Warning: Permanently added '[localhost]:7616' (ECDSA) to the list of known hosts. 2026/01/18 01:58:41 fuzzer started 2026/01/18 01:58:42 dialing manager at localhost:42157 syzkaller login: [ 51.768920] cgroup: Unknown subsys name 'net' [ 51.853710] cgroup: Unknown subsys name 'cpuset' [ 51.872768] cgroup: Unknown subsys name 'rlimit' 2026/01/18 01:58:53 syscalls: 220 2026/01/18 01:58:53 code coverage: enabled 2026/01/18 01:58:53 comparison tracing: enabled 2026/01/18 01:58:53 extra coverage: enabled 2026/01/18 01:58:53 setuid sandbox: enabled 2026/01/18 01:58:53 namespace sandbox: enabled 2026/01/18 01:58:53 Android sandbox: enabled 2026/01/18 01:58:53 fault injection: enabled 2026/01/18 01:58:53 leak checking: enabled 2026/01/18 01:58:53 net packet injection: enabled 2026/01/18 01:58:53 net device setup: enabled 2026/01/18 01:58:53 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2026/01/18 01:58:53 devlink PCI setup: PCI device 0000:00:10.0 is not available 2026/01/18 01:58:53 USB emulation: enabled 2026/01/18 01:58:53 hci packet injection: enabled 2026/01/18 01:58:53 wifi device emulation: enabled 2026/01/18 01:58:53 802.15.4 emulation: enabled 2026/01/18 01:58:53 fetching corpus: 0, signal 0/0 (executing program) 2026/01/18 01:58:55 starting 8 fuzzer processes 01:58:55 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r8 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r7, r8, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r9 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r10 = syz_io_uring_complete(0x0) r11 = getegid() write$P9_RSTATu(r10, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r11, r8}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000380)=0x5) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r12, 0x2, r10, 0x0) r13 = getegid() getgroups(0x3, &(0x7f0000000480)=[r9, r7, r6]) getgroups(0x5, &(0x7f0000000580)=[r5, r6, r13, r14, 0x0]) 01:58:55 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r7) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000a80)) 01:58:55 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"514f86ecb20eda2da9601a9bc02a768e", 0x0, 0x0, {0x4, 0x4}, {0x9}, 0x6, [0x9, 0x4, 0xd987, 0x1, 0x400, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x91, 0x40, 0x73558016, 0x5, 0x1ac0, 0x81, 0x3]}) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a00)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000980)={0x100000, 0x20, 0x8}, &(0x7f00000009c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7fffffff) 01:58:55 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x240, {0x10, 0x0, 0x3}, 0x0, r1, r2, 0xffffffffffffffff, 0x8, 0x8, 0x8, 0x7fff, 0x101, 0x5, 0x2a00000, 0x3, 0x2, 0x0, 0x9, 0xe5, 0x100000001, 0x10001}}, 0xa0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x10, 0x4, 0x2}}, 0x14) write$P9_RLERRORu(r0, &(0x7f00000001c0)={0xd, 0x7, 0x2}, 0xd) r3 = getegid() getgroups(0x8, &(0x7f0000000200)=[r3, r3, r2, r3, 0xee01, r2, r2, r2]) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x4, 0x2}, 0x0, r1, r8, 0xfffffffffffffffa, 0x0, 0x2, 0x9, 0x6, 0x4eea2222, 0x1ff, 0x2, 0x8, 0x9, 0x6, 0x5, 0x0, 0x2}}, 0xa0) setregid(r6, r7) r9 = getpgrp(0x0) r10 = semget(0x0, 0x2, 0x224) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0xee00, r4, r1, r7, 0x104, 0xfff7}, 0x2, 0x6e2f, 0x0, 0x0, 0x0, 0x0, 0x2}) r11 = semget$private(0x0, 0x0, 0x31a) r12 = getuid() r13 = getuid() semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000440)={{0x2, r12, r6, r13, r8, 0x1, 0xffff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf28}) r14 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x20, 0x80, 0x6, 0x0, 0x3ff, 0x8002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x5020, 0x0, 0x0, 0x5, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100000000}, r9, 0x1, r14, 0x2) write$P9_RGETATTR(r0, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x40, {0x80}, 0x1a2, r1, r5, 0x1, 0x9, 0xe00000000000000, 0xe542, 0xfffffffffffff000, 0x4b3, 0x2, 0x8, 0x1, 0x1f, 0x401, 0x957c, 0x5, 0x10000, 0x5}}, 0xa0) [ 63.598446] audit: type=1400 audit(1768701535.163:7): avc: denied { execmem } for pid=273 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=process permissive=1 01:58:55 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000811) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:58:55 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) r8 = syz_io_uring_complete(0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x401, 0x0, 0x3, 0x1}, 0x0) 01:58:55 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) ioctl$CDROMSTART(r4, 0x5308) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000002780)={0x14, 0x11, 0x2, {0x80, 0x4, 0x7}}, 0x14) 01:58:55 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000780)) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f00000007c0)) [ 64.734502] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 64.737651] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 64.740106] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 64.748390] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 64.752726] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 64.789275] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 64.792174] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 64.794580] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 64.801309] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 64.804937] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 64.859348] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 64.866324] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 64.867956] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 64.877803] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 64.902297] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 64.914502] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 64.918993] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 64.921616] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 64.929757] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 64.940342] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.989289] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 65.015167] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 65.025478] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 65.041853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 65.056458] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 65.068971] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 65.074260] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 65.082795] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 65.088297] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 65.090335] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 65.091903] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 65.097325] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 65.127463] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 65.133156] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 65.135079] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 65.145526] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 65.147937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 65.149738] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 65.155393] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 65.157202] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 66.826598] Bluetooth: hci1: command tx timeout [ 66.827078] Bluetooth: hci0: command tx timeout [ 66.955073] Bluetooth: hci3: command tx timeout [ 66.955103] Bluetooth: hci2: command tx timeout [ 67.147092] Bluetooth: hci4: command tx timeout [ 67.211164] Bluetooth: hci5: command tx timeout [ 67.211229] Bluetooth: hci6: command tx timeout [ 67.339158] Bluetooth: hci7: