 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:39 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:39 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:40 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:40 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:40 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:40 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: pipe2$watch_queue(0x0, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:41 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: pipe2$watch_queue(&(0x7f0000000000), 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(0xffffffffffffffff, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) [ 99.240595][ T8277] Zero length message leads to an empty skb 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, 0x0) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:41 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:41 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:42 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x8000040) 09:07:43 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 5: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) 09:07:43 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:43 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 0: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:44 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:44 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 4: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 09:07:44 executing program 1: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 0: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:44 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 09:07:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:44 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 0: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 0: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 09:07:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 09:07:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 09:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x8000040) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}}, 0x0) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0}, 0x0) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:45 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x8000040) 09:07:45 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) 09:07:45 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:45 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:46 executing program 2: sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 2: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000), 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, 0x0, 0x0) 09:07:46 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x8000040) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000), 0x80) syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000}) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x5c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:46 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) 09:07:46 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), 0xffffffffffffffff) 09:07:46 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) 09:07:46 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:46 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) memfd_secret(0x0) 09:07:46 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r3 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r4}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r3, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)) 09:07:47 executing program 3: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x8000040) 09:07:47 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, 0xffffffffffffffff, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000}) 09:07:47 executing program 5: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r3}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) 09:07:47 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) 09:07:47 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x14}, 0x14}}, 0x0) 09:07:47 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 2: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, 0xffffffffffffffff]}, 0x80) 09:07:47 executing program 4: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) socket$inet_mptcp(0x2, 0x1, 0x106) 09:07:47 executing program 0: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) 09:07:47 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) 09:07:47 executing program 2: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) 09:07:47 executing program 1: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:47 executing program 5: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:47 executing program 3: ioctl$DRM_IOCTL_MARK_BUFS(0xffffffffffffffff, 0x40206417, &(0x7f0000000000)={0xfffffffa, 0x4, 0x7, 0x1, 0x16, 0x100}) ioctl$IOC_WATCH_QUEUE_SET_FILTER(0xffffffffffffffff, 0x5761, &(0x7f0000000040)={0xa, 0x0, [{0x1f, 0x5, 0xffff, [0x3ff, 0x20, 0x4, 0x9, 0x7ff, 0x400, 0x3, 0xfcbc]}, {0x20000000, 0x0, 0x7c6, [0x4, 0x9, 0x8f9f, 0x5, 0x0, 0x0, 0x5, 0x6]}, {0x0, 0xfffffffc, 0x4, [0x1f, 0x36bc0000, 0x5, 0x4, 0x200, 0xf41e, 0xffff, 0xd6e]}, {0x1, 0x5, 0x800, [0x9b3d, 0x2, 0x6, 0x7, 0x401, 0x0, 0x2, 0xffffffff]}, {0x6, 0x80000000, 0x40, [0x0, 0x5, 0x4, 0x7f, 0x3, 0xf5, 0xb88, 0xff]}, {0x1, 0x8, 0x3, [0x1f, 0xae0, 0x0, 0x400, 0x40, 0x8001, 0x2]}, {0x3ff, 0x5, 0x8, [0x800, 0x8, 0xff, 0x9, 0x5, 0x2, 0x7fffffff, 0x56f]}, {0x40000, 0x800, 0x6, [0x81, 0x3ff, 0x2, 0x80000, 0x178, 0xe80, 0x2, 0x1000]}, {0x4, 0x80000001, 0x5, [0x9, 0x0, 0x8, 0x6, 0x2, 0x2, 0x2, 0xcbf8]}, {0x1, 0x1, 0x80000000, [0x5, 0xab00, 0x2, 0xffff, 0x400, 0x4, 0x7ff]}]}) r0 = memfd_secret(0x80000) ioctl$DRM_IOCTL_MODE_PAGE_FLIP(r0, 0xc01864b0, &(0x7f0000000200)={0x6, 0x4, 0x2, 0x4, 0x6}) r1 = socket$isdn(0x22, 0x3, 0x3) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000240)=0x80000000) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000002c0)={&(0x7f0000000280)=[0x80000001, 0x7, 0xcd5], 0x3, 0x80000, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_SETPLANE(r2, 0xc03064b7, &(0x7f0000000300)={0x0, 0x9, 0x53, 0x400, 0x3ff, 0x1cf0, 0x7f, 0x9, 0x2, 0x6, 0x3, 0x8}) r3 = syz_open_dev$dri(&(0x7f0000000340), 0x7fff, 0x40000) ioctl$DRM_IOCTL_MODE_RMFB(r2, 0xc00464af, &(0x7f0000000380)=0x400) openat$udambuf(0xffffffffffffff9c, &(0x7f00000003c0), 0x2) r4 = syz_open_dev$dri(&(0x7f0000000400), 0x5, 0x8000) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@bloom_filter={0x1e, 0x7, 0xf7, 0x4, 0x800, r0, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x3, 0x7}, 0x48) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r2, 0x50009417, &(0x7f0000000540)={{r5}, 0x0, 0x4, @inherit={0x70, &(0x7f00000004c0)={0x0, 0x5, 0xffffffffffffffff, 0x6, {0x32, 0x7aa5, 0x4, 0x8, 0x68}, [0xa9, 0x7, 0x7, 0x3, 0x8000]}}, @devid}) ioctl$DRM_IOCTL_SG_FREE(r4, 0x40106439, &(0x7f0000001540)={0x4}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000001580)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_ADDFD(r2, 0x40182103, &(0x7f0000001600)={r6, 0x2, r3, 0x5, 0x80000}) 09:07:47 executing program 4: pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r1, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_COOKIE={0xc, 0x10, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @initdev={0xac, 0x1e, 0x0, 0x0}}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0x1000}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast2}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0xa}, @L2TP_ATTR_UDP_CSUM={0x5, 0xd, 0x1}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0xe2}]}, 0x68}}, 0x4000) write$RDMA_USER_CM_CMD_QUERY(r0, &(0x7f00000003c0)={0x13, 0x10, 0xfa00, {&(0x7f00000001c0), 0xffffffffffffffff, 0x3}}, 0x18) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x5008488}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r2, 0x4, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008140}, 