0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000001500)={0x5, 0x10, 0xfa00, {&(0x7f0000001280), r8, 0x2}}, 0x18)

22:10:19 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:19 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 0:
socket$isdn(0x22, 0x3, 0x0)

22:10:19 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000001500)={0x5, 0x10, 0xfa00, {&(0x7f0000001280), r8, 0x2}}, 0x18)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:19 executing program 2:
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)

22:10:19 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)

22:10:19 executing program 0:
socket$isdn(0x22, 0x3, 0x0)

22:10:19 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x48800)

22:10:19 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:19 executing program 0:
socket$isdn(0x22, 0x3, 0x0)

22:10:19 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)

22:10:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x48800)

22:10:19 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)

22:10:19 executing program 0:
socket$isdn(0x22, 0x3, 0x0)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)

22:10:19 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

22:10:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x48800)

22:10:19 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)

22:10:19 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)

22:10:19 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)

22:10:19 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:19 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)

22:10:19 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)

22:10:19 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

22:10:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

22:10:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
socket$isdn(0x22, 0x3, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x48800)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000001500)={0x5, 0x10, 0xfa00, {&(0x7f0000001280), r8, 0x2}}, 0x18)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)

22:10:20 executing program 2:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={0x0}}, 0x0)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000001500)={0x5, 0x10, 0xfa00, {&(0x7f0000001280), r8, 0x2}}, 0x18)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
r7 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480)={<r8=>0xffffffffffffffff}, 0x13f, 0x6}}, 0x20)
write$RDMA_USER_CM_CMD_QUERY_ROUTE(r7, &(0x7f0000001500)={0x5, 0x10, 0xfa00, {&(0x7f0000001280), r8, 0x2}}, 0x18)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
socket$isdn(0x22, 0x3, 0x10)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
socket$isdn(0x22, 0x3, 0x10)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000014c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000001480), 0x13f, 0x6}}, 0x20)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, 0xffffffffffffffff, 0x100000000)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 3:
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, 0xffffffffffffffff, 0x100000000)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
socket$isdn(0x22, 0x3, 0x10)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)
mmap$xdp(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4, 0x80010, 0xffffffffffffffff, 0x180000000)

22:10:20 executing program 3:
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, 0xffffffffffffffff, 0x100000000)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 3:
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x50, 0xffffffffffffffff, 0x100000000)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r6 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)
sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f0000001200)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000011c0)={&(0x7f0000001140)={0x5c, 0x0, 0x400, 0x70bd25, 0x25dfdbff, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0x6}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xffffffff80000000}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x6}, @NBD_ATTR_SOCKETS={0xc, 0x7, 0x0, 0x1, [{0x8, 0x1, r6}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x48800)

22:10:20 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

22:10:20 executing program 4:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)

22:10:20 executing program 3:
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x100000000)

22:10:20 executing program 1:
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})

22:10:20 executing program 4:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000001100), 0x100, 0x0)

22:10:20 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:20 executing program 3:
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x10, 0xffffffffffffffff, 0x0)

22:10:20 executing program 4:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000440), &(0x7f0000000480)=0x10)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "b810c7f33a73b6dba304f369c8e1b082598716671416436aae99cac4bc7e4beb19c09ef2d1e13d90720407610a7762bd87a782522018861ae2ff8b8354d5b9df2b26b1a3dd557a54e2c7a751d5a6b3a9d1c5a1a0f608db502745abff17fcf6e473a8cf0311ff222f4360d84cbb31dc2c863b64235a5828ff9e99cf8bddda0322f6c8e21fa2bf2e0847b6f0b266c25e628f9237457a93ffcc207697a48ae5c4e72e952e94631d591dfd5aab35c5f120848e130904b7b19e367c066c7f52c805f444a022ed6630d1a0bcd1fedb2e948f658be19ff600c82782ee207ef7589fd1d0e882eceb9eb44d88dde7fa81b621ddc1aaa28d1d58cc997ee737ce4961b9a045", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
write$RDMA_USER_CM_CMD_LISTEN(r1, &(0x7f0000000b80)={0x7, 0x8, 0xfa00, {0xffffffffffffffff, 0xc454}}, 0x10)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:20 executing program 4:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000480))

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:20 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:20 executing program 3:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:20 executing program 5:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)
sendmsg$GTP_CMD_NEWPDP(r4, &(0x7f0000000b40)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000ac0)={0x30, 0x0, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @rand_addr=0x64010100}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_TID={0xc, 0x3, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)

22:10:20 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:20 executing program 4:
getsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0)

22:10:20 executing program 5:
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/cgroups\x00', 0x0, 0x0)

22:10:20 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:20 executing program 4:
bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})
write$RDMA_USER_CM_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000900)={0x6, 0x118, 0xfa00, {{0x10001, 0x7fffffff, "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", 0x85, 0x6, 0x7f, 0x7f, 0xc2, 0xe0, 0x18, 0x1}}}, 0x120)

22:10:20 executing program 1:
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={0xffffffffffffffff, 0x0, 0x0}, 0x10)

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
r3 = socket$isdn(0x22, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000008c0)={'wg0\x00'})

22:10:20 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)
socket$isdn(0x22, 0x3, 0x10)

22:10:20 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, &(0x7f0000000640)=""/208, 0x0, 0xd0}, 0x20)

22:10:20 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:20 executing program 4:
bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0)

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
r1 = syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r2, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})
mmap$xdp(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x3000008, 0x50, r1, 0x100000000)

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:20 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0}, 0x20)

22:10:20 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:20 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)
ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, &(0x7f0000000880)={0x0, 0x4, 0x2})

22:10:20 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:20 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:20 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0}, 0x20)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:21 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)
bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000840)={r1, 0x10, &(0x7f0000000800)={&(0x7f0000000780)=""/124, 0x7c}}, 0x10)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 5:
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={0x0, 0x0}, 0x20)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000740)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x104, 0x104, 0x6, [@func={0xa, 0x0, 0x0, 0xc, 0x2}, @restrict={0xa, 0x0, 0x0, 0xb, 0x5}, @struct={0x10, 0x2, 0x0, 0x4, 0x0, 0x401, [{0x3, 0x2, 0x1}, {0x1, 0x4, 0x4}]}, @union={0x9, 0xa, 0x0, 0x5, 0x1, 0x52, [{0x9, 0x5, 0x1}, {0xd, 0x0, 0x3b7}, {0xc, 0x4, 0x7}, {0x1, 0x1, 0x7}, {0x0, 0x2, 0x9}, {0xa, 0x5, 0x9}, {0x4, 0x1, 0x8}, {0xd, 0x2, 0xfff}, {0xe, 0x5, 0x3f}, {0x4, 0x1, 0x1579562f}]}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0xd51b}}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x7a, 0x2}, @volatile={0x5, 0x0, 0x0, 0x9, 0x5}, @int={0x9, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x41, 0x2}]}, {0x0, [0x0, 0x61, 0x61, 0x2e]}}, &(0x7f0000000640)=""/208, 0x122, 0xd0}, 0x20)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)
syz_open_dev$vcsa(&(0x7f00000004c0), 0x3, 0x14001)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 0:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)
getsockopt$sock_timeval(r0, 0x1, 0x14, &(0x7f0000000440), &(0x7f0000000480)=0x10)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000400)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0)

22:10:21 executing program 0:
accept4$vsock_stream(0xffffffffffffffff, 0x0, 0x0, 0x0)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, 0x0, 0x0)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x1, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x1000, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r5, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x8, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x0, 0x5c3, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x3}, 0x48)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3}, 0x48)

22:10:21 executing program 3:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100), 0x48)

22:10:21 executing program 3:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100), 0x48)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:21 executing program 3:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

22:10:21 executing program 1:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 2:
bpf$MAP_CREATE(0x0, &(0x7f000000b100), 0x48)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:21 executing program 1:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)

22:10:21 executing program 3:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x0)

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:21 executing program 1:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:21 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:21 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:21 executing program 4:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:21 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (fail_nth: 1)

[  116.226572][T14776] FAULT_INJECTION: forcing a failure.
[  116.226572][T14776] name fail_usercopy, interval 1, probability 0, space 0, times 1
[  116.239818][T14776] CPU: 0 PID: 14776 Comm: syz-executor.1 Not tainted 5.16.0-rc7-syzkaller #0
[  116.248659][T14776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  116.258710][T14776] Call Trace:
[  116.261982][T14776]  <TASK>
[  116.264920][T14776]  dump_stack_lvl+0xd6/0x122
[  116.269529][T14776]  dump_stack+0x11/0x1b
[  116.273745][T14776]  should_fail+0x23c/0x250
[  116.278166][T14776]  should_fail_usercopy+0x16/0x20
[  116.283231][T14776]  _copy_to_user+0x1c/0x90
[  116.287649][T14776]  simple_read_from_buffer+0xab/0x120
[  116.293106][T14776]  proc_fail_nth_read+0x10d/0x150
[  116.298187][T14776]  ? proc_fault_inject_write+0x230/0x230
[  116.303836][T14776]  vfs_read+0x1e6/0x750
[  116.308060][T14776]  ? __fget_files+0x1d2/0x210
[  116.312772][T14776]  ksys_read+0xd9/0x190
[  116.316988][T14776]  __x64_sys_read+0x3e/0x50
[  116.321512][T14776]  do_syscall_64+0x44/0xd0
[  116.325961][T14776]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  116.331906][T14776] RIP: 0033:0x7fe51d56aa4c
[  116.336320][T14776] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  116.355926][T14776] RSP: 002b:00007fe51c72e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.364340][T14776] RAX: ffffffffffffffda RBX: 00007fe51d6caf60 RCX: 00007fe51d56aa4c
22:10:22 executing program 5:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:22 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 3:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

[  116.372315][T14776] RDX: 000000000000000f RSI: 00007fe51c72e1e0 RDI: 0000000000000003
[  116.380333][T14776] RBP: 00007fe51c72e1d0 R08: 0000000000000000 R09: 0000000000000269
[  116.388380][T14776] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001
[  116.396405][T14776] R13: 00007fff34d2148f R14: 00007fe51c72e300 R15: 0000000000022000
[  116.404377][T14776]  </TASK>
22:10:22 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (fail_nth: 1)

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  116.478279][T14793] FAULT_INJECTION: forcing a failure.
[  116.478279][T14793] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.491369][T14793] CPU: 0 PID: 14793 Comm: syz-executor.3 Not tainted 5.16.0-rc7-syzkaller #0
[  116.500134][T14793] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  116.510264][T14793] Call Trace:
[  116.513541][T14793]  <TASK>
[  116.516472][T14793]  dump_stack_lvl+0xd6/0x122
[  116.521073][T14793]  dump_stack+0x11/0x1b
[  116.525236][T14793]  should_fail+0x23c/0x250
[  116.529662][T14793]  should_fail_usercopy+0x16/0x20
[  116.534695][T14793]  _copy_to_user+0x1c/0x90
[  116.539120][T14793]  simple_read_from_buffer+0xab/0x120
[  116.544506][T14793]  proc_fail_nth_read+0x10d/0x150
[  116.549603][T14793]  ? proc_fault_inject_write+0x230/0x230
[  116.555243][T14793]  vfs_read+0x1e6/0x750
[  116.559406][T14793]  ? __fget_files+0x1d2/0x210
[  116.564154][T14793]  ksys_read+0xd9/0x190
[  116.568317][T14793]  __x64_sys_read+0x3e/0x50
[  116.572828][T14793]  do_syscall_64+0x44/0xd0
[  116.577249][T14793]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  116.583152][T14793] RIP: 0033:0x7f96bf251a4c
[  116.587574][T14793] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  116.607386][T14793] RSP: 002b:00007f96be415160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.615831][T14793] RAX: ffffffffffffffda RBX: 00007f96bf3b1f60 RCX: 00007f96bf251a4c
22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (fail_nth: 1)

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000)

22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x3f, 0x5, 0x1, {0x9, 0x2}, 0xb2b, 0x8001})

[  116.623914][T14793] RDX: 000000000000000f RSI: 00007f96be4151e0 RDI: 0000000000000003
[  116.631883][T14793] RBP: 00007f96be4151d0 R08: 0000000000000000 R09: 0000000000000000
[  116.639855][T14793] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.647873][T14793] R13: 00007ffed810d52f R14: 00007f96be415300 R15: 0000000000022000
[  116.655885][T14793]  </TASK>
22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000)

[  116.711934][T14804] FAULT_INJECTION: forcing a failure.
[  116.711934][T14804] name fail_usercopy, interval 1, probability 0, space 0, times 0
[  116.725022][T14804] CPU: 0 PID: 14804 Comm: syz-executor.4 Not tainted 5.16.0-rc7-syzkaller #0
[  116.733785][T14804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
[  116.743834][T14804] Call Trace:
[  116.747115][T14804]  <TASK>
[  116.750069][T14804]  dump_stack_lvl+0xd6/0x122
[  116.754747][T14804]  dump_stack+0x11/0x1b
22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)

[  116.758962][T14804]  should_fail+0x23c/0x250
[  116.763471][T14804]  should_fail_usercopy+0x16/0x20
[  116.768509][T14804]  _copy_to_user+0x1c/0x90
[  116.768538][T14804]  simple_read_from_buffer+0xab/0x120
[  116.768566][T14804]  proc_fail_nth_read+0x10d/0x150
22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x3f, 0x5, 0x1, {0x9, 0x2}, 0xb2b, 0x8001})

22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x3f, 0x5, 0x1, {0x9, 0x2}, 0xb2b, 0x8001})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(0xffffffffffffffff, 0xc05c5340, &(0x7f0000000000)={0x3f, 0x5, 0x1, {0x9, 0x2}, 0xb2b, 0x8001}) (async)

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, 0x0, 0x10000)