command tx timeout [ 68.874524] Bluetooth: hci0: command tx timeout [ 68.874670] Bluetooth: hci1: command tx timeout [ 69.002549] Bluetooth: hci2: command tx timeout [ 69.002658] Bluetooth: hci3: command tx timeout [ 69.194090] Bluetooth: hci4: command tx timeout [ 69.258092] Bluetooth: hci5: command tx timeout [ 69.258516] Bluetooth: hci6: command tx timeout [ 69.386083] Bluetooth: hci7: command tx timeout [ 70.923119] Bluetooth: hci0: command tx timeout [ 70.924075] Bluetooth: hci1: command tx timeout [ 71.050201] Bluetooth: hci2: command tx timeout [ 71.050455] Bluetooth: hci3: command tx timeout [ 71.242395] Bluetooth: hci4: command tx timeout [ 71.306135] Bluetooth: hci6: command tx timeout [ 71.306265] Bluetooth: hci5: command tx timeout [ 71.436043] Bluetooth: hci7: command tx timeout [ 72.972056] Bluetooth: hci1: command tx timeout [ 72.972302] Bluetooth: hci0: command tx timeout [ 73.098073] Bluetooth: hci3: command tx timeout [ 73.099435] Bluetooth: hci2: command tx timeout [ 73.290949] Bluetooth: hci4: command tx timeout [ 73.354058] Bluetooth: hci6: command tx timeout [ 73.355397] Bluetooth: hci5: command tx timeout [ 73.482123] Bluetooth: hci7: command tx timeout [ 97.471772] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.478058] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.628060] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.628693] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:59:29 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000811) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) [ 98.532593] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.539072] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:59:30 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000811) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) [ 98.743285] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.743911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:59:30 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000001880)={&(0x7f00000017c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001840)={&(0x7f0000001800)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x20000811) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:30 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000001780)={&(0x7f0000001680), 0xc, &(0x7f0000001740)={&(0x7f0000001700)={0x3c, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000000}, 0x800) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:31 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) syz_genetlink_get_family_id$gtp(&(0x7f00000016c0), r0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:31 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) ioctl$MON_IOCX_GET(r0, 0x40189206, &(0x7f0000001640)={&(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @iso}, &(0x7f0000000640)=""/4096, 0x1000}) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:31 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r7) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000a80)) [ 100.054621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.055260] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:59:31 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x2c, 0x0, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}]}, 0x2c}}, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) [ 100.151182] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.151800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.201001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.201620] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.391137] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.391775] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.531786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.532447] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.601841] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.602473] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.754302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.755406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.879736] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.884445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.908568] audit: type=1400 audit(1768701572.472:8): avc: denied { open } for pid=3959 comm="syz-executor.5" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 [ 101.170134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.171167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.213253] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.213927] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.304644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.305040] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 101.305603] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.306198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 01:59:45 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) ioctl$CDROMSTART(r0, 0x5308) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:45 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r8 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r7, r8, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r9 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r10 = syz_io_uring_complete(0x0) r11 = getegid() write$P9_RSTATu(r10, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r11, r8}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000380)=0x5) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r12, 0x2, r10, 0x0) r13 = getegid() getgroups(0x3, &(0x7f0000000480)=[r9, r7, r6]) getgroups(0x5, &(0x7f0000000580)=[r5, r6, r13, r14, 0x0]) 01:59:45 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r7) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000a80)) 01:59:45 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) r8 = syz_io_uring_complete(0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x401, 0x0, 0x3, 0x1}, 0x0) 01:59:45 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"514f86ecb20eda2da9601a9bc02a768e", 0x0, 0x0, {0x4, 0x4}, {0x9}, 0x6, [0x9, 0x4, 0xd987, 0x1, 0x400, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x91, 0x40, 0x73558016, 0x5, 0x1ac0, 0x81, 0x3]}) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a00)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000980)={0x100000, 0x20, 0x8}, &(0x7f00000009c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7fffffff) 01:59:45 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000780)) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f00000007c0)) 01:59:45 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) ioctl$CDROMSTART(r4, 0x5308) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000002780)={0x14, 0x11, 0x2, {0x80, 0x4, 0x7}}, 0x14) 01:59:45 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x240, {0x10, 0x0, 0x3}, 0x0, r1, r2, 0xffffffffffffffff, 0x8, 0x8, 0x8, 0x7fff, 0x101, 0x5, 0x2a00000, 0x3, 0x2, 0x0, 0x9, 0xe5, 0x100000001, 0x10001}}, 0xa0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x10, 0x4, 0x2}}, 0x14) write$P9_RLERRORu(r0, &(0x7f00000001c0)={0xd, 0x7, 0x2}, 0xd) r3 = getegid() getgroups(0x8, &(0x7f0000000200)=[r3, r3, r2, r3, 0xee01, r2, r2, r2]) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x4, 0x2}, 0x0, r1, r8, 0xfffffffffffffffa, 0x0, 0x2, 0x9, 0x6, 0x4eea2222, 0x1ff, 0x2, 0x8, 0x9, 0x6, 0x5, 0x0, 0x2}}, 0xa0) setregid(r6, r7) r9 = getpgrp(0x0) r10 = semget(0x0, 0x2, 0x224) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0xee00, r4, r1, r7, 0x104, 0xfff7}, 0x2, 0x6e2f, 0x0, 0x0, 0x0, 0x0, 0x2}) r11 = semget$private(0x0, 0x0, 0x31a) r12 = getuid() r13 = getuid() semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000440)={{0x2, r12, r6, r13, r8, 0x1, 0xffff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf28}) r14 