0x4000080) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f00000005c0)={&(0x7f0000000580)=[0x3, 0x8, 0x0, 0x0, 0x9, 0x6, 0x0], 0x7, 0xc0000, 0x0, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000540), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000640)={0x78, r4, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x18}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9b}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x11}}]}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x78}, 0x1, 0x0, 0x0, 0x80}, 0x8000040) ioctl$DRM_IOCTL_UNLOCK(r3, 0x4008642b, &(0x7f0000000740)={0x0, 0xb}) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000007c0), r3) sendmsg$L2TP_CMD_SESSION_CREATE(r3, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x40, r6, 0x20, 0x70bd29, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x5}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x8}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x2}, @L2TP_ATTR_DEBUG={0x8}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e22}]}, 0x40}, 0x1, 0x0, 0x0, 0x20040000}, 0x18) r7 = memfd_secret(0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000a40)={r0, 0x58, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000b40)={&(0x7f0000000b00)=[0xe0000000, 0x4f2, 0x8, 0x18, 0x401, 0x1f, 0x799], 0x7, 0x1800, 0x0, 0xffffffffffffffff}) r10 = memfd_secret(0x80000) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=@bloom_filter={0x1e, 0x20, 0x7, 0x1, 0x200, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2, 0x5, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x14, 0x9, &(0x7f00000008c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x1}, [@map_val={0x18, 0x0, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7fff}, @jmp={0x5, 0x1, 0x4, 0x2, 0x8, 0x1, 0x10}, @generic={0x3f, 0x6, 0xf, 0xffff, 0x934}, @alu={0x4, 0x1, 0x5, 0xa, 0x5, 0x40, 0x1}, @jmp={0x5, 0x1, 0xd, 0x241d0d6e949d51bd, 0x4, 0xc}]}, &(0x7f0000000940)='syzkaller\x00', 0x0, 0x3a, &(0x7f0000000980)=""/58, 0x41100, 0x2, '\x00', r8, 0x1f, r3, 0x8, &(0x7f0000000a80)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000ac0)={0x0, 0xe, 0x101}, 0x10, 0xffffffffffffffff, r3, 0x0, &(0x7f0000000c00)=[r0, r3, r0, r0, r3, r9, r3, r10, r11]}, 0x80) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:47 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:47 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:47 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) r1 = add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r2 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r2, r4, 0x57) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r4, 0x1, '\x00', 0x0, r4, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r4}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r4, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r5, r4, r4]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r4, 0xc01064c1, &(0x7f0000000680)) r6 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r6) socket$inet_udp(0x2, 0x2, 0x0) r7 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r2) r8 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r7) ioctl$DRM_IOCTL_AGP_ACQUIRE(r4, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r7) r9 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r8) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r9) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r3, 0x22) keyctl$KEYCTL_WATCH_KEY(0x20, r1, 0xffffffffffffffff, 0x46) 09:07:47 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:47 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) 09:07:47 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) 09:07:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:48 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) 09:07:48 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) 09:07:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r3, 0x57) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r3, 0x1, '\x00', 