[  116.768591][T14804]  ? proc_fault_inject_write+0x230/0x230
[  116.768618][T14804]  vfs_read+0x1e6/0x750
[  116.768643][T14804]  ? __fget_files+0x1d2/0x210
[  116.768668][T14804]  ksys_read+0xd9/0x190
[  116.768693][T14804]  __x64_sys_read+0x3e/0x50
[  116.768768][T14804]  do_syscall_64+0x44/0xd0
[  116.768787][T14804]  entry_SYSCALL_64_after_hwframe+0x44/0xae
[  116.768892][T14804] RIP: 0033:0x7efc0e4caa4c
[  116.768992][T14804] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48
[  116.769010][T14804] RSP: 002b:00007efc0d68e160 EFLAGS: 00000246 ORIG_RAX: 0000000000000000
[  116.769030][T14804] RAX: ffffffffffffffda RBX: 00007efc0e62af60 RCX: 00007efc0e4caa4c
[  116.769044][T14804] RDX: 000000000000000f RSI: 00007efc0d68e1e0 RDI: 0000000000000003
[  116.769058][T14804] RBP: 00007efc0d68e1d0 R08: 0000000000000000 R09: 0000000000000000
22:10:22 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))
sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, &(0x7f000000c040)={&(0x7f000000b680)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f000000c000)={&(0x7f000000ba80)={0x558, 0x0, 0x400, 0x70bd25, 0x25dfdbfe, {}, [{{0x8}, {0x1d4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1000}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x76}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x5c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x2c, 0x4, [{0x26c3, 0x0, 0x9}, {0x4, 0x0, 0x5, 0x4}, {0x9, 0x1, 0x4, 0x3f61}, {0x1, 0x9, 0x7, 0x3}, {0x2, 0x0, 0x9, 0x8e1}]}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4dc}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0xf8, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x101}}}, {0x7c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x4c, 0x4, [{0x7fff, 0x1f, 0x3, 0xb586}, {0x7fff, 0x40, 0x3f}, {0x5, 0x9, 0x94, 0x167}, {0x9, 0x5e, 0x3f, 0xb18}, {0x3ff, 0x1, 0xff}, {0x400, 0x8, 0x2, 0x3}, {0x5, 0x80, 0x3, 0x6}, {0x8, 0x2, 0x9, 0x100}, {0x9, 0x9, 0x0, 0xfffffffb}]}}}]}}]}, 0x558}}, 0x48041)

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000052c0)={'ip6gretap0\x00'})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4)

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x0)

22:10:22 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x1, 0x1f})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x1})

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x0)

[  116.769159][T14804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001
[  116.769172][T14804] R13: 00007ffcfbcd274f R14: 00007efc0d68e300 R15: 0000000000022000
[  116.769188][T14804]  </TASK>
22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x1, 0x1f})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x1})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x1, 0x1f}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x1}) (async)

22:10:22 executing program 5:
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x0)

[  117.025407][   T24] audit: type=1400 audit(1641075022.724:108): avc:  denied  { create } for  pid=14825 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
[  117.025634][T14833] ip6gretap0: mtu less than device minimum
22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  117.045349][   T24] audit: type=1400 audit(1641075022.724:109): avc:  denied  { ioctl } for  pid=14825 comm="syz-executor.3" path="socket:[56067]" dev="sockfs" ino=56067 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
22:10:22 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f000000b600))

22:10:22 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$BINDER_FREEZE(r0, 0x400c620e, &(0x7f0000000080)={0x0, 0x1, 0x1f}) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0)
r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r2, 0x0, 0x0) (async)
ioctl$BINDER_GET_NODE_INFO_FOR_REF(r2, 0xc018620c, &(0x7f0000000040)={0x1})

22:10:22 executing program 4:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 4:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8}) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000052c0)={'ip6gretap0\x00'}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4)

22:10:22 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
r9 = openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r9, 0x269)

22:10:22 executing program 1:
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa664ee37645cb6b3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe8ee}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4004840)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r5=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x250, 0x0, 0x110, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x95}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008040)

22:10:22 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:22 executing program 1:
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa664ee37645cb6b3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe8ee}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x800) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4004840)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r5=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x250, 0x0, 0x110, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x95}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008040)

22:10:22 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:22 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)
openat$vcsa(0xffffffffffffff9c, &(0x7f000000b5c0), 0x101c00, 0x0)

[  117.247958][T14875] ip6gretap0: mtu less than device minimum
22:10:23 executing program 0:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 4:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8}) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = socket$pppl2tp(0x18, 0x1, 0x1)
ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f00000052c0)={'ip6gretap0\x00'}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x9, 0x4)

22:10:23 executing program 1:
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa664ee37645cb6b3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe8ee}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x800)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4004840)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)={'team0\x00', <r2=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, <r3=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)={'team0\x00', <r4=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)={'team0\x00', <r5=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, <r6=>0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x250, 0x0, 0x110, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x95}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008040)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0xa664ee37645cb6b3}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x44, 0x0, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_TIMEOUT={0xc, 0x4, 0xe8ee}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}, @NBD_ATTR_TIMEOUT={0xc}]}, 0x44}, 0x1, 0x0, 0x0, 0x8081}, 0x800) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$TIPC_CMD_GET_MEDIA_NAMES(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x1c}}, 0x4004840) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000240)='/proc/consoles\x00', 0x0, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000002c0)) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000340)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000380)) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000780)) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f00000007c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000800)=0x14) (async)
sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f0000000b00)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000840)={0x250, 0x0, 0x110, 0x70bd29, 0x25dfdbfe, {}, [{{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r2}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x95}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r3}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}]}}, {{0x8}, {0xf0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x200}}, {0x8, 0x6, r5}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r6}}}]}}]}, 0x250}, 0x1, 0x0, 0x0, 0x11}, 0x4008040) (async)

22:10:23 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)
sendmsg$TIPC_CMD_RESET_LINK_STATS(r6, &(0x7f000000b580)={&(0x7f000000b4c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f000000b540)={&(0x7f000000b500)={0x28, 0x0, 0x200, 0x70bd27, 0x25dfdbfe, {{}, {}, {0xc, 0x14, 'syz1\x00'}}, ["", ""]}, 0x28}}, 0x4020)

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  117.393421][T14910] ip6gretap0: mtu less than device minimum
[  117.405345][   T24] audit: type=1400 audit(1641075022.834:110): avc:  denied  { setopt } for  pid=14825 comm="syz-executor.3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1
22:10:23 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x24, 0x0, &(0x7f0000000040)="98557b177182a3ddcea77b9a758f63d64bfc90790053a0ca45eb528bbce03d5df6352f8d"})

22:10:23 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x400000, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x200080)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4088)

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4b0a00)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r6, 0x111, 0x4, 0x1, 0x4)

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4b0a00)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:23 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x24, 0x0, &(0x7f0000000040)="98557b177182a3ddcea77b9a758f63d64bfc90790053a0ca45eb528bbce03d5df6352f8d"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x24, 0x0, &(0x7f0000000040)="98557b177182a3ddcea77b9a758f63d64bfc90790053a0ca45eb528bbce03d5df6352f8d"}) (async)

[  117.425471][   T24] audit: type=1400 audit(1641075022.914:111): avc:  denied  { ioctl } for  pid=14870 comm="syz-executor.1" path="socket:[56961]" dev="sockfs" ino=56961 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
r8 = openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r8, 0xc0bc5351, &(0x7f000000b400)={0x8, 0x1, 'client0\x00', 0x0, "5518bd02a373beb4", "dd5d3a8fddfda5f709cccb6b12101bf8962ac975e75e63b0e5b5f77b102b6ae3", 0x20, 0x10001})

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x400000, 0x4)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x200080)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4088)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x400000, 0x4) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x200080) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00'}) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4088) (async)

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x4b0a00)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)
openat$sndseq(0xffffffffffffff9c, &(0x7f000000b3c0), 0x10000)

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101001, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040))
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x1, 0xffff}, 0x6, 0x80000000})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00'})

22:10:23 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x24, 0x0, &(0x7f0000000040)="98557b177182a3ddcea77b9a758f63d64bfc90790053a0ca45eb528bbce03d5df6352f8d"})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000080)={0x2c, 0x0, &(0x7f0000000000)=[@clear_death={0x400c630f, 0x3}, @acquire_done={0x40106309, 0x3}, @acquire={0x40046305, 0x1}], 0x24, 0x0, &(0x7f0000000040)="98557b177182a3ddcea77b9a758f63d64bfc90790053a0ca45eb528bbce03d5df6352f8d"}) (async)

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x400000, 0x4) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_open_dev$vcsa(&(0x7f0000000180), 0x8, 0x200080)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg2\x00', <r1=>0x0})
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x5c, 0x0, 0x10, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4088)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)
sendmsg$GTP_CMD_DELPDP(r3, &(0x7f000000b380)={&(0x7f000000b2c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f000000b340)={&(0x7f000000b300)={0x30, r7, 0x400, 0x70bd28, 0x25dfdbff, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_NET_NS_FD={0x8, 0x7, r6}, @GTPA_I_TEI={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8c0}, 0x800)

22:10:23 executing program 5:
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101001, 0x2)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x1, 0xffff}, 0x6, 0x80000000})
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00'})

22:10:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/215, 0xd7, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x5, 0x0, &(0x7f0000000280)="ad957e7dd5"})
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
r7 = syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, r7, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(0x0, r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x101001, 0x2) (async, rerun: 64)
ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(0xffffffffffffffff, 0x80045301, &(0x7f0000000040)) (async, rerun: 64)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/diskstats\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r0, 0x402c5342, &(0x7f00000000c0)={0x0, 0x0, 0x8, {0x1, 0xffff}, 0x6, 0x80000000}) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000140)={'wg2\x00'})

22:10:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/215, 0xd7, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x5, 0x0, &(0x7f0000000280)="ad957e7dd5"}) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r5 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r4, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r5, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r6 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r6, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)
syz_genetlink_get_family_id$gtp(&(0x7f000000b1c0), r3)

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xffffffffffffff50)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0xfed)

22:10:23 executing program 5:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xffffffffffffff50) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0xfed)

22:10:23 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe40, 0x80)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x406000)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4040040)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc400)

22:10:23 executing program 5:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
r5 = syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)
bpf$MAP_CREATE(0x0, &(0x7f000000b100)=@base={0x17, 0x1, 0x1000, 0x8, 0x5c3, r5, 0x101, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x3}, 0x48)

22:10:23 executing program 1:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, r0, 0x7) (async)
ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x58, 0x18, &(0x7f0000000140)={@fd={0x66642a85, 0x0, r0}, @ptr={0x70742a85, 0x0, &(0x7f0000000040)=""/215, 0xd7, 0x0, 0xb}, @fd={0x66642a85, 0x0, r0}}, &(0x7f00000001c0)={0x0, 0x18, 0x40}}, 0x40}], 0x5, 0x0, &(0x7f0000000280)="ad957e7dd5"}) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/locks\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_JOIN_MCAST(r1, &(0x7f0000000380)={0x16, 0x98, 0xfa00, {&(0x7f0000000340), 0x4, 0xffffffffffffffff, 0x1c, 0x0, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0xa0)

22:10:23 executing program 5:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe40, 0x80) (async)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x406000) (async, rerun: 32)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 32)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4040040)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async, rerun: 64)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc400) (rerun: 64)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)
syz_open_dev$vcsa(&(0x7f000000b0c0), 0x4, 0x8000)

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0xffffffffffffff50) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async, rerun: 64)
ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f0000000000)=0xfed) (rerun: 64)

22:10:23 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x80)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:23 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:23 executing program 3:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10}, 0x18)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/157, 0x9d}], 0x1}, 0x7c}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/69, 0x45}], 0x6, &(0x7f0000000780)=""/53, 0x35}, 0x7ff}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/39, 0x27}], 0x3, &(0x7f0000000ac0)=""/87, 0x57}, 0x45a}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/197, 0xc5}, {&(0x7f0000000cc0)=""/54, 0x36}], 0x2}, 0x6}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/179, 0xb3}], 0x1, &(0x7f0000000ec0)=""/220, 0xdc}, 0x1}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/152, 0x98}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f0000001280)=""/37, 0x25}], 0x5, &(0x7f0000001340)=""/29, 0x1d}, 0x5378}, {{&(0x7f0000001380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/79, 0x4f}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/103, 0x67}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/164, 0xa4}], 0x5, &(0x7f0000001780)=""/97, 0x61}, 0x83cf1900}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/188, 0xbc}], 0x1, &(0x7f0000001980)=""/192, 0xc0}, 0xff}], 0x8, 0x20, &(0x7f0000001c40))
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
recvmmsg(r0, &(0x7f0000009900)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/72, 0x48}, {&(0x7f0000001f80)=""/185, 0xb9}], 0x6, &(0x7f00000020c0)=""/117, 0x18}, 0x3}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002140)=""/4, 0x4}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/240, 0xf0}, {&(0x7f0000003280)=""/135, 0x87}], 0x4, &(0x7f0000003380)=""/1, 0x1}, 0x6}, {{&(0x7f00000033c0)=@alg, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)=""/75, 0x4b}, {&(0x7f00000034c0)=""/46, 0x2e}], 0x2, &(0x7f0000003540)=""/146, 0x92}, 0x5}, {{&(0x7f0000003600)=@alg, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003680)=""/167, 0xa7}, {&(0x7f0000003740)=""/210, 0xd2}, {&(0x7f0000003840)=""/196, 0xc4}, {&(0x7f0000003940)=""/131, 0x83}, {&(0x7f0000003a00)=""/194, 0xc2}], 0x5, &(0x7f0000003b80)=""/159, 0x9f}, 0xee46}, {{&(0x7f0000003c40)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000003cc0)=""/3, 0x3}, {&(0x7f0000003d00)=""/220, 0xdc}, {&(0x7f0000003e00)=""/14, 0xe}, {&(0x7f0000003e40)=""/68, 0x44}, {&(0x7f0000003ec0)=""/33, 0x21}, {&(0x7f0000003f00)=""/203, 0xcb}, {&(0x7f0000004000)=""/129, 0x81}, {&(0x7f00000040c0)=""/77, 0x4d}], 0x8, &(0x7f00000041c0)=""/226, 0xe2}, 0x9}, {{&(0x7f00000042c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000007380)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/51, 0x33}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x4}, 0x5}, {{&(0x7f00000073c0)=@caif=@util, 0x80, &(0x7f0000008700)=[{&(0x7f0000007440)=""/223, 0xdf}, {&(0x7f0000007540)=""/11, 0xb}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/67, 0x43}, {&(0x7f0000008600)=""/68, 0x44}, {&(0x7f0000008680)=""/67, 0x43}], 0x6, &(0x7f0000008780)=""/127, 0x7f}}, {{&(0x7f0000008800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000008cc0)=[{&(0x7f0000008880)=""/89, 0x59}, {&(0x7f0000008900)=""/236, 0xec}, {&(0x7f0000008a00)=""/83, 0x53}, {&(0x7f0000008a80)=""/5, 0x5}, {&(0x7f0000008ac0)=""/36, 0x24}, {&(0x7f0000008b00)=""/78, 0x4e}, {&(0x7f0000008b80)=""/211, 0xd3}, {&(0x7f0000008c80)=""/63, 0x3f}], 0x8, &(0x7f0000008d40)=""/161, 0xa1}, 0x4c5}, {{&(0x7f0000008e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000008e80)=""/168, 0xa8}, {&(0x7f0000008f40)=""/229, 0xe5}, {&(0x7f0000009040)=""/40, 0x28}, {&(0x7f0000009080)}, {&(0x7f00000090c0)=""/226, 0xe2}, {&(0x7f00000091c0)=""/243, 0xf3}], 0x6, &(0x7f0000009340)=""/125, 0x7d}, 0x1}, {{&(0x7f00000093c0)=@isdn, 0x80, &(0x7f0000009800)=[{&(0x7f0000009440)=""/170, 0xaa}, {&(0x7f0000009500)=""/201, 0xc9}, {&(0x7f0000009600)=""/219, 0xdb}, {&(0x7f0000009700)=""/205, 0xcd}], 0x4, &(0x7f0000009840)=""/158, 0x9e}, 0x6}], 0xa, 0x0, &(0x7f0000009b80)={0x77359400})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000009c40)={&(0x7f0000009bc0)=""/111, 0x4000, 0x0, 0x434ccf47, 0x1}, 0x20)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000))