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x20, 0x80, 0x6, 0x0, 0x3ff, 0x8002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x5020, 0x0, 0x0, 0x5, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100000000}, r9, 0x1, r14, 0x2) write$P9_RGETATTR(r0, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x40, {0x80}, 0x1a2, r1, r5, 0x1, 0x9, 0xe00000000000000, 0xe542, 0xfffffffffffff000, 0x4b3, 0x2, 0x8, 0x1, 0x1f, 0x401, 0x957c, 0x5, 0x10000, 0x5}}, 0xa0) 01:59:46 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x240, {0x10, 0x0, 0x3}, 0x0, r1, r2, 0xffffffffffffffff, 0x8, 0x8, 0x8, 0x7fff, 0x101, 0x5, 0x2a00000, 0x3, 0x2, 0x0, 0x9, 0xe5, 0x100000001, 0x10001}}, 0xa0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x10, 0x4, 0x2}}, 0x14) write$P9_RLERRORu(r0, &(0x7f00000001c0)={0xd, 0x7, 0x2}, 0xd) r3 = getegid() getgroups(0x8, &(0x7f0000000200)=[r3, r3, r2, r3, 0xee01, r2, r2, r2]) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x4, 0x2}, 0x0, r1, r8, 0xfffffffffffffffa, 0x0, 0x2, 0x9, 0x6, 0x4eea2222, 0x1ff, 0x2, 0x8, 0x9, 0x6, 0x5, 0x0, 0x2}}, 0xa0) setregid(r6, r7) r9 = getpgrp(0x0) r10 = semget(0x0, 0x2, 0x224) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0xee00, r4, r1, r7, 0x104, 0xfff7}, 0x2, 0x6e2f, 0x0, 0x0, 0x0, 0x0, 0x2}) r11 = semget$private(0x0, 0x0, 0x31a) r12 = getuid() r13 = getuid() semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000440)={{0x2, r12, r6, r13, r8, 0x1, 0xffff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf28}) r14 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x20, 0x80, 0x6, 0x0, 0x3ff, 0x8002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x5020, 0x0, 0x0, 0x5, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100000000}, r9, 0x1, r14, 0x2) write$P9_RGETATTR(r0, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x40, {0x80}, 0x1a2, r1, r5, 0x1, 0x9, 0xe00000000000000, 0xe542, 0xfffffffffffff000, 0x4b3, 0x2, 0x8, 0x1, 0x1f, 0x401, 0x957c, 0x5, 0x10000, 0x5}}, 0xa0) 01:59:54 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f00000004c0)={{0x218b, 0xfff}, {0x3, 0x4}, 0x6}) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 01:59:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"514f86ecb20eda2da9601a9bc02a768e", 0x0, 0x0, {0x4, 0x4}, {0x9}, 0x6, [0x9, 0x4, 0xd987, 0x1, 0x400, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x91, 0x40, 0x73558016, 0x5, 0x1ac0, 0x81, 0x3]}) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a00)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000980)={0x100000, 0x20, 0x8}, &(0x7f00000009c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7fffffff) 01:59:54 executing program 6: pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) r1 = getuid() r2 = getgid() write$P9_RGETATTR(r0, &(0x7f00000000c0)={0xa0, 0x19, 0x1, {0x240, {0x10, 0x0, 0x3}, 0x0, r1, r2, 0xffffffffffffffff, 0x8, 0x8, 0x8, 0x7fff, 0x101, 0x5, 0x2a00000, 0x3, 0x2, 0x0, 0x9, 0xe5, 0x100000001, 0x10001}}, 0xa0) write$P9_RSYMLINK(r0, &(0x7f0000000180)={0x14, 0x11, 0x2, {0x10, 0x4, 0x2}}, 0x14) write$P9_RLERRORu(r0, &(0x7f00000001c0)={0xd, 0x7, 0x2}, 0xd) r3 = getegid() getgroups(0x8, &(0x7f0000000200)=[r3, r3, r2, r3, 0xee01, r2, r2, r2]) write$P9_RGETATTR(r0, &(0x7f0000000240)={0xa0, 0x19, 0x2, {0x0, {0x20, 0x4, 0x2}, 0x0, r1, r8, 0xfffffffffffffffa, 0x0, 0x2, 0x9, 0x6, 0x4eea2222, 0x1ff, 0x2, 0x8, 0x9, 0x6, 0x5, 0x0, 0x2}}, 0xa0) setregid(r6, r7) r9 = getpgrp(0x0) r10 = semget(0x0, 0x2, 0x224) semctl$IPC_SET(r10, 0x0, 0x1, &(0x7f0000000300)={{0x0, 0xee00, r4, r1, r7, 0x104, 0xfff7}, 0x2, 0x6e2f, 0x0, 0x0, 0x0, 0x0, 0x2}) r11 = semget$private(0x0, 0x0, 0x31a) r12 = getuid() r13 = getuid() semctl$IPC_SET(r11, 0x0, 0x1, &(0x7f0000000440)={{0x2, r12, r6, r13, r8, 0x1, 0xffff}, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf28}) r14 = syz_io_uring_complete(0x0) perf_event_open(&(0x7f0000000500)={0x1, 0x80, 0x8, 0x20, 0x80, 0x6, 0x0, 0x3ff, 0x8002, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x8, 0x0, @perf_bp={&(0x7f00000004c0), 0xb}, 0x5020, 0x0, 0x0, 0x5, 0x6, 0x1, 0x1, 0x0, 0x1, 0x0, 0x100000000}, r9, 0x1, r14, 0x2) write$P9_RGETATTR(r0, &(0x7f0000000580)={0xa0, 0x19, 0x1, {0x40, {0x80}, 0x1a2, r1, r5, 0x1, 0x9, 0xe00000000000000, 0xe542, 0xfffffffffffff000, 0x4b3, 0x2, 0x8, 0x1, 0x1f, 0x401, 0x957c, 0x5, 0x10000, 0x5}}, 0xa0) 01:59:54 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) r8 = syz_io_uring_complete(0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x401, 0x0, 0x3, 0x1}, 0x0) 01:59:54 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) ioctl$CDROMSTART(r4, 0x5308) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000002780)={0x14, 0x11, 0x2, {0x80, 0x4, 0x7}}, 0x14) 01:59:54 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r8 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r7, r8, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r9 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r10 = syz_io_uring_complete(0x0) r11 = getegid() write$P9_RSTATu(r10, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r11, r8}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000380)=0x5) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r12, 0x2, r10, 0x0) r13 = getegid() getgroups(0x3, &(0x7f0000000480)=[r9, r7, r6]) getgroups(0x5, &(0x7f0000000580)=[r5, r6, r13, r14, 0x0]) 01:59:54 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000780)) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f00000007c0)) 01:59:54 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r7) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r6, 0xc0bc5310, &(0x7f0000000a80)) 01:59:54 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r8 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r7, r8, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r9 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r10 = syz_io_uring_complete(0x0) r11 = getegid() write$P9_RSTATu(r10, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r11, r8}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r10, 0x40082404, &(0x7f0000000380)=0x5) r12 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r12, 0x2, r10, 0x0) r13 = getegid() getgroups(0x3, &(0x7f0000000480)=[r9, r7, r6]) getgroups(0x5, &(0x7f0000000580)=[r5, r6, r13, r14, 0x0]) 01:59:54 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r7 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r6, r7, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r8 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r9 = syz_io_uring_complete(0x0) r10 = getegid() write$P9_RSTATu(r9, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r10, r7}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000380)=0x5) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r11, 0x2, r9, 0x0) getegid() getgroups(0x3, &(0x7f0000000480)=[r8, r6, r5]) 01:59:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"514f86ecb20eda2da9601a9bc02a768e", 0x0, 0x0, {0x4, 0x4}, {0x9}, 0x6, [0x9, 0x4, 0xd987, 0x1, 0x400, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x91, 0x40, 0x73558016, 0x5, 0x1ac0, 0x81, 0x3]}) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800)=0x0, &(0x7f0000000840)) syz_io_uring_submit(r8, 0x0, &(0x7f0000000a00)=@IORING_OP_OPENAT2={0x1c, 0x3, 0x0, r6, &(0x7f0000000980)={0x100000, 0x20, 0x8}, &(0x7f00000009c0)='./file0\x00', 0x18, 0x0, 0x23456}, 0x7fffffff) 01:59:54 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000780)) ioctl$CDROM_GET_MCN(r5, 0x5311, &(0x7f00000007c0)) 01:59:54 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) ioctl$CDROMSTART(r4, 0x5308) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000002780)={0x14, 0x11, 0x2, {0x80, 0x4, 0x7}}, 0x14) 01:59:54 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r9, 0x2, r7, 