0x0, r3, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r3}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r4, r3, r3]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r3, 0xc01064c1, &(0x7f0000000680)) r5 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r5) socket$inet_udp(0x2, 0x2, 0x0) r6 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r7 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r6) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r6) r8 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r7) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r8) keyctl$KEYCTL_WATCH_KEY(0x20, r0, r2, 0x22) 09:07:48 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) 09:07:48 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) 09:07:48 executing program 0: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) 09:07:48 executing program 3: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 09:07:48 executing program 4: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) 09:07:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) r7 = add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) add_key$fscrypt_v1(&(0x7f0000000a00), &(0x7f0000000a40)={'fscrypt:', @desc4}, &(0x7f0000000a80)={0x0, "051b36b079853dc8d63efc8432b87f33e01a3963bc73a62b8bcf9f7ebdfe6d55268c4303e96bcb3f1d758d88f5c32e45eacc62f64a203299634d767649750ff8", 0x39}, 0x48, r7) 09:07:48 executing program 2: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 09:07:48 executing program 1: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) 09:07:48 executing program 5: r0 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000040)={'fscrypt:', @desc1}, &(0x7f0000000080)={0x0, "82c8a6c48c6b7a8ed175c3b8f1d9ee465970ea368eb6b7670ba11edbfb19085b05948db4d2a625040446c00bdb025fb8a15758553582c78cd4a7291bf7d3ef4a", 0x2b}, 0x48, 0x0) keyctl$KEYCTL_WATCH_KEY(0x20, r0, 0xffffffffffffffff, 0x7f) add_key$fscrypt_v1(&(0x7f0000000100), &(0x7f0000000140)={'fscrypt:', @desc4}, &(0x7f0000000180)={0x0, "28c9747f1ba246bdbde618d2bc026a8baefbc99dbc1c77c9782e8baa0cb36d66246a4ebfa121fc6c1beb74fcc2f33b42824632dd61dd0ba589393c0d47ef4cea", 0x14}, 0x48, 0x0) r1 = add_key$fscrypt_v1(&(0x7f0000000200), &(0x7f0000000240)={'fscrypt:', @desc2}, &(0x7f0000000280)={0x0, "a1eb3467a9d78e52bd041b2ea85165047eaaf390843d8e6d924206ffdc51a82e8941feae2e04b5a2952b066a044bc9d255fc931ab100ea3bbd75c856e8690e9f", 0x3d}, 0x48, 0xfffffffffffffffb) pipe2$watch_queue(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x57) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x16, 0x5, 0x4, 0x3, 0x820, r2, 0x1, '\x00', 0x0, r2, 0x0, 0x2, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x9, &(0x7f0000000340)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0x1}, @jmp={0x5, 0x1, 0x4, 0x3, 0x7, 0xfffffffffffffff4, 0xfffffffffffffffc}, @alu={0x7, 0x1, 0x9, 0xf, 0x9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0, 0x8}, @exit, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @map_fd={0x18, 0x7, 0x1, 0x0, r2}], &(0x7f00000003c0)='syzkaller\x00', 0x8001, 0xb1, &(0x7f0000000400)=""/177, 0x41100, 0x8, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f00000004c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x3, 0x1ff, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r3, r2, r2]}, 0x80) ioctl$DRM_IOCTL_SYNCOBJ_HANDLE_TO_FD_FD(r2, 0xc01064c1, &(0x7f0000000680)) r4 = socket(0x6, 0x80000, 0x80000000) syz_genetlink_get_family_id$batadv(&(0x7f00000006c0), r4) socket$inet_udp(0x2, 0x2, 0x0) r5 = add_key$fscrypt_v1(&(0x7f0000000800), &(0x7f0000000840)={'fscrypt:', @desc4}, &(0x7f0000000880)={0x0, "7ae2c338ec2193b83f7bcb643fed35ac19d90d9577f93bf7a4a73e075d80c12989dfa251428cc607d2387b5dc183126f0ad31413a31dc6a42c8aba4de0f1e385", 0x2b}, 0x48, r1) r6 = add_key$fscrypt_v1(&(0x7f0000000700), &(0x7f0000000740)={'fscrypt:', @desc2}, &(0x7f0000000780)={0x0, "19c113ec41f398cfa9d623c9af919bdf57486997e0d1f654ce879750163ee935535c507d912c751386096e7b0bf9fca602139f3f85995fe80bbd908fd2ac0af7", 0x1f}, 0x48, r5) ioctl$DRM_IOCTL_AGP_ACQUIRE(r2, 