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, <r3=>0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
r4 = syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r3, &(0x7f000000b080)={&(0x7f000000af80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f000000b040)={&(0x7f000000b000)={0x34, r4, 0x402, 0x70bd28, 0xffff, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000090}, 0x8000)

22:10:23 executing program 4:
openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0xe40, 0x80) (async, rerun: 64)
r0 = syz_open_dev$vcsa(&(0x7f0000000000), 0x3, 0x406000) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff)
sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="cc000000", @ANYRES16=r1, @ANYBLOB="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"], 0xcc}, 0x1, 0x0, 0x0, 0x1}, 0x4040040)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0xc400)

22:10:23 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x80) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:23 executing program 3:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10}, 0x18) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/157, 0x9d}], 0x1}, 0x7c}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/69, 0x45}], 0x6, &(0x7f0000000780)=""/53, 0x35}, 0x7ff}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/39, 0x27}], 0x3, &(0x7f0000000ac0)=""/87, 0x57}, 0x45a}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/197, 0xc5}, {&(0x7f0000000cc0)=""/54, 0x36}], 0x2}, 0x6}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/179, 0xb3}], 0x1, &(0x7f0000000ec0)=""/220, 0xdc}, 0x1}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/152, 0x98}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f0000001280)=""/37, 0x25}], 0x5, &(0x7f0000001340)=""/29, 0x1d}, 0x5378}, {{&(0x7f0000001380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/79, 0x4f}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/103, 0x67}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/164, 0xa4}], 0x5, &(0x7f0000001780)=""/97, 0x61}, 0x83cf1900}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/188, 0xbc}], 0x1, &(0x7f0000001980)=""/192, 0xc0}, 0xff}], 0x8, 0x20, &(0x7f0000001c40))
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff) (async)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
recvmmsg(r0, &(0x7f0000009900)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/72, 0x48}, {&(0x7f0000001f80)=""/185, 0xb9}], 0x6, &(0x7f00000020c0)=""/117, 0x18}, 0x3}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002140)=""/4, 0x4}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/240, 0xf0}, {&(0x7f0000003280)=""/135, 0x87}], 0x4, &(0x7f0000003380)=""/1, 0x1}, 0x6}, {{&(0x7f00000033c0)=@alg, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)=""/75, 0x4b}, {&(0x7f00000034c0)=""/46, 0x2e}], 0x2, &(0x7f0000003540)=""/146, 0x92}, 0x5}, {{&(0x7f0000003600)=@alg, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003680)=""/167, 0xa7}, {&(0x7f0000003740)=""/210, 0xd2}, {&(0x7f0000003840)=""/196, 0xc4}, {&(0x7f0000003940)=""/131, 0x83}, {&(0x7f0000003a00)=""/194, 0xc2}], 0x5, &(0x7f0000003b80)=""/159, 0x9f}, 0xee46}, {{&(0x7f0000003c40)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000003cc0)=""/3, 0x3}, {&(0x7f0000003d00)=""/220, 0xdc}, {&(0x7f0000003e00)=""/14, 0xe}, {&(0x7f0000003e40)=""/68, 0x44}, {&(0x7f0000003ec0)=""/33, 0x21}, {&(0x7f0000003f00)=""/203, 0xcb}, {&(0x7f0000004000)=""/129, 0x81}, {&(0x7f00000040c0)=""/77, 0x4d}], 0x8, &(0x7f00000041c0)=""/226, 0xe2}, 0x9}, {{&(0x7f00000042c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000007380)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/51, 0x33}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x4}, 0x5}, {{&(0x7f00000073c0)=@caif=@util, 0x80, &(0x7f0000008700)=[{&(0x7f0000007440)=""/223, 0xdf}, {&(0x7f0000007540)=""/11, 0xb}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/67, 0x43}, {&(0x7f0000008600)=""/68, 0x44}, {&(0x7f0000008680)=""/67, 0x43}], 0x6, &(0x7f0000008780)=""/127, 0x7f}}, {{&(0x7f0000008800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000008cc0)=[{&(0x7f0000008880)=""/89, 0x59}, {&(0x7f0000008900)=""/236, 0xec}, {&(0x7f0000008a00)=""/83, 0x53}, {&(0x7f0000008a80)=""/5, 0x5}, {&(0x7f0000008ac0)=""/36, 0x24}, {&(0x7f0000008b00)=""/78, 0x4e}, {&(0x7f0000008b80)=""/211, 0xd3}, {&(0x7f0000008c80)=""/63, 0x3f}], 0x8, &(0x7f0000008d40)=""/161, 0xa1}, 0x4c5}, {{&(0x7f0000008e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000008e80)=""/168, 0xa8}, {&(0x7f0000008f40)=""/229, 0xe5}, {&(0x7f0000009040)=""/40, 0x28}, {&(0x7f0000009080)}, {&(0x7f00000090c0)=""/226, 0xe2}, {&(0x7f00000091c0)=""/243, 0xf3}], 0x6, &(0x7f0000009340)=""/125, 0x7d}, 0x1}, {{&(0x7f00000093c0)=@isdn, 0x80, &(0x7f0000009800)=[{&(0x7f0000009440)=""/170, 0xaa}, {&(0x7f0000009500)=""/201, 0xc9}, {&(0x7f0000009600)=""/219, 0xdb}, {&(0x7f0000009700)=""/205, 0xcd}], 0x4, &(0x7f0000009840)=""/158, 0x9e}, 0x6}], 0xa, 0x0, &(0x7f0000009b80)={0x77359400})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000009c40)={&(0x7f0000009bc0)=""/111, 0x4000, 0x0, 0x434ccf47, 0x1}, 0x20)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000))

22:10:23 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  117.823776][   T24] audit: type=1400 audit(1641075023.524:112): avc:  denied  { create } for  pid=15016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
22:10:23 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)

22:10:23 executing program 3:
write$RDMA_USER_CM_CMD_QUERY_ROUTE(0xffffffffffffffff, &(0x7f0000000200)={0x5, 0x10}, 0x18) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001a40)=[{{&(0x7f0000000240)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @private0}}, 0x80, &(0x7f0000000380)=[{&(0x7f00000002c0)=""/157, 0x9d}], 0x1}, 0x7c}, {{&(0x7f00000003c0)=@in={0x2, 0x0, @private}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000440)}, {&(0x7f0000000480)=""/83, 0x53}, {&(0x7f0000000500)=""/200, 0xc8}, {&(0x7f0000000600)=""/27, 0x1b}, {&(0x7f0000000640)=""/34, 0x22}, {&(0x7f0000000680)=""/69, 0x45}], 0x6, &(0x7f0000000780)=""/53, 0x35}, 0x7ff}, {{&(0x7f00000007c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000a80)=[{&(0x7f0000000840)=""/198, 0xc6}, {&(0x7f0000000940)=""/228, 0xe4}, {&(0x7f0000000a40)=""/39, 0x27}], 0x3, &(0x7f0000000ac0)=""/87, 0x57}, 0x45a}, {{&(0x7f0000000b40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/197, 0xc5}, {&(0x7f0000000cc0)=""/54, 0x36}], 0x2}, 0x6}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, &(0x7f0000000e80)=[{&(0x7f0000000dc0)=""/179, 0xb3}], 0x1, &(0x7f0000000ec0)=""/220, 0xdc}, 0x1}, {{0x0, 0x0, &(0x7f00000012c0)=[{&(0x7f0000000fc0)=""/152, 0x98}, {&(0x7f0000001080)=""/76, 0x4c}, {&(0x7f0000001100)=""/172, 0xac}, {&(0x7f00000011c0)=""/143, 0x8f}, {&(0x7f0000001280)=""/37, 0x25}], 0x5, &(0x7f0000001340)=""/29, 0x1d}, 0x5378}, {{&(0x7f0000001380)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000001700)=[{&(0x7f0000001400)=""/79, 0x4f}, {&(0x7f0000001480)=""/83, 0x53}, {&(0x7f0000001500)=""/103, 0x67}, {&(0x7f0000001580)=""/161, 0xa1}, {&(0x7f0000001640)=""/164, 0xa4}], 0x5, &(0x7f0000001780)=""/97, 0x61}, 0x83cf1900}, {{&(0x7f0000001800)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r0=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001940)=[{&(0x7f0000001880)=""/188, 0xbc}], 0x1, &(0x7f0000001980)=""/192, 0xc0}, 0xff}], 0x8, 0x20, &(0x7f0000001c40))
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async)
recvmmsg(r0, &(0x7f0000009900)=[{{0x0, 0x0, &(0x7f0000002040)=[{&(0x7f0000001c80)=""/172, 0xac}, {&(0x7f0000000440)=""/54, 0x36}, {&(0x7f0000001d40)=""/243, 0xf3}, {&(0x7f0000001e40)=""/153, 0x99}, {&(0x7f0000001f00)=""/72, 0x48}, {&(0x7f0000001f80)=""/185, 0xb9}], 0x6, &(0x7f00000020c0)=""/117, 0x18}, 0x3}, {{0x0, 0x0, &(0x7f0000003340)=[{&(0x7f0000002140)=""/4, 0x4}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/240, 0xf0}, {&(0x7f0000003280)=""/135, 0x87}], 0x4, &(0x7f0000003380)=""/1, 0x1}, 0x6}, {{&(0x7f00000033c0)=@alg, 0x80, &(0x7f0000003500)=[{&(0x7f0000003440)=""/75, 0x4b}, {&(0x7f00000034c0)=""/46, 0x2e}], 0x2, &(0x7f0000003540)=""/146, 0x92}, 0x5}, {{&(0x7f0000003600)=@alg, 0x80, &(0x7f0000003b00)=[{&(0x7f0000003680)=""/167, 0xa7}, {&(0x7f0000003740)=""/210, 0xd2}, {&(0x7f0000003840)=""/196, 0xc4}, {&(0x7f0000003940)=""/131, 0x83}, {&(0x7f0000003a00)=""/194, 0xc2}], 0x5, &(0x7f0000003b80)=""/159, 0x9f}, 0xee46}, {{&(0x7f0000003c40)=@can, 0x80, &(0x7f0000004140)=[{&(0x7f0000003cc0)=""/3, 0x3}, {&(0x7f0000003d00)=""/220, 0xdc}, {&(0x7f0000003e00)=""/14, 0xe}, {&(0x7f0000003e40)=""/68, 0x44}, {&(0x7f0000003ec0)=""/33, 0x21}, {&(0x7f0000003f00)=""/203, 0xcb}, {&(0x7f0000004000)=""/129, 0x81}, {&(0x7f00000040c0)=""/77, 0x4d}], 0x8, &(0x7f00000041c0)=""/226, 0xe2}, 0x9}, {{&(0x7f00000042c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000007380)=[{&(0x7f0000004340)=""/4096, 0x1000}, {&(0x7f0000005340)=""/51, 0x33}, {&(0x7f0000005380)=""/4096, 0x1000}, {&(0x7f0000006380)=""/4096, 0x1000}], 0x4}, 0x5}, {{&(0x7f00000073c0)=@caif=@util, 0x80, &(0x7f0000008700)=[{&(0x7f0000007440)=""/223, 0xdf}, {&(0x7f0000007540)=""/11, 0xb}, {&(0x7f0000007580)=""/4096, 0x1000}, {&(0x7f0000008580)=""/67, 0x43}, {&(0x7f0000008600)=""/68, 0x44}, {&(0x7f0000008680)=""/67, 0x43}], 0x6, &(0x7f0000008780)=""/127, 0x7f}}, {{&(0x7f0000008800)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @mcast2}}, 0x80, &(0x7f0000008cc0)=[{&(0x7f0000008880)=""/89, 0x59}, {&(0x7f0000008900)=""/236, 0xec}, {&(0x7f0000008a00)=""/83, 0x53}, {&(0x7f0000008a80)=""/5, 0x5}, {&(0x7f0000008ac0)=""/36, 0x24}, {&(0x7f0000008b00)=""/78, 0x4e}, {&(0x7f0000008b80)=""/211, 0xd3}, {&(0x7f0000008c80)=""/63, 0x3f}], 0x8, &(0x7f0000008d40)=""/161, 0xa1}, 0x4c5}, {{&(0x7f0000008e00)=@pppol2tpv3in6={0x18, 0x1, {0x0, <r1=>0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x80, &(0x7f00000092c0)=[{&(0x7f0000008e80)=""/168, 0xa8}, {&(0x7f0000008f40)=""/229, 0xe5}, {&(0x7f0000009040)=""/40, 0x28}, {&(0x7f0000009080)}, {&(0x7f00000090c0)=""/226, 0xe2}, {&(0x7f00000091c0)=""/243, 0xf3}], 0x6, &(0x7f0000009340)=""/125, 0x7d}, 0x1}, {{&(0x7f00000093c0)=@isdn, 0x80, &(0x7f0000009800)=[{&(0x7f0000009440)=""/170, 0xaa}, {&(0x7f0000009500)=""/201, 0xc9}, {&(0x7f0000009600)=""/219, 0xdb}, {&(0x7f0000009700)=""/205, 0xcd}], 0x4, &(0x7f0000009840)=""/158, 0x9e}, 0x6}], 0xa, 0x0, &(0x7f0000009b80)={0x77359400})
setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000009c40)={&(0x7f0000009bc0)=""/111, 0x4000, 0x0, 0x434ccf47, 0x1}, 0x20)
shmctl$SHM_STAT(0x0, 0xd, &(0x7f0000000000))