0x0) getegid() 01:59:54 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r7 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r6, r7, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r8 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r9 = syz_io_uring_complete(0x0) r10 = getegid() write$P9_RSTATu(r9, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r10, r7}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000380)=0x5) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r11, 0x2, r9, 0x0) getegid() getgroups(0x3, &(0x7f0000000480)=[r8, r6, r5]) 01:59:54 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) r7 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r7, 0xc0c89425, &(0x7f0000000680)={"514f86ecb20eda2da9601a9bc02a768e", 0x0, 0x0, {0x4, 0x4}, {0x9}, 0x6, [0x9, 0x4, 0xd987, 0x1, 0x400, 0x0, 0x7, 0x7, 0xffffffffffffffff, 0x91, 0x40, 0x73558016, 0x5, 0x1ac0, 0x81, 0x3]}) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:02 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000780)) 02:00:02 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r9, 0x2, r7, 0x0) 02:00:02 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000480), 0x418400, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:02 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) r4 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) ioctl$CDROMSTART(r4, 0x5308) 02:00:02 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$gtp(&(0x7f00000009c0), r7) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:02 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) r8 = syz_io_uring_complete(0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f00000003c0)) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000400)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x3, 0x0, @fd_index=0x9, 0x401, 0x0, 0x3, 0x1}, 0x0) 02:00:02 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r7 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r6, r7, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r8 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r9 = syz_io_uring_complete(0x0) r10 = getegid() write$P9_RSTATu(r9, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r10, r7}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000380)=0x5) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r11, 0x2, r9, 0x0) getegid() getgroups(0x3, &(0x7f0000000480)=[r8, r6, r5]) 02:00:02 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:09 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) ioctl$CDROM_CHANGER_NSLOTS(r5, 0x5328) 02:00:09 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x1) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:09 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r7 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r6, r7, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) r8 = getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r9 = syz_io_uring_complete(0x0) r10 = getegid() write$P9_RSTATu(r9, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r10, r7}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r9, 0x40082404, &(0x7f0000000380)=0x5) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r11, 0x2, r9, 0x0) getegid() getgroups(0x3, &(0x7f0000000480)=[r8, r6, r5]) 02:00:09 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, r7, 0x0) 02:00:09 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000440)) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:09 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) r8 = syz_io_uring_complete(0x0) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(r8, 0x40046210, &(0x7f00000003c0)) 02:00:09 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x28, 0x6, 0xc7a6, &(0x7f0000000a00)) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:09 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000640), 0x40000, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:09 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, r7, 0x0) 02:00:09 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) ioctl$TCXONC(r6, 0x540a, 0x2) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:09 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) getegid() perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, r7, 0x0) 02:00:09 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000740)) 02:00:09 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r9, 0x2, r7, 0x0) getegid() 02:00:09 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$cgroup_pressure(r0, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:09 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) r3 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) ioctl$PTP_PEROUT_REQUEST(r3, 0x40383d03, &(0x7f0000002700)={{0x5}, {0x5, 0x8d3b}, 0x400}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:09 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) ioctl$CDROMPLAYTRKIND(r0, 0x5304, &(0x7f0000000700)={0x6, 0x3f, 0x6, 0x4}) 02:00:09 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) syz_io_uring_complete(0x0) 02:00:09 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x3c, r2, 0x800, 0x70bd25, 0x25dfdbfb, {}, [@GTPA_FLOW={0x6, 0x6, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x4040042) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:10 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r3, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r4, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r4) r6 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r5, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) openat$cgroup_devices(r4, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r2, 0x40089416, &(0x7f0000000600)) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r4}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:10 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, r7, 0x0) 02:00:10 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, r9, 0x2, r7, 0x0) 02:00:17 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:17 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) ioctl$PERF_EVENT_IOC_REFRESH(r3, 0x2402, 0xffffffffffffffc0) 02:00:17 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) ioctl$CDROM_GET_MCN(r0, 0x5311, &(0x7f00000002c0)) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:17 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) ioctl$PERF_EVENT_IOC_PERIOD(r7, 0x40082404, &(0x7f0000000380)=0x5) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:17 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) r6 = syz_io_uring_complete(0x0) syz_genetlink_get_family_id$wireguard(&(0x7f0000000980), r6) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:17 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) openat$ptp0(0xffffffffffffff9c, &(0x7f00000026c0), 0x80240, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:17 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) r7 = getpid() ioctl$BINDER_GET_FROZEN_INFO(r2, 0xc00c620f, &(0x7f0000000380)={r7}) 02:00:17 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) ioctl$CDROMGETSPINDOWN(0xffffffffffffffff, 0x531d, &(0x7f0000000280)) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:17 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000680)={0x2, 0x80, 0x2, 0x4, 0x80, 0x1, 0x0, 0x800, 0x2d500, 0x8, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x3, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80, 0x4, @perf_config_ext={0x4, 0x1}, 0x8, 0x6, 0x1, 0x5, 0xe7e0, 0xf7, 0xfa0c, 0x0, 0x8, 0x0, 0x3ff}) 02:00:17 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:17 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) r2 = openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) ioctl$CDROM_SET_OPTIONS(r2, 0x5320, 0x9) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:17 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) r7 = syz_io_uring_complete(0x0) r8 = getegid() write$P9_RSTATu(r7, &(0x7f0000000300)={0x4f, 0x7d, 0x2, {{0x0, 0x39, 0x6, 0x6, {0x8, 0x4, 0x5}, 0x40000000, 0x3, 0x200, 0xcc16, 0x2, '.