0x6430) add_key$fscrypt_v1(&(0x7f0000000900), &(0x7f0000000940)={'fscrypt:', @desc2}, &(0x7f0000000980)={0x0, "c394bf58eb798830f4bc8fc138a2670e7419b5e1bac65ff7dcb09bfa01f09dc4e753e6582ad31b274b118f00d8f59b18e4ec34f5176b1cb57869de7c1d6b6b85", 0x1f}, 0x48, r5) add_key$fscrypt_v1(&(0x7f0000000b00), &(0x7f0000000b40)={'fscrypt:', @desc4}, &(0x7f0000000b80)={0x0, "a9b99a4e765b63b2bcdd98090711675f57cae955da3890813355277b824f352a52ae526a87b750f07058952611623fe42d000d1813e346b86be47ddbac464961", 0x37}, 0x48, r6) [ 106.231038][ T9046] ================================================================== [ 106.239152][ T9046] BUG: KASAN: use-after-free in __lock_acquire+0x78/0x1f80 [ 106.246384][ T9046] Read of size 8 at addr ffff888079679ca8 by task syz-executor.4/9046 [ 106.254557][ T9046] [ 106.256895][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.4 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 106.267366][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 106.277438][ T9046] Call Trace: [ 106.280737][ T9046] [ 106.283683][ T9046] dump_stack_lvl+0x1e3/0x2cb [ 106.288398][ T9046] ? bfq_pos_tree_add_move+0x436/0x436 [ 106.293881][ T9046] ? _printk+0xcf/0x10f [ 106.298053][ T9046] ? __wake_up_klogd+0xd6/0x100 [ 106.302927][ T9046] ? __wake_up_klogd+0xcd/0x100 [ 106.307802][ T9046] ? panic+0x76e/0x76e [ 106.311890][ T9046] ? _printk+0xcf/0x10f [ 106.316063][ T9046] print_address_description+0x65/0x4b0 [ 106.321632][ T9046] print_report+0xf4/0x210 [ 106.326073][ T9046] ? mark_lock+0x98/0x350 [ 106.330426][ T9046] ? __lock_acquire+0x78/0x1f80 [ 106.335298][ T9046] kasan_report+0xfb/0x130 [ 106.339736][ T9046] ? __lock_acquire+0x78/0x1f80 [ 106.344611][ T9046] __lock_acquire+0x78/0x1f80 [ 106.349312][ T9046] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 106.355317][ T9046] ? finish_lock_switch+0x8e/0x100 [ 106.360452][ T9046] ? finish_task_switch+0x140/0x610 [ 106.365670][ T9046] lock_acquire+0x1a7/0x400 [ 106.370195][ T9046] ? post_one_notification+0x54/0x900 [ 106.375765][ T9046] ? read_lock_is_recursive+0x10/0x10 [ 106.381160][ T9046] ? __sched_text_start+0x8/0x8 [ 106.386032][ T9046] ? print_irqtrace_events+0x220/0x220 [ 106.391526][ T9046] ? smk_access+0x186/0x490 [ 106.396050][ T9046] ? _raw_spin_lock_irq+0xa9/0x110 [ 106.401183][ T9046] _raw_spin_lock_irq+0xcf/0x110 [ 106.406138][ T9046] ? post_one_notification+0x54/0x900 [ 106.411537][ T9046] ? _raw_spin_lock_irqsave+0x120/0x120 [ 106.417104][ T9046] post_one_notification+0x54/0x900 [ 106.422343][ T9046] ? bpf_lsm_post_notification+0x5/0x10 [ 106.427931][ T9046] ? security_post_notification+0x9d/0xb0 [ 106.433676][ T9046] __post_watch_notification+0x36e/0x850 [ 106.439338][ T9046] ? user_update+0x1ba/0x250 [ 106.443944][ T9046] __key_update+0x428/0x4e0 [ 106.448471][ T9046] ? __up_read+0x690/0x690 [ 106.452918][ T9046] ? key_create_or_update+0xd60/0xd60 [ 106.458313][ T9046] ? __key_link_end+0xe0/0x130 [ 106.463095][ T9046] key_create_or_update+0xa8f/0xd60 [ 106.468320][ T9046] ? key_type_put+0x20/0x20 [ 106.472838][ T9046] ? search_process_keyrings_rcu+0x260/0x260 [ 106.478840][ T9046] ? __might_fault+0xb2/0x110 [ 106.483623][ T9046] __se_sys_add_key+0x338/0x480 [ 106.488493][ T9046] ? __x64_sys_add_key+0xc0/0xc0 [ 106.493462][ T9046] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 106.499473][ T9046] ? __x64_sys_add_key+0x1c/0xc0 [ 106.504435][ T9046] do_syscall_64+0x2b/0x70 [ 106.508880][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 106.514784][ T9046] RIP: 0033:0x7fc5b0289109 [ 106.519234][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 106.538856][ T9046] RSP: 002b:00007fc5b130a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 106.547300][ T9046] RAX: ffffffffffffffda RBX: 00007fc5b039bf60 RCX: 00007fc5b0289109 [ 106.555292][ T9046] RDX: 0000000020000280 RSI: 0000000020000240 RDI: 0000000020000200 [ 106.563283][ T9046] RBP: 00007fc5b02e305d R08: fffffffffffffffb R09: 0000000000000000 [ 106.571274][ T9046] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 106.579261][ T9046] R13: 00007fff675939bf R14: 00007fc5b130a300 R15: 0000000000022000 [ 