22:10:23 executing program 1:
r0 = socket$xdp(0x2c, 0x3, 0x0)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x80)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
socket$xdp(0x2c, 0x3, 0x0) (async)
getsockopt$XDP_MMAP_OFFSETS(r0, 0x11b, 0x1, &(0x7f00000000c0), &(0x7f0000000080)=0x80) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)

22:10:23 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000))
r1 = gettid()
r2 = getpgrp(r1)
getpgrp(r2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

[  117.893216][   T24] audit: type=1400 audit(1641075023.554:113): avc:  denied  { getopt } for  pid=15016 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1
22:10:24 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:24 executing program 1:
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x190, 0x80, 0x100, 0x3, 0x1, 0xea, 0x4000}}}, 0x15)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:24 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00)={<r1=>0x0, <r2=>0x0})
recvmmsg(0xffffffffffffffff, &(0x7f000000ad40)=[{{0x0, 0x0, &(0x7f0000003ac0)=[{&(0x7f0000003a80)=""/16, 0x10}], 0x1, &(0x7f0000003b00)=""/66, 0x42}, 0x7}, {{&(0x7f0000003b80)=@rc={0x1f, @fixed}, 0x80, &(0x7f0000006e00)=[{&(0x7f0000003c00)=""/4096, 0x1000}, {&(0x7f0000004c00)=""/4096, 0x1000}, {&(0x7f0000005c00)=""/132, 0x84}, {&(0x7f0000005cc0)=""/125, 0x7d}, {&(0x7f0000005d40)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/175, 0xaf}], 0x6, &(0x7f0000006e80)=""/4096, 0x1000}, 0x81}, {{&(0x7f0000007e80)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000007fc0)=[{&(0x7f0000007f00)=""/180, 0xb4}], 0x1}, 0x6}, {{&(0x7f0000008000)=@tipc, 0x80, &(0x7f0000008300)=[{&(0x7f0000008080)=""/252, 0xfc}, {&(0x7f0000008180)=""/205, 0xcd}, {&(0x7f0000008280)=""/104, 0x68}], 0x3, &(0x7f0000008340)=""/254, 0xfe}, 0x652}, {{&(0x7f0000008440)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000008780)=[{&(0x7f00000084c0)=""/193, 0xc1}, {&(0x7f00000085c0)=""/127, 0x7f}, {&(0x7f0000008640)=""/120, 0x78}, {&(0x7f00000086c0)=""/174, 0xae}], 0x4, &(0x7f00000087c0)=""/105, 0x69}, 0x5}, {{0x0, 0x0, &(0x7f000000ab40)=[{&(0x7f0000008840)=""/4096, 0x1000}, {&(0x7f0000009840)=""/4096, 0x1000}, {&(0x7f000000a840)=""/248, 0xf8}, {&(0x7f000000a940)=""/113, 0x71}, {&(0x7f000000a9c0)=""/6, 0x6}, {&(0x7f000000aa00)=""/23, 0x17}, {&(0x7f000000aa40)=""/93, 0x5d}, {&(0x7f000000aac0)=""/70, 0x46}], 0x8, &(0x7f000000abc0)=""/29, 0x1d}, 0x8}, {{&(0x7f000000ac00)=@vsock={0x28, 0x0, 0x0, @hyper}, 0x80, &(0x7f000000ad00)=[{&(0x7f000000ac80)=""/10, 0xa}, {&(0x7f000000acc0)=""/58, 0x3a}], 0x2}, 0x20}], 0x7, 0x2020, &(0x7f000000af40)={r1, r2+60000000})

22:10:24 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000))
r1 = gettid()
r2 = getpgrp(r1)
getpgrp(r2)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000)) (async)
gettid() (async)
getpgrp(r1) (async)
getpgrp(r2) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)

22:10:24 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/230, 0xe6}, 0x9}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/195, 0xc3}], 0x3}}], 0x2, 0x40012101, 0x0)

22:10:24 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/230, 0xe6}, 0x9}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/195, 0xc3}], 0x3}}], 0x2, 0x40012101, 0x0)

22:10:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:24 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$SECCOMP_IOCTL_NOTIF_RECV(r0, 0xc0502100, &(0x7f0000000000))
r1 = gettid()
r2 = getpgrp(r1)
getpgrp(r2) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:24 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)
clock_gettime(0x0, &(0x7f000000af00))

[  118.684547][   T24] audit: type=1326 audit(1641075024.384:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15056 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51d5b7e99 code=0x0
22:10:24 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x4000080)

22:10:24 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/230, 0xe6}, 0x9}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/195, 0xc3}], 0x3}}], 0x2, 0x40012101, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
recvmmsg(0xffffffffffffffff, &(0x7f0000001380)=[{{0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000040)=""/230, 0xe6}, 0x9}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x80, &(0x7f0000001340)=[{&(0x7f00000001c0)=""/93, 0x5d}, {&(0x7f0000000240)=""/4096, 0x1000}, {&(0x7f0000001240)=""/195, 0xc3}], 0x3}}], 0x2, 0x40012101, 0x0) (async)

22:10:25 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:25 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="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", 0xfe, 0x6b3c4938}, {&(0x7f0000000180)="f20df268f8c47e0c6a629351077b0eb6d5113b40ec1ad3427c57847cf2c67eb33c015d8b8928e165326dbf81e4101843c19d882b5d33c44e60c1035486c8d32a477abddf2eec1da35f79132263755d27bb12d8a76d310a298e187958d262da706dd719dcedc779059ec1cf837ca92bc3c39353839c78e88d2d0928cef270c1f5e4ba2e9a4ad1f6f6a1810f8881f7592da44b965a6f9196853d4cb3a6698a34b6108d696a605966cb491a7b06a13a503eba24b11104fff55f33c80d357c27bc16242a1577d6f7aabe43e72d88268c461d55c11ebca4029e216d7975bdb37393b1018f82e99eb7d17c", 0xe8, 0x3f}, {&(0x7f0000000280)="3cf9c61fe31b88243bc2d7194b98e033ee3b7c8ca60cbeeec0b247d9cc064cac4aba34f285d67177ec6bf4933d996410076c3bfb9935e2cd879a9e8df50548dec6738c9bd25ebe845d1be3538e9e46b1b237892cce2b401517401e5260987aad38e968302df0c07dbf2a6d696d45de8960e71cc07a348fca946ab14d0de2ee14cb38b2ff3077f6753a41726aaeebcf676fbead5d7e01fa0f143e9f92b733", 0x9e, 0x81}, {&(0x7f0000000340)="2c73c781498b34a00cf7252e118c4f1c1f4109d4974b5ed42a6dc99097c3d57ef5df0b7a62fb72f72a0ccf04f6ca39e3d588503556eb1f62062dcb5239", 0x3d, 0x8}], 0x41800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8859-2,map=off,map=normal,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0xee00, @ANYBLOB="00000000002bf6a6060000000000000062d588bad4db3671bcceac45494a7ac4b89f764c209f81ecb75710c8553fc56288248dbf368b7d8f6c7ddf5867ecfd5743a617fe707dc8c7", @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=,dont_hash,\x00'])
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:25 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x4000080)

22:10:25 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r1=>0x0})
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006900), 0x20200, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x35c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8d6}}, {0x8, 0x7, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x54}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}]}, 0x35c}}, 0x20040100)

22:10:25 executing program 1:
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x190, 0x80, 0x100, 0x3, 0x1, 0xea, 0x4000}}}, 0x15)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:25 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r1=>0x0}) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006900), 0x20200, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x35c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8d6}}, {0x8, 0x7, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x54}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}]}, 0x35c}}, 0x20040100)

22:10:25 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x4000080)

22:10:25 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x1, 0x4)
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000200), 0x400000, 0x0) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'team0\x00', <r1=>0x0}) (async)
r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000006900), 0x20200, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(r2, 0x111, 0x5, 0x0, 0x4) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r3, 0x111, 0x2, 0x0, 0x4)
getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, <r4=>0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14)
sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000700)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000740)={0x35c, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {}, [{{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xf8d6}}, {0x8, 0x7, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r1}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x54}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}, {{0x8}, {0x78, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffffc}}}]}}]}, 0x35c}}, 0x20040100)

22:10:25 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  119.554132][T15095] loop4: detected capacity change from 0 to 264192
[  119.556437][   T24] audit: type=1326 audit(1641075025.254:115): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15096 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51d5b7e99 code=0x0
22:10:25 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:26 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x0, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:26 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x2, 0x3}}, 0x2e)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x4, 0x3}}, 0x2e)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000080)={0x0, 0x1, {0x1, 0x0, 0xe0000000, 0x2, 0x3810}, 0x3f})

22:10:26 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="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", 0xfe, 0x6b3c4938}, {&(0x7f0000000180)="f20df268f8c47e0c6a629351077b0eb6d5113b40ec1ad3427c57847cf2c67eb33c015d8b8928e165326dbf81e4101843c19d882b5d33c44e60c1035486c8d32a477abddf2eec1da35f79132263755d27bb12d8a76d310a298e187958d262da706dd719dcedc779059ec1cf837ca92bc3c39353839c78e88d2d0928cef270c1f5e4ba2e9a4ad1f6f6a1810f8881f7592da44b965a6f9196853d4cb3a6698a34b6108d696a605966cb491a7b06a13a503eba24b11104fff55f33c80d357c27bc16242a1577d6f7aabe43e72d88268c461d55c11ebca4029e216d7975bdb37393b1018f82e99eb7d17c", 0xe8, 0x3f}, {&(0x7f0000000280)="3cf9c61fe31b88243bc2d7194b98e033ee3b7c8ca60cbeeec0b247d9cc064cac4aba34f285d67177ec6bf4933d996410076c3bfb9935e2cd879a9e8df50548dec6738c9bd25ebe845d1be3538e9e46b1b237892cce2b401517401e5260987aad38e968302df0c07dbf2a6d696d45de8960e71cc07a348fca946ab14d0de2ee14cb38b2ff3077f6753a41726aaeebcf676fbead5d7e01fa0f143e9f92b733", 0x9e, 0x81}, {&(0x7f0000000340)="2c73c781498b34a00cf7252e118c4f1c1f4109d4974b5ed42a6dc99097c3d57ef5df0b7a62fb72f72a0ccf04f6ca39e3d588503556eb1f62062dcb5239", 0x3d, 0x8}], 0x41800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8859-2,map=off,map=normal,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0xee00, @ANYBLOB="00000000002bf6a6060000000000000062d588bad4db3671bcceac45494a7ac4b89f764c209f81ecb75710c8553fc56288248dbf368b7d8f6c7ddf5867ecfd5743a617fe707dc8c7", @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=,dont_hash,\x00']) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:26 executing program 2:
sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x0, 0x4, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x1)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:26 executing program 1:
write$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x1, @setup_sync_conn={{0x428, 0x11}, {0x190, 0x80, 0x100, 0x3, 0x1, 0xea, 0x4000}}}, 0x15)
seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={0x0, 0x0, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:26 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:26 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x0, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:26 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async, rerun: 32)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) (async, rerun: 32)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) (async, rerun: 64)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x4, 0x3}}, 0x2e) (rerun: 64)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000080)={0x0, 0x1, {0x1, 0x0, 0xe0000000, 0x2, 0x3810}, 0x3f})

22:10:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180), 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  120.451161][T15124] loop4: detected capacity change from 0 to 264192
[  120.457808][   T24] audit: type=1326 audit(1641075026.144:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15123 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe51d5b7e99 code=0x0
22:10:26 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:26 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x0, 0x1ff, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:26 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:26 executing program 4:
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="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", 0xfe, 0x6b3c4938}, {&(0x7f0000000180)="f20df268f8c47e0c6a629351077b0eb6d5113b40ec1ad3427c57847cf2c67eb33c015d8b8928e165326dbf81e4101843c19d882b5d33c44e60c1035486c8d32a477abddf2eec1da35f79132263755d27bb12d8a76d310a298e187958d262da706dd719dcedc779059ec1cf837ca92bc3c39353839c78e88d2d0928cef270c1f5e4ba2e9a4ad1f6f6a1810f8881f7592da44b965a6f9196853d4cb3a6698a34b6108d696a605966cb491a7b06a13a503eba24b11104fff55f33c80d357c27bc16242a1577d6f7aabe43e72d88268c461d55c11ebca4029e216d7975bdb37393b1018f82e99eb7d17c", 0xe8, 0x3f}, {&(0x7f0000000280)="3cf9c61fe31b88243bc2d7194b98e033ee3b7c8ca60cbeeec0b247d9cc064cac4aba34f285d67177ec6bf4933d996410076c3bfb9935e2cd879a9e8df50548dec6738c9bd25ebe845d1be3538e9e46b1b237892cce2b401517401e5260987aad38e968302df0c07dbf2a6d696d45de8960e71cc07a348fca946ab14d0de2ee14cb38b2ff3077f6753a41726aaeebcf676fbead5d7e01fa0f143e9f92b733", 0x9e, 0x81}, {&(0x7f0000000340)="2c73c781498b34a00cf7252e118c4f1c1f4109d4974b5ed42a6dc99097c3d57ef5df0b7a62fb72f72a0ccf04f6ca39e3d588503556eb1f62062dcb5239", 0x3d, 0x8}], 0x41800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8859-2,map=off,map=normal,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0xee00, @ANYBLOB="00000000002bf6a6060000000000000062d588bad4db3671bcceac45494a7ac4b89f764c209f81ecb75710c8553fc56288248dbf368b7d8f6c7ddf5867ecfd5743a617fe707dc8c7", @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=,dont_hash,\x00'])
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffc, 0x4, &(0x7f0000000380)=[{&(0x7f0000000080)="04a2da60b1594609cf8162a5d544180d0285a1065138f53a8013a35d60992343b07d6f9b80a2e73141a4a4ac2a59d9e2891181e73576c3c4c2961745daaca286014635d14672c1093c47de53d997b71cbe869903bc21f0e1d4a0745c3c272d627b172996f0fe5b5a37a7ec51ab53e5c63aed75558728216ef7a5ef09a03cc215846689f5a546e8037f9ac0dfe54319fd0ef60755318cff6efed0d1c7c3d5da97f970517cf86bbefaae13ecd1ac2375116a50fdd31fd39cf4a54f35d2c94fda46bc259dbab8aaff57ba027f1b18550494889d9eb49fb2737d874b3a684d250077e24957352181786666770900dded03c043cea58cdf98ca52804366038371", 0xfe, 0x6b3c4938}, {&(0x7f0000000180)="f20df268f8c47e0c6a629351077b0eb6d5113b40ec1ad3427c57847cf2c67eb33c015d8b8928e165326dbf81e4101843c19d882b5d33c44e60c1035486c8d32a477abddf2eec1da35f79132263755d27bb12d8a76d310a298e187958d262da706dd719dcedc779059ec1cf837ca92bc3c39353839c78e88d2d0928cef270c1f5e4ba2e9a4ad1f6f6a1810f8881f7592da44b965a6f9196853d4cb3a6698a34b6108d696a605966cb491a7b06a13a503eba24b11104fff55f33c80d357c27bc16242a1577d6f7aabe43e72d88268c461d55c11ebca4029e216d7975bdb37393b1018f82e99eb7d17c", 0xe8, 0x3f}, {&(0x7f0000000280)="3cf9c61fe31b88243bc2d7194b98e033ee3b7c8ca60cbeeec0b247d9cc064cac4aba34f285d67177ec6bf4933d996410076c3bfb9935e2cd879a9e8df50548dec6738c9bd25ebe845d1be3538e9e46b1b237892cce2b401517401e5260987aad38e968302df0c07dbf2a6d696d45de8960e71cc07a348fca946ab14d0de2ee14cb38b2ff3077f6753a41726aaeebcf676fbead5d7e01fa0f143e9f92b733", 0x9e, 0x81}, {&(0x7f0000000340)="2c73c781498b34a00cf7252e118c4f1c1f4109d4974b5ed42a6dc99097c3d57ef5df0b7a62fb72f72a0ccf04f6ca39e3d588503556eb1f62062dcb5239", 0x3d, 0x8}], 0x41800, &(0x7f0000000500)=ANY=[@ANYBLOB='iocharset=iso8859-2,map=off,map=normal,sbsector=0x0000000000000000,uid=', @ANYRESDEC=0xee00, @ANYBLOB="00000000002bf6a6060000000000000062d588bad4db3671bcceac45494a7ac4b89f764c209f81ecb75710c8553fc56288248dbf368b7d8f6c7ddf5867ecfd5743a617fe707dc8c7", @ANYRESDEC=0x0, @ANYBLOB=',smackfsdef=,dont_hash,\x00']) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)