\\', 0x1, '\x00', 0x2, '[+', 0x1, '\x00'}, 0x1, ',', r0, r8, r6}}, 0x4f) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:17 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) r4 = perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r5 = syz_io_uring_complete(0x0) perf_event_open$cgroup(&(0x7f0000000540)={0x0, 0x80, 0x1, 0x1, 0x1f, 0x5, 0x0, 0x7fffffff, 0x4000, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000500), 0x5}, 0x400c0, 0x100, 0x7ff, 0x4, 0x400, 0xb34, 0x8, 0x0, 0x7f, 0x0, 0x9}, r5, 0xd, r4, 0x3) write$P9_RREADDIR(r5, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:17 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) r6 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) ioctl$PTP_PIN_GETFUNC(r6, 0xc0603d06, &(0x7f0000000300)={'\x00', 0x80000001, 0x1, 0x1}) getpid() 02:00:17 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4101010}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, r2, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@GTPA_VERSION={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_I_TEI={0x8, 0x8, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x20008040) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:17 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002680), 0x14000, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:25 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:25 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) syz_io_uring_complete(0x0) getegid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:25 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) r4 = syz_io_uring_complete(0x0) write$P9_RREADDIR(r4, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:25 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ff3000/0x4000)=nil, 0x4000, 0x1, 0x11, r1, 0xfffffffffffffffa) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:25 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) r2 = syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) sendmsg$GTP_CMD_GETPDP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbff, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}, @GTPA_VERSION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000840}, 0x4000) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:25 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$ptp0(0xffffffffffffff9c, &(0x7f00000002c0), 0x20000, 0x0) getpid() 02:00:25 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) syz_io_uring_complete(0x0) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:25 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:25 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) openat$binderfs(0xffffffffffffff9c, &(0x7f0000002640)='./binderfs/custom1\x00', 0x0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:25 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) r3 = perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) perf_event_open(&(0x7f00000003c0)={0x4, 0x80, 0x0, 0x0, 0x8d, 0x5, 0x0, 0x5, 0x1000, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x4, 0x2, @perf_bp={&(0x7f0000000380), 0x8}, 0x8120, 0x3, 0x80, 0x2, 0x20, 0x7, 0x9, 0x0, 0x7, 0x0, 0xffffffff9ec62c06}, 0x0, 0x5, r3, 0x8) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:25 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) syz_io_uring_complete(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:25 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:25 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) getpid() 02:00:25 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000080), r0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:25 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:34 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) syz_io_uring_complete(0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:34 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) r1 = perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) perf_event_open(&(0x7f0000000480)={0x5, 0x80, 0x2, 0x3, 0x6, 0x4, 0x0, 0xf4fe, 0x1, 0x4, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x6, 0x0, @perf_bp={&(0x7f0000000440), 0xa}, 0x200, 0x3fd, 0xffffffff, 0x2, 0x1, 0x80, 0x7, 0x0, 0x7fff, 0x0, 0x8}, 0x0, 0xc, r1, 0xa) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:34 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) mmap$IORING_OFF_CQ_RING(&(0x7f0000ff1000/0xf000)=nil, 0xf000, 0x0, 0x1110, 0xffffffffffffffff, 0x8000000) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:34 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:34 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) r0 = syz_io_uring_complete(0x0) openat$cgroup_int(r0, &(0x7f0000000000)='cgroup.clone_children\x00', 0x2, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:34 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000000940), 0x1, 0x0) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:34 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) r4 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) r5 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_REMOVE(r4, 0x4c81, r5) getpid() 02:00:34 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:34 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f0000000340)=0x10000) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:34 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) semctl$IPC_RMID(r4, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:34 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) syz_io_uring_complete(0x0) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:34 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) inotify_rm_watch(r0, 0x0) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:34 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:34 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) getuid() perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:34 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() semctl$GETALL(r4, 0x0, 0xd, &(0x7f0000000240)=""/133) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:34 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getpid() 02:00:42 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280), 0x400, 0x0) getpid() 02:00:42 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) r1 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r1, 0x81f8943c, &(0x7f0000000140)) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:42 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) getgid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:43 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) r0 = inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000002440)) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:43 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:43 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) ioctl$CDROM_GET_MCN(0xffffffffffffffff, 0x5311, &(0x7f0000000900)) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:43 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:43 executing program 7: ioctl$CDROMRESET(0xffffffffffffffff, 0x5312) openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:43 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r1, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:43 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x100) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:43 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) ioctl$PTP_PEROUT_REQUEST2(0xffffffffffffffff, 0x40383d0c, &(0x7f0000000200)={{0x5, 