106.587262][ T9046] [ 106.590291][ T9046] [ 106.592623][ T9046] Allocated by task 9047: [ 106.596955][ T9046] ____kasan_kmalloc+0xdc/0x110 [ 106.601827][ T9046] kmem_cache_alloc_trace+0x94/0x310 [ 106.607126][ T9046] alloc_pipe_info+0xe2/0x4a0 [ 106.611818][ T9046] create_pipe_files+0x84/0x6e0 [ 106.616695][ T9046] __do_pipe_flags+0x46/0x200 [ 106.621390][ T9046] do_pipe2+0xd0/0x300 [ 106.625477][ T9046] __x64_sys_pipe2+0x56/0x60 [ 106.630123][ T9046] do_syscall_64+0x2b/0x70 [ 106.634556][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 106.640468][ T9046] [ 106.642802][ T9046] Freed by task 9043: [ 106.646788][ T9046] kasan_set_track+0x4c/0x70 [ 106.651391][ T9046] kasan_set_free_info+0x1f/0x40 [ 106.656348][ T9046] ____kasan_slab_free+0xd8/0x110 [ 106.661487][ T9046] slab_free_freelist_hook+0x12e/0x1a0 [ 106.667509][ T9046] kfree+0xc6/0x210 [ 106.671340][ T9046] pipe_release+0x232/0x310 [ 106.675856][ T9046] __fput+0x3b9/0x820 [ 106.679856][ T9046] task_work_run+0x146/0x1c0 [ 106.684463][ T9046] exit_to_user_mode_loop+0x134/0x160 [ 106.689852][ T9046] exit_to_user_mode_prepare+0xad/0x110 [ 106.695425][ T9046] syscall_exit_to_user_mode+0x2e/0x60 [ 106.700909][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 106.706819][ T9046] [ 106.709150][ T9046] The buggy address belongs to the object at ffff888079679c00 [ 106.709150][ T9046] which belongs to the cache kmalloc-cg-512 of size 512 [ 106.723476][ T9046] The buggy address is located 168 bytes inside of [ 106.723476][ T9046] 512-byte region [ffff888079679c00, ffff888079679e00) [ 106.736774][ T9046] [ 106.739109][ T9046] The buggy address belongs to the physical page: [ 106.745528][ T9046] page:ffffea0001e59e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79678 [ 106.755696][ T9046] head:ffffea0001e59e00 order:2 compound_mapcount:0 compound_pincount:0 [ 106.764035][ T9046] memcg:ffff88805f1c0101 [ 106.768369][ T9046] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 106.776368][ T9046] raw: 00fff00000010200 ffffea0001746100 dead000000000002 ffff888011c42dc0 [ 106.784965][ T9046] raw: 0000000000000000 0000000000100010 00000001ffffffff ffff88805f1c0101 [ 106.793557][ T9046] page dumped because: kasan: bad access detected [ 106.799978][ T9046] page_owner tracks the page as allocated [ 106.805698][ T9046] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2980, tgid 2980 (udevd), ts 21389277779, free_ts 21358925208 [ 106.826464][ T9046] get_page_from_freelist+0x72b/0x7a0 [ 106.831964][ T9046] __alloc_pages+0x259/0x560 [ 106.836575][ T9046] alloc_slab_page+0x70/0xf0 [ 106.841183][ T9046] allocate_slab+0x5e/0x520 [ 106.845711][ T9046] ___slab_alloc+0x42e/0xce0 [ 106.850316][ T9046] __kmalloc_node_track_caller+0x2bb/0x3f0 [ 106.856137][ T9046] __alloc_skb+0x11d/0x660 [ 106.860569][ T9046] alloc_skb_with_frags+0xac/0x800 [ 106.865698][ T9046] sock_alloc_send_pskb+0x930/0xa70 [ 106.870909][ T9046] unix_dgram_sendmsg+0x5ca/0x1fc0 [ 106.876038][ T9046] sock_write_iter+0x3e7/0x560 [ 106.880818][ T9046] vfs_write+0xa22/0xd40 [ 106.885068][ T9046] ksys_write+0x19b/0x2c0 [ 106.889408][ T9046] do_syscall_64+0x2b/0x70 [ 106.893838][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 106.899748][ T9046] page last free stack trace: [ 106.904428][ T9046] free_pcp_prepare+0x812/0x900 [ 106.909390][ T9046] free_unref_page+0x7d/0x390 [ 106.914082][ T9046] ___cache_free+0x118/0x1a0 [ 106.918686][ T9046] qlist_free_all+0x2b/0x70 [ 106.923224][ T9046] kasan_quarantine_reduce+0x169/0x180 [ 106.928703][ T9046] __kasan_slab_alloc+0x2f/0xe0 [ 106.933578][ T9046] __kmalloc+0x1bd/0x370 [ 106.937841][ T9046] tomoyo_realpath_from_path+0xd8/0x5f0 [ 106.943403][ T9046] tomoyo_path_perm+0x270/0x6b0 [ 106.948290][ T9046] security_inode_getattr+0xc0/0x140 [ 106.953698][ T9046] vfs_getattr+0x26/0x360 [ 106.958068][ T9046] vfs_statx+0x183/0x3f0 [ 106.962334][ T9046] __se_sys_newfstatat+0xf6/0x790 [ 106.967393][ T9046] do_syscall_64+0x2b/0x70 [ 106.971855][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 106.977856][ T9046] [ 106.980193][ T9046] Memory state around the buggy address: [ 106.985932][ T9046] ffff888079679b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 106.994025][ T9046] ffff888079679c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.002111][ T9046] >ffff888079679c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.010811][ T9046] ^ [ 107.016243][ T9046] ffff888079679d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.024327][ T9046] ffff888079679d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 107.032399][ T9046] ================================================================== [ 107.040471][ T9046] Kernel panic - not syncing: panic_on_warn set ... [ 107.047072][ T9046] CPU: 0 PID: 9046 Comm: syz-executor.4 Not tainted 5.19.0-rc5-syzkaller-00233-gb1c428b6c368 #0 [ 107.057497][ T9046] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/29/2022 [ 107.067570][ T9046] Call Trace: [ 107.070863][ T9046] [ 107.073806][ T9046] dump_stack_lvl+0x1e3/0x2cb [ 107.078503][ T9046] ? bfq_pos_tree_add_move+0x436/0x436 [ 107.083980][ T9046] ? panic+0x76e/0x76e [ 107.088069][ T9046] ? vscnprintf+0x59/0x80 [ 107.092417][ T9046] panic+0x312/0x76e [ 107.096343][ T9046] ? fb_is_primary_device+0xcc/0xcc [ 107.101592][ T9046] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 107.107506][ T9046] ? __lock_acquire+0x78/0x1f80 [ 107.112376][ T9046] end_report+0x91/0xa0 [ 107.116665][ T9046] kasan_report+0x108/0x130 [ 107.121198][ T9046] ? __lock_acquire+0x78/0x1f80 [ 107.126072][ T9046] __lock_acquire+0x78/0x1f80 [ 107.130774][ T9046] ? __bpf_trace_rcu_stall_warning+0x10/0x10 [ 107.136786][ T9046] ? finish_lock_switch+0x8e/0x100 [ 107.141922][ T9046] ? finish_task_switch+0x140/0x610 [ 107.147666][ T9046] lock_acquire+0x1a7/0x400 [ 107.152190][ T9046] ? post_one_notification+0x54/0x900 [ 107.157589][ T9046] ? read_lock_is_recursive+0x10/0x10 [ 107.162980][ T9046] ? __sched_text_start+0x8/0x8 [ 107.167853][ T9046] ? print_irqtrace_events+0x220/0x220 [ 107.173341][ T9046] ? smk_access+0x186/0x490 [ 107.177864][ T9046] ? _raw_spin_lock_irq+0xa9/0x110 [ 107.182993][ T9046] _raw_spin_lock_irq+0xcf/0x110 [ 107.187948][ T9046] ? post_one_notification+0x54/0x900 [ 107.193344][ T9046] ? _raw_spin_lock_irqsave+0x120/0x120 [ 107.198911][ T9046] post_one_notification+0x54/0x900 [ 107.204133][ T9046] ? bpf_lsm_post_notification+0x5/0x10 [ 107.209701][ T9046] ? security_post_notification+0x9d/0xb0 [ 107.215453][ T9046] __post_watch_notification+0x36e/0x850 [ 107.221121][ T9046] ? user_update+0x1ba/0x250 [ 107.225737][ T9046] __key_update+0x428/0x4e0 [ 107.230262][ T9046] ? __up_read+0x690/0x690 [ 107.234701][ T9046] ? key_create_or_update+0xd60/0xd60 [ 107.240100][ T9046] ? __key_link_end+0xe0/0x130 [ 107.244884][ T9046] key_create_or_update+0xa8f/0xd60 [ 107.250114][ T9046] ? key_type_put+0x20/0x20 [ 107.254643][ T9046] ? search_process_keyrings_rcu+0x260/0x260 [ 107.260659][ T9046] ? __might_fault+0xb2/0x110 [ 107.265375][ T9046] __se_sys_add_key+0x338/0x480 [ 107.270254][ T9046] ? __x64_sys_add_key+0xc0/0xc0 [ 107.275216][ T9046] ? syscall_enter_from_user_mode+0x2e/0x1a0 [ 107.281233][ T9046] ? __x64_sys_add_key+0x1c/0xc0 [ 107.286190][ T9046] do_syscall_64+0x2b/0x70 [ 107.290625][ T9046] entry_SYSCALL_64_after_hwframe+0x46/0xb0 [ 107.296541][ T9046] RIP: 0033:0x7fc5b0289109 [ 107.301145][ T9046] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 107.320772][ T9046] RSP: 002b:00007fc5b130a168 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 107.329207][ T9046] RAX: ffffffffffffffda RBX: 00007fc5b039bf60 RCX: 00007fc5b0289109 [ 107.337203][ T9046] RDX: 0000000020000280 RSI: 0000000020000240 RDI: 0000000020000200 [ 107.345366][ T9046] RBP: 00007fc5b02e305d R08: fffffffffffffffb R09: 0000000000000000 [ 107.353355][ T9046] R10: 0000000000000048 R11: 0000000000000246 R12: 0000000000000000 [ 107.361342][ T9046] R13: 00007fff675939bf R14: 00007fc5b130a300 R15: 0000000000022000 [ 107.369363][ T9046] [ 107.372469][ T9046] Kernel Offset: disabled [ 107.376803][ T9046] Rebooting in 86400 seconds..