22:10:26 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
r2 = socket$pppl2tp(0x18, 0x1, 0x1)
connect$pppl2tp(r1, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @multicast1}, 0x2, 0x4, 0x2, 0x3}}, 0x2e) (async)
connect$pppl2tp(r0, &(0x7f0000000140)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e22, @broadcast}, 0x0, 0x0, 0x4, 0x3}}, 0x2e) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(0xffffffffffffffff, 0x111, 0x2, 0x0, 0x4) (async)
ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r3, 0x40605346, &(0x7f0000000080)={0x0, 0x1, {0x1, 0x0, 0xe0000000, 0x2, 0x3810}, 0x3f})

22:10:26 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180), 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  120.636997][T15155] loop4: detected capacity change from 0 to 264192
22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180))
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x510, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x80)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x4)
timer_gettime(0x0, &(0x7f0000000140))

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0xfff, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180), 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 3:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>0x0})
clock_gettime(0x0, &(0x7f000000a300)={<r3=>0x0, <r4=>0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3518, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x4081)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1402, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040)
recvmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000006980)=@x25, 0x80, &(0x7f0000006a00), 0x0, &(0x7f0000006a40)=""/198, 0xc6}, 0x1}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006b40)=""/146, 0x92}], 0x1, &(0x7f0000006c40)=""/159, 0x9f}, 0x4}, {{&(0x7f0000006d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006d80)=""/248, 0xf8}, {&(0x7f0000006e80)=""/104, 0x68}], 0x2, &(0x7f0000006f40)=""/28, 0x1c}, 0x80000001}, {{&(0x7f0000006f80)=@alg, 0x80, &(0x7f0000007280)=[{&(0x7f0000007000)=""/65, 0x41}, {&(0x7f0000007080)=""/100, 0x64}, {&(0x7f0000007100)=""/211, 0xd3}, {&(0x7f0000007200)=""/24, 0x18}, {&(0x7f0000007240)=""/63, 0x3f}], 0x5, &(0x7f0000007300)=""/199, 0xc7}, 0x3}, {{&(0x7f0000007400)=@alg, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/8, 0x8}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/146, 0x92}, {&(0x7f0000009580)=""/212, 0xd4}, {&(0x7f0000009680)=""/68, 0x44}, {&(0x7f0000009700)=""/95, 0x5f}, {&(0x7f0000009780)=""/117, 0x75}, {&(0x7f0000009800)=""/155, 0x9b}], 0x9}, 0x3}, {{&(0x7f0000009980)=@can={0x1d, <r7=>0x0}, 0x80, &(0x7f000000a040)=[{&(0x7f0000009a00)=""/186, 0xba}, {&(0x7f0000009ac0)=""/168, 0xa8}, {&(0x7f0000009b80)=""/210, 0xd2}, {&(0x7f0000009c80)=""/98, 0x62}, {&(0x7f0000009d00)=""/149, 0x95}, {&(0x7f0000009dc0)=""/141, 0x8d}, {&(0x7f0000009e80)=""/15, 0xf}, {&(0x7f0000009ec0)=""/205, 0xcd}, {&(0x7f0000009fc0)=""/74, 0x4a}], 0x9, &(0x7f000000a100)=""/104, 0x68}, 0x7ff}], 0x6, 0x0, &(0x7f000000a340)={r3, r4+10000000})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a640)={'team0\x00', <r8=>0x0})
recvmmsg(r0, &(0x7f0000012a80)=[{{&(0x7f000000a680)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f000000ba40)=[{&(0x7f000000a700)=""/100, 0x64}, {&(0x7f000000a780)=""/242, 0xf2}, {&(0x7f000000a880)=""/4096, 0x1000}, {&(0x7f000000b880)=""/234, 0xea}, {&(0x7f000000b980)=""/174, 0xae}], 0x5, &(0x7f000000bac0)=""/154, 0x9a}, 0x3}, {{0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f000000bb80)=""/139, 0x8b}, {&(0x7f000000bc40)=""/254, 0xfe}, {&(0x7f000000bd40)=""/18, 0x12}], 0x3, &(0x7f000000bdc0)=""/211, 0xd3}, 0xffff9f17}, {{&(0x7f000000bec0)=@rc={0x1f, @none}, 0x80, &(0x7f000000d180)=[{&(0x7f000000bf40)=""/4096, 0x1000}, {&(0x7f000000cf40)=""/151, 0x97}, {&(0x7f000000d000)=""/164, 0xa4}, {&(0x7f000000d0c0)=""/153, 0x99}], 0x4, &(0x7f000000d1c0)=""/29, 0x1d}}, {{&(0x7f000000d200)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000d280), 0x0, &(0x7f000000d2c0)=""/190, 0xbe}, 0x1f}, {{&(0x7f000000d380)=@pptp, 0x80, &(0x7f000000e640)=[{&(0x7f000000d400)=""/86, 0x56}, {&(0x7f000000d480)=""/4096, 0x1000}, {&(0x7f000000e480)=""/5, 0x5}, {&(0x7f000000e4c0)=""/92, 0x5c}, {&(0x7f000000e540)=""/42, 0x2a}, {&(0x7f000000e580)=""/156, 0x9c}], 0x6, &(0x7f000000e6c0)=""/83, 0x53}}, {{&(0x7f000000e740)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000e9c0)=[{&(0x7f000000e7c0)=""/51, 0x33}, {&(0x7f000000e800)=""/158, 0x9e}, {&(0x7f000000e8c0)=""/244, 0xf4}], 0x3, &(0x7f000000ea00)=""/172, 0xac}, 0x1}, {{&(0x7f000000eac0)=@nfc_llcp, 0x80, &(0x7f00000100c0)=[{&(0x7f000000eb40)=""/216, 0xd8}, {&(0x7f000000ec40)=""/31, 0x1f}, {&(0x7f000000ec80)=""/97, 0x61}, {&(0x7f000000ed00)=""/84, 0x54}, {&(0x7f000000ed80)=""/208, 0xd0}, {&(0x7f000000ee80)=""/130, 0x82}, {&(0x7f000000ef40)=""/4096, 0x1000}, {&(0x7f000000ff40)=""/104, 0x68}, {&(0x7f000000ffc0)=""/11, 0xb}, {&(0x7f0000010000)=""/187, 0xbb}], 0xa, &(0x7f0000010180)=""/213, 0xd5}, 0x4}, {{&(0x7f0000010280)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000117c0)=[{&(0x7f0000010300)=""/181, 0xb5}, {&(0x7f00000103c0)=""/104, 0x68}, {&(0x7f0000010440)=""/194, 0xc2}, {&(0x7f0000010540)=""/161, 0xa1}, {&(0x7f0000010600)=""/110, 0x6e}, {&(0x7f0000010680)=""/4096, 0x1000}, {&(0x7f0000011680)=""/31, 0x1f}, {&(0x7f00000116c0)=""/198, 0xc6}], 0x8, &(0x7f0000011840)=""/4096, 0x1000}, 0x8060}, {{&(0x7f0000012840)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000012980)=[{&(0x7f00000128c0)=""/8, 0x8}, {&(0x7f0000012900)=""/123, 0x7b}], 0x2, &(0x7f00000129c0)=""/138, 0x8a}, 0x3}], 0x9, 0x3, &(0x7f0000012cc0)={0x0, 0x3938700})
getsockname$packet(r0, &(0x7f0000012d00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000012d40)=0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000013040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000013000)={&(0x7f0000012d80)={0x280, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3070}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000800)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

22:10:27 executing program 2:
socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000003a40)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x94c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x900, 0x8, 0x0, 0x1, [{0x500, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4fc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x1f}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x3fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2f}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}]}, 0x94c}, 0x1, 0x0, 0x0, 0x800}, 0x20004010)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x40011)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180))
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x510, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x4) (async)
timer_gettime(0x0, &(0x7f0000000140))