0x1}, {0x6, 0x9}, 0x3}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:43 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) r5 = syz_io_uring_complete(0x0) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r4, 0x30, 0x70bd25, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8, 0x7, r5}]}, 0x44}, 0x1, 0x0, 0x0, 0x20048861}, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:43 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x301000, 0x0) 02:00:43 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) syz_open_dev$tty20(0xc, 0x4, 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:43 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = syz_io_uring_complete(0x0) r3 = ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$LOOP_CTL_ADD(r2, 0x4c80, r3) getpid() 02:00:43 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) inotify_init1(0x800) ioctl$CDROM_CHANGER_NSLOTS(0xffffffffffffffff, 0x5328) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:51 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) r4 = semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) r6 = getuid() semctl$IPC_SET(r4, 0x0, 0x1, &(0x7f0000000180)={{0x3, r0, r5, r6, r3, 0x0, 0x8e}, 0x5, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x5}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:51 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r0, &(0x7f00000008c0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000880)={&(0x7f0000000780)={0xc8, r3, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x6}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @broadcast}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x65}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}, @MPTCP_PM_ATTR_ADDR={0x30, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20008000}, 0x800) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:51 executing program 0: r0 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r1, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:51 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) memfd_create(&(0x7f0000000100)='&\xef{\x0e{\'::\x00', 0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:51 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:51 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) inotify_init1(0x800) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:51 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getpid() 02:00:51 executing program 7: openat$vcs(0xffffffffffffff9c, 0x0, 0x301000, 0x0) 02:00:51 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) getuid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:51 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000000c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:58 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) perf_event_open(&(0x7f0000000040)={0x4, 0x80, 0x76, 0x69, 0x47, 0x80, 0x0, 0x7, 0x4620, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x4, 0x0, @perf_bp, 0x80, 0x1, 0x4, 0x2, 0x0, 0xff, 0x401, 0x0, 0x1f, 0x0, 0x7}, 0x0, 0x7fff, 0xffffffffffffffff, 0x1) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:58 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r2, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) getgroups(0x5, &(0x7f0000000140)=[r2, r1, 0xffffffffffffffff, r1, r3]) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:58 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) syz_io_uring_complete(0x0) getpid() 02:00:58 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000023c0)=[{&(0x7f0000000140)=""/77, 0x4d}, {&(0x7f00000001c0)=""/4096, 0x1000}, {&(0x7f00000011c0)=""/4096, 0x1000}, {&(0x7f00000021c0)=""/121, 0x79}, {&(0x7f0000002240)=""/79, 0x4f}, {&(0x7f00000022c0)=""/224, 0xe0}], 0x6) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:58 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) syz_io_uring_complete(0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:58 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00'}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000740)={'erspan0\x00', &(0x7f00000006c0)={'syztnl1\x00', 0x0, 0x40, 0x1, 0x1ff, 0x10001, {{0x13, 0x4, 0x3, 0x3b, 0x4c, 0x68, 0x0, 0x9, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local, {[@noop, @ssrr={0x89, 0x7, 0x21, [@empty]}, @generic={0x86, 0xa, "15094bbf3f03fdad"}, @ra={0x94, 0x4}, @end, @timestamp={0x44, 0x8, 0xe2, 0x0, 0x9, [0x9]}, @cipso={0x86, 0x18, 0x3, [{0x0, 0xa, "b90cb19332b5db12"}, {0x2, 0x8, "b4db40118e6b"}]}, @end]}}}}}) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:58 executing program 0: getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:58 executing program 7: openat$vcs(0xffffffffffffff9c, 0x0, 0x301000, 0x0) 02:00:58 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f0000000100)={0x1c, 0x0, &(0x7f0000000040)=[@acquire, @acquire_done={0x40106309, 0x3}], 0x52, 0x0, &(0x7f0000000080)="b272c2290b81f09f1032efe516a3ec312300bb46f74ce1943bf033417036a45df8fbbb0a40aebeb0c4f7509a7fe7d783ac58ea08ae44dec6a8521735dd6b3b443873454c74e2b4c0406be3ea511b798e599e"}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:59 executing program 4: ioctl$BINDER_FREEZE(0xffffffffffffffff, 0x400c620e, &(0x7f0000000000)={0x0, 0x1, 0x8}) openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:59 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r1, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:00:59 executing program 5: r0 = syz_io_uring_complete(0x0) ioctl$PERF_EVENT_IOC_REFRESH(r0, 0x2402, 0xdf) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:00:59 executing program 7: openat$vcs(0xffffffffffffff9c, 0x0, 0x301000, 0x0) 02:00:59 executing program 4: openat$cdrom(0xffffffffffffff9c, &(0x7f0000002740), 0x420000, 0x0) 02:00:59 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) getpid() 02:00:59 executing program 0: getuid() perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:00:59 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:00:59 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000680)={'wg1\x00'}) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:00:59 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x420000, 0x0) [ 187.917064] Bluetooth: hci0: command 0x0406 tx timeout [ 187.917626] Bluetooth: hci4: command 0x0406 tx timeout [ 187.918574] Bluetooth: hci1: command 0x0406 tx timeout [ 187.919056] Bluetooth: hci2: command 0x0406 tx timeout [ 187.919113] Bluetooth: hci7: command 0x0406 tx timeout [ 187.919511] Bluetooth: hci6: command 0x0406 tx timeout [ 187.920365] Bluetooth: hci3: command 0x0406 tx timeout [ 187.921002] Bluetooth: hci5: command 0x0406 tx timeout 02:01:08 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x4, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:08 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) getpid() 02:01:08 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:01:08 executing program 5: syz_io_uring_complete(0x0) write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:01:08 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 02:01:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:08 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) syz_genetlink_get_family_id$mptcp(&(0x7f0000000640), r0) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:08 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r1, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) semget(0x1, 0x19bd64da098919fc, 0x400) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:01:08 executing program 6: r0 = getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040)=0x0, &(0x7f0000000080)) semctl$IPC_SET(0x0, 0x0, 0x1, &(0x7f00000000c0)={{0x0, r0, r1, 0x0, 0xffffffffffffffff, 0x40, 0x8}, 0x7f, 0xdd9, 0x0, 0x0, 0x0, 0x0, 0x2}) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:01:08 