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x7fff, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>0x0})
clock_gettime(0x0, &(0x7f000000a300)={<r3=>0x0, <r4=>0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3518, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x4081)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1402, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040)
recvmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000006980)=@x25, 0x80, &(0x7f0000006a00), 0x0, &(0x7f0000006a40)=""/198, 0xc6}, 0x1}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006b40)=""/146, 0x92}], 0x1, &(0x7f0000006c40)=""/159, 0x9f}, 0x4}, {{&(0x7f0000006d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006d80)=""/248, 0xf8}, {&(0x7f0000006e80)=""/104, 0x68}], 0x2, &(0x7f0000006f40)=""/28, 0x1c}, 0x80000001}, {{&(0x7f0000006f80)=@alg, 0x80, &(0x7f0000007280)=[{&(0x7f0000007000)=""/65, 0x41}, {&(0x7f0000007080)=""/100, 0x64}, {&(0x7f0000007100)=""/211, 0xd3}, {&(0x7f0000007200)=""/24, 0x18}, {&(0x7f0000007240)=""/63, 0x3f}], 0x5, &(0x7f0000007300)=""/199, 0xc7}, 0x3}, {{&(0x7f0000007400)=@alg, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/8, 0x8}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/146, 0x92}, {&(0x7f0000009580)=""/212, 0xd4}, {&(0x7f0000009680)=""/68, 0x44}, {&(0x7f0000009700)=""/95, 0x5f}, {&(0x7f0000009780)=""/117, 0x75}, {&(0x7f0000009800)=""/155, 0x9b}], 0x9}, 0x3}, {{&(0x7f0000009980)=@can={0x1d, <r7=>0x0}, 0x80, &(0x7f000000a040)=[{&(0x7f0000009a00)=""/186, 0xba}, {&(0x7f0000009ac0)=""/168, 0xa8}, {&(0x7f0000009b80)=""/210, 0xd2}, {&(0x7f0000009c80)=""/98, 0x62}, {&(0x7f0000009d00)=""/149, 0x95}, {&(0x7f0000009dc0)=""/141, 0x8d}, {&(0x7f0000009e80)=""/15, 0xf}, {&(0x7f0000009ec0)=""/205, 0xcd}, {&(0x7f0000009fc0)=""/74, 0x4a}], 0x9, &(0x7f000000a100)=""/104, 0x68}, 0x7ff}], 0x6, 0x0, &(0x7f000000a340)={r3, r4+10000000})
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a640)={'team0\x00', <r8=>0x0})
recvmmsg(r0, &(0x7f0000012a80)=[{{&(0x7f000000a680)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f000000ba40)=[{&(0x7f000000a700)=""/100, 0x64}, {&(0x7f000000a780)=""/242, 0xf2}, {&(0x7f000000a880)=""/4096, 0x1000}, {&(0x7f000000b880)=""/234, 0xea}, {&(0x7f000000b980)=""/174, 0xae}], 0x5, &(0x7f000000bac0)=""/154, 0x9a}, 0x3}, {{0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f000000bb80)=""/139, 0x8b}, {&(0x7f000000bc40)=""/254, 0xfe}, {&(0x7f000000bd40)=""/18, 0x12}], 0x3, &(0x7f000000bdc0)=""/211, 0xd3}, 0xffff9f17}, {{&(0x7f000000bec0)=@rc={0x1f, @none}, 0x80, &(0x7f000000d180)=[{&(0x7f000000bf40)=""/4096, 0x1000}, {&(0x7f000000cf40)=""/151, 0x97}, {&(0x7f000000d000)=""/164, 0xa4}, {&(0x7f000000d0c0)=""/153, 0x99}], 0x4, &(0x7f000000d1c0)=""/29, 0x1d}}, {{&(0x7f000000d200)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000d280), 0x0, &(0x7f000000d2c0)=""/190, 0xbe}, 0x1f}, {{&(0x7f000000d380)=@pptp, 0x80, &(0x7f000000e640)=[{&(0x7f000000d400)=""/86, 0x56}, {&(0x7f000000d480)=""/4096, 0x1000}, {&(0x7f000000e480)=""/5, 0x5}, {&(0x7f000000e4c0)=""/92, 0x5c}, {&(0x7f000000e540)=""/42, 0x2a}, {&(0x7f000000e580)=""/156, 0x9c}], 0x6, &(0x7f000000e6c0)=""/83, 0x53}}, {{&(0x7f000000e740)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000e9c0)=[{&(0x7f000000e7c0)=""/51, 0x33}, {&(0x7f000000e800)=""/158, 0x9e}, {&(0x7f000000e8c0)=""/244, 0xf4}], 0x3, &(0x7f000000ea00)=""/172, 0xac}, 0x1}, {{&(0x7f000000eac0)=@nfc_llcp, 0x80, &(0x7f00000100c0)=[{&(0x7f000000eb40)=""/216, 0xd8}, {&(0x7f000000ec40)=""/31, 0x1f}, {&(0x7f000000ec80)=""/97, 0x61}, {&(0x7f000000ed00)=""/84, 0x54}, {&(0x7f000000ed80)=""/208, 0xd0}, {&(0x7f000000ee80)=""/130, 0x82}, {&(0x7f000000ef40)=""/4096, 0x1000}, {&(0x7f000000ff40)=""/104, 0x68}, {&(0x7f000000ffc0)=""/11, 0xb}, {&(0x7f0000010000)=""/187, 0xbb}], 0xa, &(0x7f0000010180)=""/213, 0xd5}, 0x4}, {{&(0x7f0000010280)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000117c0)=[{&(0x7f0000010300)=""/181, 0xb5}, {&(0x7f00000103c0)=""/104, 0x68}, {&(0x7f0000010440)=""/194, 0xc2}, {&(0x7f0000010540)=""/161, 0xa1}, {&(0x7f0000010600)=""/110, 0x6e}, {&(0x7f0000010680)=""/4096, 0x1000}, {&(0x7f0000011680)=""/31, 0x1f}, {&(0x7f00000116c0)=""/198, 0xc6}], 0x8, &(0x7f0000011840)=""/4096, 0x1000}, 0x8060}, {{&(0x7f0000012840)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000012980)=[{&(0x7f00000128c0)=""/8, 0x8}, {&(0x7f0000012900)=""/123, 0x7b}], 0x2, &(0x7f00000129c0)=""/138, 0x8a}, 0x3}], 0x9, 0x3, &(0x7f0000012cc0)={0x0, 0x3938700})
getsockname$packet(r0, &(0x7f0000012d00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000012d40)=0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000013040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000013000)={&(0x7f0000012d80)={0x280, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3070}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000800)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)) (async)
clock_gettime(0x0, &(0x7f000000a300)) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1) (async)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3518, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x4081) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1402, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) (async)
recvmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000006980)=@x25, 0x80, &(0x7f0000006a00), 0x0, &(0x7f0000006a40)=""/198, 0xc6}, 0x1}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006b40)=""/146, 0x92}], 0x1, &(0x7f0000006c40)=""/159, 0x9f}, 0x4}, {{&(0x7f0000006d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006d80)=""/248, 0xf8}, {&(0x7f0000006e80)=""/104, 0x68}], 0x2, &(0x7f0000006f40)=""/28, 0x1c}, 0x80000001}, {{&(0x7f0000006f80)=@alg, 0x80, &(0x7f0000007280)=[{&(0x7f0000007000)=""/65, 0x41}, {&(0x7f0000007080)=""/100, 0x64}, {&(0x7f0000007100)=""/211, 0xd3}, {&(0x7f0000007200)=""/24, 0x18}, {&(0x7f0000007240)=""/63, 0x3f}], 0x5, &(0x7f0000007300)=""/199, 0xc7}, 0x3}, {{&(0x7f0000007400)=@alg, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/8, 0x8}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/146, 0x92}, {&(0x7f0000009580)=""/212, 0xd4}, {&(0x7f0000009680)=""/68, 0x44}, {&(0x7f0000009700)=""/95, 0x5f}, {&(0x7f0000009780)=""/117, 0x75}, {&(0x7f0000009800)=""/155, 0x9b}], 0x9}, 0x3}, {{&(0x7f0000009980)=@can, 0x80, &(0x7f000000a040)=[{&(0x7f0000009a00)=""/186, 0xba}, {&(0x7f0000009ac0)=""/168, 0xa8}, {&(0x7f0000009b80)=""/210, 0xd2}, {&(0x7f0000009c80)=""/98, 0x62}, {&(0x7f0000009d00)=""/149, 0x95}, {&(0x7f0000009dc0)=""/141, 0x8d}, {&(0x7f0000009e80)=""/15, 0xf}, {&(0x7f0000009ec0)=""/205, 0xcd}, {&(0x7f0000009fc0)=""/74, 0x4a}], 0x9, &(0x7f000000a100)=""/104, 0x68}, 0x7ff}], 0x6, 0x0, &(0x7f000000a340)={r3, r4+10000000}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a640)) (async)
recvmmsg(r0, &(0x7f0000012a80)=[{{&(0x7f000000a680)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f000000ba40)=[{&(0x7f000000a700)=""/100, 0x64}, {&(0x7f000000a780)=""/242, 0xf2}, {&(0x7f000000a880)=""/4096, 0x1000}, {&(0x7f000000b880)=""/234, 0xea}, {&(0x7f000000b980)=""/174, 0xae}], 0x5, &(0x7f000000bac0)=""/154, 0x9a}, 0x3}, {{0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f000000bb80)=""/139, 0x8b}, {&(0x7f000000bc40)=""/254, 0xfe}, {&(0x7f000000bd40)=""/18, 0x12}], 0x3, &(0x7f000000bdc0)=""/211, 0xd3}, 0xffff9f17}, {{&(0x7f000000bec0)=@rc={0x1f, @none}, 0x80, &(0x7f000000d180)=[{&(0x7f000000bf40)=""/4096, 0x1000}, {&(0x7f000000cf40)=""/151, 0x97}, {&(0x7f000000d000)=""/164, 0xa4}, {&(0x7f000000d0c0)=""/153, 0x99}], 0x4, &(0x7f000000d1c0)=""/29, 0x1d}}, {{&(0x7f000000d200)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000d280), 0x0, &(0x7f000000d2c0)=""/190, 0xbe}, 0x1f}, {{&(0x7f000000d380)=@pptp, 0x80, &(0x7f000000e640)=[{&(0x7f000000d400)=""/86, 0x56}, {&(0x7f000000d480)=""/4096, 0x1000}, {&(0x7f000000e480)=""/5, 0x5}, {&(0x7f000000e4c0)=""/92, 0x5c}, {&(0x7f000000e540)=""/42, 0x2a}, {&(0x7f000000e580)=""/156, 0x9c}], 0x6, &(0x7f000000e6c0)=""/83, 0x53}}, {{&(0x7f000000e740)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000e9c0)=[{&(0x7f000000e7c0)=""/51, 0x33}, {&(0x7f000000e800)=""/158, 0x9e}, {&(0x7f000000e8c0)=""/244, 0xf4}], 0x3, &(0x7f000000ea00)=""/172, 0xac}, 0x1}, {{&(0x7f000000eac0)=@nfc_llcp, 0x80, &(0x7f00000100c0)=[{&(0x7f000000eb40)=""/216, 0xd8}, {&(0x7f000000ec40)=""/31, 0x1f}, {&(0x7f000000ec80)=""/97, 0x61}, {&(0x7f000000ed00)=""/84, 0x54}, {&(0x7f000000ed80)=""/208, 0xd0}, {&(0x7f000000ee80)=""/130, 0x82}, {&(0x7f000000ef40)=""/4096, 0x1000}, {&(0x7f000000ff40)=""/104, 0x68}, {&(0x7f000000ffc0)=""/11, 0xb}, {&(0x7f0000010000)=""/187, 0xbb}], 0xa, &(0x7f0000010180)=""/213, 0xd5}, 0x4}, {{&(0x7f0000010280)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000117c0)=[{&(0x7f0000010300)=""/181, 0xb5}, {&(0x7f00000103c0)=""/104, 0x68}, {&(0x7f0000010440)=""/194, 0xc2}, {&(0x7f0000010540)=""/161, 0xa1}, {&(0x7f0000010600)=""/110, 0x6e}, {&(0x7f0000010680)=""/4096, 0x1000}, {&(0x7f0000011680)=""/31, 0x1f}, {&(0x7f00000116c0)=""/198, 0xc6}], 0x8, &(0x7f0000011840)=""/4096, 0x1000}, 0x8060}, {{&(0x7f0000012840)=@xdp, 0x80, &(0x7f0000012980)=[{&(0x7f00000128c0)=""/8, 0x8}, {&(0x7f0000012900)=""/123, 0x7b}], 0x2, &(0x7f00000129c0)=""/138, 0x8a}, 0x3}], 0x9, 0x3, &(0x7f0000012cc0)={0x0, 0x3938700}) (async)
getsockname$packet(r0, &(0x7f0000012d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000012d40)=0x14) (async)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000013040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000013000)={&(0x7f0000012d80)={0x280, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3070}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000800) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4) (async)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x94c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x900, 0x8, 0x0, 0x1, [{0x500, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4fc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x1f}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x3fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2f}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}]}, 0x94c}, 0x1, 0x0, 0x0, 0x800}, 0x20004010) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x40011)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
ioctl$SECCOMP_IOCTL_NOTIF_ID_VALID(0xffffffffffffffff, 0x40082102, &(0x7f0000000180))
r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_GET_NODES(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r0, 0x510, 0x70bd27, 0x25dfdbff, {}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8044}, 0x80) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x8, 0x4)
timer_gettime(0x0, &(0x7f0000000140))

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x0, 0x401, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 3:
setsockopt$bt_hci_HCI_TIME_STAMP(0xffffffffffffffff, 0x0, 0x3, &(0x7f0000000040)=0x8, 0x4) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cgroups\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000003c0)={'team0\x00', <r2=>0x0}) (async)
clock_gettime(0x0, &(0x7f000000a300)={<r3=>0x0, <r4=>0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/zoneinfo\x00', 0x0, 0x0) (async)
r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), r1)
sendmsg$TIPC_CMD_SET_LINK_TOL(r5, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x68, r6, 0x8, 0x70bd29, 0x25dfdbfc, {{}, {}, {0x4c, 0x18, {0x3518, @link='syz0\x00'}}}, ["", "", "", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4810}, 0x4081) (async)
sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x3c, 0x1402, 0x200, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_NAME={0x9, 0x2, 'syz1\x00'}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}, @RDMA_NLDEV_NET_NS_FD={0x8, 0x44, r0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x4040040) (async)
recvmmsg(r0, &(0x7f000000a180)=[{{&(0x7f0000006980)=@x25, 0x80, &(0x7f0000006a00), 0x0, &(0x7f0000006a40)=""/198, 0xc6}, 0x1}, {{0x0, 0x0, &(0x7f0000006c00)=[{&(0x7f0000006b40)=""/146, 0x92}], 0x1, &(0x7f0000006c40)=""/159, 0x9f}, 0x4}, {{&(0x7f0000006d00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000006f00)=[{&(0x7f0000006d80)=""/248, 0xf8}, {&(0x7f0000006e80)=""/104, 0x68}], 0x2, &(0x7f0000006f40)=""/28, 0x1c}, 0x80000001}, {{&(0x7f0000006f80)=@alg, 0x80, &(0x7f0000007280)=[{&(0x7f0000007000)=""/65, 0x41}, {&(0x7f0000007080)=""/100, 0x64}, {&(0x7f0000007100)=""/211, 0xd3}, {&(0x7f0000007200)=""/24, 0x18}, {&(0x7f0000007240)=""/63, 0x3f}], 0x5, &(0x7f0000007300)=""/199, 0xc7}, 0x3}, {{&(0x7f0000007400)=@alg, 0x80, &(0x7f00000098c0)=[{&(0x7f0000007480)=""/4096, 0x1000}, {&(0x7f0000008480)=""/8, 0x8}, {&(0x7f00000084c0)=""/4096, 0x1000}, {&(0x7f00000094c0)=""/146, 0x92}, {&(0x7f0000009580)=""/212, 0xd4}, {&(0x7f0000009680)=""/68, 0x44}, {&(0x7f0000009700)=""/95, 0x5f}, {&(0x7f0000009780)=""/117, 0x75}, {&(0x7f0000009800)=""/155, 0x9b}], 0x9}, 0x3}, {{&(0x7f0000009980)=@can={0x1d, <r7=>0x0}, 0x80, &(0x7f000000a040)=[{&(0x7f0000009a00)=""/186, 0xba}, {&(0x7f0000009ac0)=""/168, 0xa8}, {&(0x7f0000009b80)=""/210, 0xd2}, {&(0x7f0000009c80)=""/98, 0x62}, {&(0x7f0000009d00)=""/149, 0x95}, {&(0x7f0000009dc0)=""/141, 0x8d}, {&(0x7f0000009e80)=""/15, 0xf}, {&(0x7f0000009ec0)=""/205, 0xcd}, {&(0x7f0000009fc0)=""/74, 0x4a}], 0x9, &(0x7f000000a100)=""/104, 0x68}, 0x7ff}], 0x6, 0x0, &(0x7f000000a340)={r3, r4+10000000}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f000000a640)={'team0\x00', <r8=>0x0}) (async)
recvmmsg(r0, &(0x7f0000012a80)=[{{&(0x7f000000a680)=@in6={0xa, 0x0, 0x0, @private2}, 0x80, &(0x7f000000ba40)=[{&(0x7f000000a700)=""/100, 0x64}, {&(0x7f000000a780)=""/242, 0xf2}, {&(0x7f000000a880)=""/4096, 0x1000}, {&(0x7f000000b880)=""/234, 0xea}, {&(0x7f000000b980)=""/174, 0xae}], 0x5, &(0x7f000000bac0)=""/154, 0x9a}, 0x3}, {{0x0, 0x0, &(0x7f000000bd80)=[{&(0x7f000000bb80)=""/139, 0x8b}, {&(0x7f000000bc40)=""/254, 0xfe}, {&(0x7f000000bd40)=""/18, 0x12}], 0x3, &(0x7f000000bdc0)=""/211, 0xd3}, 0xffff9f17}, {{&(0x7f000000bec0)=@rc={0x1f, @none}, 0x80, &(0x7f000000d180)=[{&(0x7f000000bf40)=""/4096, 0x1000}, {&(0x7f000000cf40)=""/151, 0x97}, {&(0x7f000000d000)=""/164, 0xa4}, {&(0x7f000000d0c0)=""/153, 0x99}], 0x4, &(0x7f000000d1c0)=""/29, 0x1d}}, {{&(0x7f000000d200)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x80, &(0x7f000000d280), 0x0, &(0x7f000000d2c0)=""/190, 0xbe}, 0x1f}, {{&(0x7f000000d380)=@pptp, 0x80, &(0x7f000000e640)=[{&(0x7f000000d400)=""/86, 0x56}, {&(0x7f000000d480)=""/4096, 0x1000}, {&(0x7f000000e480)=""/5, 0x5}, {&(0x7f000000e4c0)=""/92, 0x5c}, {&(0x7f000000e540)=""/42, 0x2a}, {&(0x7f000000e580)=""/156, 0x9c}], 0x6, &(0x7f000000e6c0)=""/83, 0x53}}, {{&(0x7f000000e740)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f000000e9c0)=[{&(0x7f000000e7c0)=""/51, 0x33}, {&(0x7f000000e800)=""/158, 0x9e}, {&(0x7f000000e8c0)=""/244, 0xf4}], 0x3, &(0x7f000000ea00)=""/172, 0xac}, 0x1}, {{&(0x7f000000eac0)=@nfc_llcp, 0x80, &(0x7f00000100c0)=[{&(0x7f000000eb40)=""/216, 0xd8}, {&(0x7f000000ec40)=""/31, 0x1f}, {&(0x7f000000ec80)=""/97, 0x61}, {&(0x7f000000ed00)=""/84, 0x54}, {&(0x7f000000ed80)=""/208, 0xd0}, {&(0x7f000000ee80)=""/130, 0x82}, {&(0x7f000000ef40)=""/4096, 0x1000}, {&(0x7f000000ff40)=""/104, 0x68}, {&(0x7f000000ffc0)=""/11, 0xb}, {&(0x7f0000010000)=""/187, 0xbb}], 0xa, &(0x7f0000010180)=""/213, 0xd5}, 0x4}, {{&(0x7f0000010280)=@pppoe={0x18, 0x0, {0x0, @random}}, 0x80, &(0x7f00000117c0)=[{&(0x7f0000010300)=""/181, 0xb5}, {&(0x7f00000103c0)=""/104, 0x68}, {&(0x7f0000010440)=""/194, 0xc2}, {&(0x7f0000010540)=""/161, 0xa1}, {&(0x7f0000010600)=""/110, 0x6e}, {&(0x7f0000010680)=""/4096, 0x1000}, {&(0x7f0000011680)=""/31, 0x1f}, {&(0x7f00000116c0)=""/198, 0xc6}], 0x8, &(0x7f0000011840)=""/4096, 0x1000}, 0x8060}, {{&(0x7f0000012840)=@xdp={0x2c, 0x0, <r9=>0x0}, 0x80, &(0x7f0000012980)=[{&(0x7f00000128c0)=""/8, 0x8}, {&(0x7f0000012900)=""/123, 0x7b}], 0x2, &(0x7f00000129c0)=""/138, 0x8a}, 0x3}], 0x9, 0x3, &(0x7f0000012cc0)={0x0, 0x3938700}) (async)
getsockname$packet(r0, &(0x7f0000012d00)={0x11, 0x0, <r10=>0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000012d40)=0x14)
sendmsg$TEAM_CMD_NOOP(r1, &(0x7f0000013040)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000013000)={&(0x7f0000012d80)={0x280, 0x0, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r2}, {0x19c, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3070}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r10}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}]}, 0x280}, 0x1, 0x0, 0x0, 0x400c810}, 0x20000800) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, 0x0, 0x40011)

22:10:27 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async, rerun: 64)
r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (rerun: 64)
sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000a00)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000009c0)={&(0x7f0000000a40)={0x94c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_PEERS={0x900, 0x8, 0x0, 0x1, [{0x500, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x4fc, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0x1f}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1b}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x25}}, {0x5, 0x3, 0x3}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x33}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x23}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x27}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x1c}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xc}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}]}, {0xac, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}]}]}, {0x3fc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @remote, 0x6}}, @WGPEER_A_ALLOWEDIPS={0x300, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x3}}]}, {0x4}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010102}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x1}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0xa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}]}, @WGPEER_A_ALLOWEDIPS={0xd0, 0x9, 0x0, 0x1, [{0x58, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2f}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_FLAGS={0x8}]}, 0x94c}, 0x1, 0x0, 0x0, 0x800}, 0x20004010)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 1:
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x486d40, 0x95, 0x10}, 0x18)
unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0)
socket$vsock_stream(0x28, 0x1, 0x0)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x200, 0x4)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1c, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f00000039c0)={0x30, 0x0, 0x920, 0x70bd28, 0x25dfdbff, {}, [@GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_TID={0xc, 0x3, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 1:
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x486d40, 0x95, 0x10}, 0x18)
unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

[  121.514139][   T24] audit: type=1400 audit(1641075027.214:117): avc:  denied  { create } for  pid=15224 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1
22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x200, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x200, 0x4) (async)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}}, 0x8000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 1:
r0 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x486d40, 0x95, 0x10}, 0x18)
unlinkat(r0, &(0x7f0000000080)='./file0\x00', 0x0) (async)
socket$vsock_stream(0x28, 0x1, 0x0)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x200, 0x4)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={0x0}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 3:
socket(0xa, 0x3, 0x3)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x20, 0x4)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="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")

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x2040c0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x2040c0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x2040c0) (async)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

22:10:27 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}}, 0x8000) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
socket(0xa, 0x3, 0x3)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x20, 0x4) (async)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="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")

22:10:27 executing program 3:
socket(0xa, 0x3, 0x3) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x20, 0x4) (async)
ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000000)="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")

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x2040c0)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0)
mmap$binder(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
syz_open_dev$vcsa(&(0x7f0000000200), 0x8, 0x2040c0) (async)
mmap$binder(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x7) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r1, 0x111, 0x4, 0x0, 0x4) (async)
sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, 0x0, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @private=0xa010101}, @GTPA_LINK={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={0x0}, 0x1, 0x0, 0x0, 0x2000004}, 0x40011)

22:10:27 executing program 4:
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r2, 0x0, 0x0) (async)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000180), r0)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r3, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc}]}, 0x20}}, 0x8000) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x7, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2004}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240428d0}, 0x40)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8000)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={0x0}}, 0x40011)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x7, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2004}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240428d0}, 0x40)

22:10:27 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x0, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8000) (async)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'})
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, <r0=>0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x7, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2004}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240428d0}, 0x40)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg0\x00'}) (async)
getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000000c0)=0x14) (async)
sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, 0x0, 0x400, 0x7, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2004}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r0}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x8c}, 0x1, 0x0, 0x0, 0x240428d0}, 0x40) (async)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={0x0}}, 0x0)

22:10:27 executing program 4:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) (async)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={0x0}}, 0x0)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x4, 0x0, 0x0, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x44, r0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x880}, 0x8000) (async)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x1c, 0x0, 0x4, 0x0, 0x0, {}, [@GTPA_LINK={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfefd, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={0x0}}, 0x0)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x0, 0x3f, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 4:
r0 = socket(0x3, 0x5, 0x1)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'team0\x00', <r1=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000027c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'team0\x00', <r3=>0x0})
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003bc0)={'team0\x00', <r4=>0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="4379e3ab2981227b"}, 0x10, 0x0, '\x00', @d})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004000)={&(0x7f0000003c00)={0x3c4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8004}, 0x40)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x4, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3)

22:10:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfefd, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x24000000)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x14, 0x0, 0x4}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 2:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x24, 0x0, 0x0, 0x70bd28, 0x25dfdbff, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000090}, 0x4000080)

22:10:27 executing program 4:
r0 = socket(0x3, 0x5, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'team0\x00', <r1=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000027c0)=0x14) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'team0\x00', <r3=>0x0}) (async, rerun: 32)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003bc0)={'team0\x00', <r4=>0x0}) (async, rerun: 32)
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="4379e3ab2981227b"}, 0x10, 0x0, '\x00', @d})
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004000)={&(0x7f0000003c00)={0x3c4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async, rerun: 64)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (rerun: 64)

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async)

22:10:27 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x4, 0x70bd29, 0x25dfdbfb, {{}, {}, {0x4c, 0x18, {0xfefd, @link='syz1\x00'}}}, [""]}, 0x68}, 0x1, 0x0, 0x0, 0x10}, 0x24000000) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x2000009, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 1:
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
mmap$binder(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x3) (async)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

22:10:27 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x14, 0x0, 0x4}, 0x14}}, 0x4000080)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) (async)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)

22:10:27 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x100, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 4:
r0 = socket(0x3, 0x5, 0x1) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002740)={'team0\x00', <r1=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000002780)={0x11, 0x0, <r2=>0x0, 0x1, 0x0, 0x6, @local}, &(0x7f00000027c0)=0x14)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000002dc0)={'team0\x00', <r3=>0x0}) (async)
ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000003bc0)={'team0\x00', <r4=>0x0})
r5 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r5, 0x0, 0x0) (async, rerun: 32)
ioctl$FS_IOC_ADD_ENCRYPTION_KEY(r5, 0xc0506617, &(0x7f0000000000)={@desc={0x1, 0x0, @auto="4379e3ab2981227b"}, 0x10, 0x0, '\x00', @d}) (async, rerun: 32)
sendmsg$TEAM_CMD_OPTIONS_GET(r0, &(0x7f0000004040)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004000)={&(0x7f0000003c00)={0x3c4, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [{{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7fffffff}}}, {0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x5a}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r2}}}]}}, {{0x8}, {0xb8, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1f}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}]}}, {{0x8, 0x1, r3}, {0x134, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8, 0x6, r4}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}]}}]}, 0x3c4}, 0x1, 0x0, 0x0, 0x8004}, 0x40) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:27 executing program 1:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:27 executing program 0:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f000000b280)={&(0x7f000000b180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f000000b240)={&(0x7f000000b200)={0x14, 0x0, 0x4}, 0x14}}, 0x0)

22:10:27 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0)
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x10080, 0x0) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r0) (async)

22:10:27 executing program 1:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8}) (async)
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:27 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:27 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:27 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2}}, 0x20)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r2}}, 0xc)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, 0x0, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:27 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2}}, 0x20) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

22:10:27 executing program 1:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
clock_gettime(0x0, &(0x7f00000000c0)) (async)
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8}) (async)
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710}) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0) (async)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8}) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)

22:10:27 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400), 0x2}}, 0x20) (async)
r1 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r2=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r2}}, 0xc) (async)
write$RDMA_USER_CM_CMD_LISTEN(r0, &(0x7f0000000000)={0x7, 0x8, 0xfa00, {r2}}, 0x10)

22:10:27 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, 0x0, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:27 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:27 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/cpuinfo\x00', 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r0, 0xc0bc5310, &(0x7f0000000040))

22:10:28 executing program 2:
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, 0x0, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 1:
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:28 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)
pselect6(0x40, &(0x7f0000000300)={0x52b96b91, 0x1, 0x9, 0x3, 0x2, 0x0, 0x5, 0x101}, &(0x7f0000000340)={0xffffffffffff0001, 0x1, 0x7, 0x100000000, 0x8, 0x4, 0x0, 0x8}, &(0x7f0000000380)={0x1ff, 0x8, 0x1, 0x4, 0x0, 0x401, 0xff, 0xc43}, &(0x7f00000003c0), &(0x7f0000000440)={&(0x7f0000000400)={[0x4e69]}, 0x8})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x0, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x22, @tick=0x2, 0x20, {0x9, 0x8}, 0x3, 0x2, 0x2})

22:10:28 executing program 2:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x4, @tick=0x100, 0x80, {0x7f, 0x86}, 0xff, 0x0, 0x20})

22:10:28 executing program 1:
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:28 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})
openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/cgroups\x00', 0x0, 0x0)

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x0, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x22, @tick=0x2, 0x20, {0x9, 0x8}, 0x3, 0x2, 0x2})

22:10:28 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x4, @tick=0x100, 0x80, {0x7f, 0x86}, 0xff, 0x0, 0x20})

22:10:28 executing program 1:
mmap$binder(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:28 executing program 2:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000000)={0x4, @tick=0x100, 0x80, {0x7f, 0x86}, 0xff, 0x0, 0x20})

22:10:28 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x464, 0x3, 0x6, 0x5, 0x200, 0x1f, 0x1, 0x10001}, &(0x7f0000000040)={0x401, 0x0, 0x2, 0x7, 0xc2, 0x2, 0x1f, 0x8ce0}, &(0x7f0000000080)={0xfffffffffffff001, 0x0, 0x533, 0x32f, 0x7f, 0x5, 0x0, 0x9}, &(0x7f0000000100)={r0, r1+10000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x10001]}, 0x8})
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x0, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 1:
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

22:10:28 executing program 2:
clock_gettime(0x0, 0x0)
pselect6(0x40, &(0x7f0000000000)={0x10000}, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000000)={0x22, @tick=0x2, 0x20, {0x9, 0x8}, 0x3, 0x2, 0x2})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 0:
clock_gettime(0x0, &(0x7f00000000c0))
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:28 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8011)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

22:10:28 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

22:10:28 executing program 0:
select(0x40, &(0x7f00000001c0)={0x8, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:28 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8011) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

22:10:28 executing program 0:
select(0x0, 0x0, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:28 executing program 1:
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0) (async)
syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff) (async)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async)

22:10:28 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 4:
r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0)
openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x101000) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r0, 0xc0bc5351, 0x0) (async)

22:10:28 executing program 3:
r0 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async, rerun: 64)
r1 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1) (async, rerun: 64)
sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8011) (async, rerun: 64)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(r0, 0x111, 0x4, 0x0, 0x4)

22:10:28 executing program 0:
select(0x0, 0x0, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:28 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:28 executing program 4:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)

22:10:29 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 1:
sendmsg$NBD_CMD_RECONFIGURE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x300, 0x70bd2b, 0x25dfdbff, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x100}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000080}, 0x80)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
sendmsg$NBD_CMD_DISCONNECT(r0, 0x0, 0x0)
r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000140), 0xffffffffffffffff)
sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x20, r1, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x6}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x8000)

22:10:29 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 4:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)

22:10:29 executing program 0:
select(0x0, 0x0, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x74, 0x9, 0x0, 0x9}}}, [""]}, 0x30}}, 0x1)

22:10:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x74, 0x9, 0x0, 0x9}}}, [""]}, 0x30}}, 0x1)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x74, 0x9, 0x0, 0x9}}}, [""]}, 0x30}}, 0x1) (async)

22:10:29 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x7, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:29 executing program 4:
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, &(0x7f0000000200)={0x13, 0x10, 0xfa00, {&(0x7f0000000000), 0xffffffffffffffff, 0x2}}, 0x18) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)