executing program 5: write$P9_RREADDIR(0xffffffffffffffff, &(0x7f00000005c0)={0xa6, 0x29, 0x1, {0xff, [{{0x20, 0x3, 0x5}, 0xee4, 0x0, 0x7, './file0'}, {{0x0, 0x4, 0x2}, 0x10001, 0x5, 0x7, './file0'}, {{0x80, 0x0, 0x8}, 0x8, 0x9, 0x7, './file0'}, {{0x2, 0x4, 0x4}, 0x1, 0x2, 0x7, './file0'}, {{0x4, 0x1, 0x6}, 0x8, 0x7, 0x7, './file0'}]}}, 0xa6) 02:01:08 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:08 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:08 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:01:08 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 02:01:08 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) getpid() 02:01:08 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x1c, r1, 0x400, 0x70bd25, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84020}, 0xa50f7de269788a6c) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:08 executing program 4: openat$cdrom(0xffffffffffffff9c, 0x0, 0x0, 0x0) 02:01:08 executing program 6: getuid() getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:01:08 executing program 5: write$P9_RREADDIR(0xffffffffffffffff, 0x0, 0x0) 02:01:16 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:16 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:16 executing program 7: openat$vcs(0xffffffffffffff9c, &(0x7f00000018c0), 0x0, 0x0) 02:01:16 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) ioctl$BINDER_ENABLE_ONEWAY_SPAM_DETECTION(0xffffffffffffffff, 0x40046210, &(0x7f0000000200)=0x1) getpid() 02:01:16 executing program 6: getuid() openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:01:16 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:16 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:16 executing program 0: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:16 executing program 6: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) 02:01:16 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:16 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) getpid() 02:01:16 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:17 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:17 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:24 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpid() 02:01:24 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x9, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:24 executing program 6: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 02:01:24 executing program 4: perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) 02:01:24 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x9, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 6: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 02:01:24 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:24 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) 02:01:24 executing program 6: openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 02:01:24 executing program 3: getpid() 02:01:33 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0xff, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:33 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 02:01:33 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) getpid() 02:01:33 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:33 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:33 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:33 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:33 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) getpid() 02:01:33 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) 02:01:33 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:33 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:33 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) getpid() 02:01:41 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:41 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:41 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:41 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), 0xffffffffffffffff) ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:41 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:41 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:41 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:41 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) 02:01:41 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r3, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:41 executing program 1: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:41 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) 02:01:41 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:41 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41011, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:49 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) 02:01:49 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:49 executing program 1: socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:49 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:49 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:49 executing program 3: r0 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0xd8, r0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xfc}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_ADDR={0x44, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @multicast2}}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0xd8}, 0x1, 0x0, 0x0, 0x810}, 0xc800) 02:01:49 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:49 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:49 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) 02:01:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:49 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpid() [ 238.068216] audit: type=1400 audit(1768701709.633:9): avc: denied { kernel } for pid=4718 comm="syz-executor.0" scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=perf_event permissive=1 02:01:49 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) 02:01:49 executing program 1: socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:49 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:58 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:58 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpid() 02:01:58 executing program 1: socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000a40)) 02:01:58 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_devices(r3, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r3}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r3) 02:01:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:58 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:01:58 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) 02:01:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:58 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:01:58 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:01:58 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socket$nl_generic(0x10, 0x3, 0x10) 02:01:58 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) 02:02:06 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:06 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:06 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) getpid() 02:02:06 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(0xffffffffffffffff, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:06 executing program 1: socketpair(0x0, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, r2, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) 02:02:06 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:06 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:06 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:06 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:06 