22:10:29 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x6, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:29 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00'})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0xffff0001, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/26, 0x1a, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x0, 0x1c}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/81, 0x51, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x0, 0x2d}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}, 0x40}], 0x2e, 0x0, &(0x7f00000005c0)="6ebb4fe9dc6b9ac8d7ce92df4ed5883c7b68d469ce1d024882aa93e297cdd348335e6660e4c737172ed514aa861b"})

22:10:29 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x0, 0x0, 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r1, 0x10, 0x70bd2c, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x74, 0x9, 0x0, 0x9}}}, [""]}, 0x30}}, 0x1)

22:10:29 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0))
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00'})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0xffff0001, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x0)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/26, 0x1a, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x0, 0x1c}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/81, 0x51, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x0, 0x2d}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}, 0x40}], 0x2e, 0x0, &(0x7f00000005c0)="6ebb4fe9dc6b9ac8d7ce92df4ed5883c7b68d469ce1d024882aa93e297cdd348335e6660e4c737172ed514aa861b"})
accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800) (async)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00'}) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1) (async)
syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) (async)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0xffff0001, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/26, 0x1a, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x0, 0x1c}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/81, 0x51, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x0, 0x2d}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}, 0x40}], 0x2e, 0x0, &(0x7f00000005c0)="6ebb4fe9dc6b9ac8d7ce92df4ed5883c7b68d469ce1d024882aa93e297cdd348335e6660e4c737172ed514aa861b"}) (async)

22:10:29 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='lock_acquire\x00'}, 0x10)

22:10:29 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x400, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:29 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:29 executing program 1:
r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2711, @host}, 0x10, 0x1800)
ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg2\x00'})
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)
r1 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r1) (async)
r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff)
sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0x8, 0x5, 0xffff0001, 0x3}}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) (async)
ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000600)={0xd4, 0x0, &(0x7f00000004c0)=[@reply={0x40406301, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000180)={@fda={0x66646185, 0x0, 0x0, 0x31}, @flat=@binder={0x73622a85, 0x110b, 0x1}, @ptr={0x70742a85, 0x0, &(0x7f0000000140)=""/26, 0x1a, 0x1, 0x1}}, &(0x7f0000000200)={0x0, 0x20, 0x38}}}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f00000002c0)={@fda={0x66646185, 0xa, 0x1, 0x8}, @ptr={0x70742a85, 0x0, &(0x7f0000000240)=""/84, 0x54, 0x0, 0x1c}, @flat=@handle={0x73682a85, 0x10b, 0x2}}, &(0x7f0000000340)={0x0, 0x20, 0x48}}}, @transaction_sg={0x40486311, {0x3, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000400)={@fda={0x66646185, 0x8, 0x0, 0x15}, @ptr={0x70742a85, 0x1, &(0x7f0000000380)=""/81, 0x51, 0x2, 0x19}, @fda={0x66646185, 0x7, 0x0, 0x2d}}, &(0x7f0000000480)={0x0, 0x20, 0x48}}, 0x40}], 0x2e, 0x0, &(0x7f00000005c0)="6ebb4fe9dc6b9ac8d7ce92df4ed5883c7b68d469ce1d024882aa93e297cdd348335e6660e4c737172ed514aa861b"})

22:10:29 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x40, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:29 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan0\x00'})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x5, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)

22:10:29 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) (async)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='lock_acquire\x00'}, 0x10)

22:10:30 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:30 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:30 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000000)='lock_acquire\x00'}, 0x10)

22:10:30 executing program 1:
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:30 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:30 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan0\x00'}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x5, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)

22:10:30 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={0x0, <r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={0x0, r0+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:30 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:30 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:30 executing program 1:
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)

22:10:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x18, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x49084}, 0x20008005)

22:10:30 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan0\x00'})
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x5, 0x4)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) (async)
ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000000)={'vlan0\x00'}) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x5, 0x4) (async)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
setsockopt$pppl2tp_PPPOL2TP_SO_RECVSEQ(r1, 0x111, 0x2, 0x1, 0x4) (async)

22:10:30 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x18, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x49084}, 0x20008005)

22:10:31 executing program 0:
select(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:31 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:31 executing program 1:
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)

22:10:31 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, 0x0)

22:10:31 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x204000, 0x4)

22:10:31 executing program 4:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x18, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x49084}, 0x20008005)
socket$nl_generic(0x10, 0x3, 0x10) (async)
syz_genetlink_get_family_id$mptcp(&(0x7f000000afc0), r0) (async)
sendmsg$MPTCP_PM_CMD_GET_LIMITS(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x0, 0x18, 0x70bd2b, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x49084}, 0x20008005) (async)

22:10:31 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x3, "3eefb866885d1a97", "c66e1b142fc39f8af9cb4c118ed04c6217990f9fc1c05f2daa3a65cc98a6cb0e", 0x1, 0x1})
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff})
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/174, 0xae}], 0x2, &(0x7f0000000340)=""/137, 0x89}, 0xffffffe0}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/206, 0xce}], 0x5}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001840)=""/160, 0xa0}], 0x1, &(0x7f0000001940)=""/254, 0xfe}, 0x2}, {{&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/5, 0x5}, {&(0x7f0000002b00)=""/35, 0x23}, {&(0x7f0000002b40)=""/158, 0x9e}, {&(0x7f0000002c00)=""/41, 0x29}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/109, 0x6d}, {&(0x7f0000002dc0)=""/204, 0xcc}], 0x9, &(0x7f0000002f80)=""/81, 0x51}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003000)=""/155, 0x9b}, {&(0x7f00000030c0)=""/126, 0x7e}], 0x2, &(0x7f0000003180)}, 0x2}], 0x5, 0x40, 0x0)
r5 = socket(0x15, 0x80000, 0x7)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003300)={<r6=>0xffffffffffffffff})
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003340)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f0000003380)={0xa0, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

22:10:31 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c1}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:31 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, 0x0)

22:10:31 executing program 0:
select(0x40, &(0x7f00000001c0), &(0x7f0000000200)={0x3, 0x4, 0xffff, 0xb88, 0x8, 0x10000, 0x4, 0x237}, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:31 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x204000, 0x4)

22:10:31 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c1}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)

22:10:31 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, 0x0)

[  126.039192][   T24] kauditd_printk_skb: 1 callbacks suppressed
[  126.039205][   T24] audit: type=1400 audit(1641075031.734:119): avc:  denied  { create } for  pid=15692 comm="syz-executor.4" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1
22:10:32 executing program 2:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0, <r1=>0x0})
pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000080)={0x2, 0xa95, 0x0, 0x8, 0x0, 0x3, 0x4}, &(0x7f0000000100)={r0, r1+60000000}, &(0x7f0000000180)={&(0x7f0000000140)={[0x3ff]}, 0x8})

22:10:32 executing program 3:
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) (async)
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x204000, 0x4)

22:10:32 executing program 0:
select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:32 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x3, "3eefb866885d1a97", "c66e1b142fc39f8af9cb4c118ed04c6217990f9fc1c05f2daa3a65cc98a6cb0e", 0x1, 0x1})
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff) (async)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/174, 0xae}], 0x2, &(0x7f0000000340)=""/137, 0x89}, 0xffffffe0}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/206, 0xce}], 0x5}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001840)=""/160, 0xa0}], 0x1, &(0x7f0000001940)=""/254, 0xfe}, 0x2}, {{&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/5, 0x5}, {&(0x7f0000002b00)=""/35, 0x23}, {&(0x7f0000002b40)=""/158, 0x9e}, {&(0x7f0000002c00)=""/41, 0x29}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/109, 0x6d}, {&(0x7f0000002dc0)=""/204, 0xcc}], 0x9, &(0x7f0000002f80)=""/81, 0x51}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003000)=""/155, 0x9b}, {&(0x7f00000030c0)=""/126, 0x7e}], 0x2, &(0x7f0000003180)}, 0x2}], 0x5, 0x40, 0x0)
r5 = socket(0x15, 0x80000, 0x7) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003300)={<r6=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003340)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f0000003380)={0xa0, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

22:10:32 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, &(0x7f0000000180)={0x0})

22:10:32 executing program 1:
r0 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c1}, 0x8000)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269)
openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0) (async)
write$RDMA_USER_CM_CMD_DESTROY_ID(r0, 0x0, 0x0) (async)
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x84, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {}, [@NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xc}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x3f}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x3}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x3}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x9}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x3ff}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r0}, {0x8}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x40c1}, 0x8000) (async)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x269) (async)

22:10:32 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, &(0x7f0000000180)={0x0})

22:10:32 executing program 3:
r0 = socket$nl_generic(0x10, 0x3, 0x10)
ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001800)={'wg1\x00', <r1=>0x0})
getsockname$packet(0xffffffffffffffff, &(0x7f0000001840)={0x11, 0x0, <r2=>0x0}, &(0x7f0000001880)=0x14)
sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000001a00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000019c0)={&(0x7f00000018c0)={0xfc, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r1}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x40}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x5}]}, @MPTCP_PM_ATTR_ADDR={0x54, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0xe}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x1, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x80c0}, 0x24000004)
setsockopt$pppl2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/diskstats\x00', 0x0, 0x0)
r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0)
write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000440)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000400)={<r5=>0xffffffffffffffff}, 0x2}}, 0x20)
write$RDMA_USER_CM_CMD_DISCONNECT(r4, &(0x7f0000000480)={0xa, 0x4, 0xfa00, {r5}}, 0xc)
write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r3, &(0x7f0000000080)={0x10, 0x30, 0xfa00, {&(0x7f0000000040), 0x0, {0xa, 0xc95, 0x6, @empty, 0x7f}, r5}}, 0x38)

22:10:32 executing program 0:
select(0x40, &(0x7f00000001c0), 0x0, &(0x7f0000000240)={0x3, 0x180000000000, 0x1, 0x2, 0x9, 0x4, 0x90, 0x100000000000000}, &(0x7f0000000280)={0x0, 0x2710})

22:10:32 executing program 5:
clock_gettime(0x0, &(0x7f00000000c0)={<r0=>0x0})
pselect6(0x40, &(0x7f0000000000)={0x10000}, &(0x7f0000000040)={0x5}, &(0x7f0000000080)={0x2}, &(0x7f0000000100)={r0, 0x0}, &(0x7f0000000180)={0x0})

22:10:32 executing program 1:
r0 = shmget$private(0x0, 0x2000, 0x4, &(0x7f0000ffb000/0x2000)=nil)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000000)=""/117)
mmap$binder(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x11, 0xffffffffffffffff, 0x1)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0)
bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_ext={0x1c, 0xb, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x7}, [@map_idx={0x18, 0x4, 0x5, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff7, 0x0, 0x0, 0x0, 0x7f}, @generic={0x0, 0x4, 0x9, 0x6, 0x8}]}, &(0x7f0000000180)='GPL\x00', 0x101, 0xd3, &(0x7f00000001c0)=""/211, 0x40f00, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x2, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x1, 0x5, 0x8001, 0x7f}, 0x10, 0x46c2, 0xffffffffffffffff, 0x0, &(0x7f0000000340)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0x1, r1]}, 0x80)
shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000080)=""/115)

22:10:32 executing program 4:
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, 0x0) (async)
ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(0xffffffffffffffff, 0xc0bc5351, &(0x7f0000000000)={0x5, 0x1, 'client1\x00', 0x3, "3eefb866885d1a97", "c66e1b142fc39f8af9cb4c118ed04c6217990f9fc1c05f2daa3a65cc98a6cb0e", 0x1, 0x1}) (async)
r0 = syz_genetlink_get_family_id$nbd(&(0x7f0000000100), 0xffffffffffffffff)
r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0x0, 0x0) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000140)={<r2=>0xffffffffffffffff}) (async)
r3 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000540)='/proc/mdstat\x00', 0x0, 0x0)
write$RDMA_USER_CM_CMD_DESTROY_ID(r3, 0x0, 0x0) (async)
recvmmsg(0xffffffffffffffff, &(0x7f00000031c0)=[{{&(0x7f0000000180)=@tipc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000200)=""/61, 0x3d}, {&(0x7f0000000240)=""/174, 0xae}], 0x2, &(0x7f0000000340)=""/137, 0x89}, 0xffffffe0}, {{&(0x7f0000000400)=@nl, 0x80, &(0x7f00000017c0)=[{&(0x7f0000000480)=""/69, 0x45}, {&(0x7f0000000500)=""/142, 0x8e}, {&(0x7f00000005c0)=""/221, 0xdd}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/206, 0xce}], 0x5}, 0x7fff}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001840)=""/160, 0xa0}], 0x1, &(0x7f0000001940)=""/254, 0xfe}, 0x2}, {{&(0x7f0000001a40)=@pppol2tp={0x18, 0x1, {0x0, <r4=>0xffffffffffffffff, {0x2, 0x0, @broadcast}}}, 0x80, &(0x7f0000002ec0)=[{&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002ac0)=""/5, 0x5}, {&(0x7f0000002b00)=""/35, 0x23}, {&(0x7f0000002b40)=""/158, 0x9e}, {&(0x7f0000002c00)=""/41, 0x29}, {&(0x7f0000002c40)=""/68, 0x44}, {&(0x7f0000002cc0)=""/77, 0x4d}, {&(0x7f0000002d40)=""/109, 0x6d}, {&(0x7f0000002dc0)=""/204, 0xcc}], 0x9, &(0x7f0000002f80)=""/81, 0x51}, 0x80000000}, {{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000003000)=""/155, 0x9b}, {&(0x7f00000030c0)=""/126, 0x7e}], 0x2, &(0x7f0000003180)}, 0x2}], 0x5, 0x40, 0x0)
r5 = socket(0x15, 0x80000, 0x7) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003300)={<r6=>0xffffffffffffffff}) (async)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000003340)={<r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000003480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003440)={&(0x7f0000003380)={0xa0, r0, 0x20, 0x70bd2d, 0x25dfdbfb, {}, [@NBD_ATTR_SOCKETS={0x3c, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8, 0x1, r1}, {0x8, 0x1, r2}, {0x8}, {0x8, 0x1, r3}, {0x8}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x9}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8}, {0x8}, {0x8}, {0x8, 0x1, r4}, {0x8}, {0x8, 0x1, r5}, {0x8, 0x1, r6}, {0x8, 0x1, r7}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x8000}, 0x800)

[  126.897748][   T24] audit: type=1400 audit(1641075032.594:120): avc:  denied  { prog_load } for  pid=15733 comm="syz-executor.1" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1
[  126.917241][   T24] audit: type=1400 audit(1641075032.594:121): avc:  denied  { perfmon } for  pid=15733 comm="syz-executor.1" capability=38  scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1
[  127.593426][ T2128] ==================================================================