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) 02:02:06 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:06 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:14 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:14 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x74, r1, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}]}, @MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3f}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}]}, 0x74}, 0x1, 0x0, 0x0, 0x10004804}, 0x20000044) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:14 executing program 1: socketpair(0x2c, 0x0, 0x10000, &(0x7f0000000a40)) 02:02:14 executing program 3: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getpid() 02:02:14 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:14 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:14 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:14 executing program 1: socketpair(0x2c, 0x0, 0x10000, &(0x7f0000000a40)) 02:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:14 executing program 3: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getpid() 02:02:14 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r2) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:14 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:14 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:14 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:14 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r1, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:14 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:14 executing program 3: syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) getpid() 02:02:14 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:14 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) [ 263.277380] [ 263.277586] ===================================== [ 263.278019] WARNING: bad unlock balance detected! [ 263.278447] 6.19.0-rc5-next-20260116 #1 Not tainted [ 263.278879] ------------------------------------- [ 263.279291] syz-executor.0/275 is trying to release lock (rcu_read_lock) at: [ 263.279924] [] __wait_on_freeing_inode+0x105/0x350 [ 263.280501] but there are no more locks to release! [ 263.281363] [ 263.281363] other info that might help us debug this: [ 263.282358] 4 locks held by syz-executor.0/275: [ 263.283192] #0: ffff88800f5ae3f8 (sb_writers#3){.+.+}-{0:0}, at: filename_create+0xf7/0x400 [ 263.284585] #1: ffff88801b5af640 (&type->i_mutex_dir_key#3/1){+.+.}-{4:4}, at: filename_create+0x1b1/0x400 [ 263.286074] #2: ffff88800fec2950 (jbd2_handle){++++}-{0:0}, at: start_this_handle+0xe32/0x12d0 [ 263.287387] #3: ffffffff85c16898 (inode_hash_lock){+.+.}-{3:3}, at: insert_inode_locked+0xf9/0x890 [ 263.289109] [ 263.289109] stack backtrace: [ 263.289846] CPU: 1 UID: 0 PID: 275 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 263.289862] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 263.289869] Call Trace: [ 263.289874] [ 263.289878] dump_stack_lvl+0xca/0x120 [ 263.289909] ? __wait_on_freeing_inode+0x105/0x350 [ 263.289924] print_unlock_imbalance_bug+0x118/0x130 [ 263.289939] ? __wait_on_freeing_inode+0x105/0x350 [ 263.289954] lock_release+0x1ee/0x270 [ 263.289969] __wait_on_freeing_inode+0x10a/0x350 [ 263.289985] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 263.290000] ? __pfx_var_wake_function+0x10/0x10 [ 263.290018] ? lock_is_held_type+0x9e/0x120 [ 263.290030] insert_inode_locked+0x25f/0x890 [ 263.290047] __ext4_new_inode+0x223d/0x4cd0 [ 263.290065] ? __pfx___ext4_new_inode+0x10/0x10 [ 263.290079] ? __pfx_avc_has_perm+0x10/0x10 [ 263.290093] ? __pfx___dquot_initialize+0x10/0x10 [ 263.290115] ext4_mkdir+0x331/0xb30 [ 263.290134] ? __pfx_ext4_mkdir+0x10/0x10 [ 263.290150] ? security_inode_permission+0x72/0xe0 [ 263.290164] vfs_mkdir+0x6d8/0xc00 [ 263.290180] filename_mkdirat+0x118/0x430 [ 263.290194] ? __pfx_filename_mkdirat+0x10/0x10 [ 263.290207] ? strncpy_from_user+0x21b/0x2f0 [ 263.290224] __x64_sys_mkdir+0x6e/0xd0 [ 263.290237] do_syscall_64+0xbf/0x420 [ 263.290250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.290263] RIP: 0033:0x7f3934d65c27 [ 263.290272] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.290282] RSP: 002b:00007ffce60956b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 263.290293] RAX: ffffffffffffffda RBX: 00007ffce6095740 RCX: 00007f3934d65c27 [ 263.290301] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffce6095740 [ 263.290308] RBP: 00007ffce609571c R08: 0000000000000000 R09: 0000000000000004 [ 263.290315] R10: 00007ffce6095456 R11: 0000000000000206 R12: 0000000000000032 [ 263.290323] R13: 0000000000040358 R14: 0000000000000001 R15: 00007ffce6095780 [ 263.290333] [ 263.308500] ------------[ cut here ]------------ [ 263.308922] WARNING: kernel/rcu/tree_plugin.h:443 at __rcu_read_unlock+0x25f/0x5c0, CPU#1: syz-executor.0/275 [ 263.309929] Modules linked in: [ 263.310280] CPU: 1 UID: 0 PID: 275 Comm: syz-executor.0 Not tainted 6.19.0-rc5-next-20260116 #1 PREEMPT(lazy) [ 263.311210] Hardware name: QEMU Standard PC (i440FX + PIIX, 1996), BIOS 1.12.0-1 04/01/2014 [ 263.311943] RIP: 0010:__rcu_read_unlock+0x25f/0x5c0 [ 263.312513] Code: f2 02 00 00 c7 43 58 01 00 00 00 bf 09 00 00 00 e8 d6 b7 de ff 4d 85 f6 0f 84 73 fe ff ff e8 38 8a 20 00 fb e9 68 fe ff ff 90 <0f> 0b 90 5b 5d 41 5c 41 5d 41 5e e9 81 4d 74 03 e8 2c 5d 56 00 e9 [ 263.314155] RSP: 0018:ffff88801c12f9e0 EFLAGS: 00010286 [ 263.314629] RAX: 00000000ffffffff RBX: ffff888016fe8000 RCX: ffffffff815660f7 [ 263.315309] RDX: 0000000000000000 RSI: ffffffff81566100 RDI: ffff888016fe83fc [ 263.315949] RBP: ffff888016fe8000 R08: 0000000000000000 R09: fffffbfff0ba7040 [ 263.316631] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888016fe8000 [ 263.317312] R13: 0000000000000001 R14: ffffffff85c0ebe0 R15: ffff88801ddff578 [ 263.317948] FS: 000055559522a400(0000) GS:ffff8880e5442000(0000) knlGS:0000000000000000 [ 263.318709] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 263.319284] CR2: 00007ffce6093e78 CR3: 000000001e97f000 CR4: 0000000000350ef0 [ 263.319925] Call Trace: [ 263.320243] [ 263.320938] __wait_on_freeing_inode+0x10f/0x350 [ 263.321710] ? __pfx___wait_on_freeing_inode+0x10/0x10 [ 263.322886] ? __pfx_var_wake_function+0x10/0x10 [ 263.324286] ? lock_is_held_type+0x9e/0x120 [ 263.325479] insert_inode_locked+0x25f/0x890 [ 263.327263] __ext4_new_inode+0x223d/0x4cd0 [ 263.329932] ? __pfx___ext4_new_inode+0x10/0x10 [ 263.330960] ? __pfx_avc_has_perm+0x10/0x10 [ 263.331660] ? __pfx___dquot_initialize+0x10/0x10 [ 263.333970] ext4_mkdir+0x331/0xb30 [ 263.335948] ? __pfx_ext4_mkdir+0x10/0x10 [ 263.336622] ? security_inode_permission+0x72/0xe0 [ 263.338303] vfs_mkdir+0x6d8/0xc00 [ 263.339693] filename_mkdirat+0x118/0x430 [ 263.340755] ? __pfx_filename_mkdirat+0x10/0x10 [ 263.341564] ? strncpy_from_user+0x21b/0x2f0 [ 263.343484] __x64_sys_mkdir+0x6e/0xd0 [ 263.344171] do_syscall_64+0xbf/0x420 [ 263.346986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.347603] RIP: 0033:0x7f3934d65c27 [ 263.347999] Code: 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 53 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 263.349691] RSP: 002b:00007ffce60956b8 EFLAGS: 00000206 ORIG_RAX: 0000000000000053 [ 263.350417] RAX: ffffffffffffffda RBX: 00007ffce6095740 RCX: 00007f3934d65c27 [ 263.351094] RDX: 0000000000000000 RSI: 00000000000001ff RDI: 00007ffce6095740 [ 263.351734] RBP: 00007ffce609571c R08: 0000000000000000 R09: 0000000000000004 [ 263.352358] R10: 00007ffce6095456 R11: 0000000000000206 R12: 0000000000000032 [ 263.352922] R13: 0000000000040358 R14: 0000000000000001 R15: 00007ffce6095780 [ 263.355654] [ 263.355848] irq event stamp: 313659 [ 263.356194] hardirqs last enabled at (313659): [] _raw_spin_unlock_irqrestore+0x2c/0x50 [ 263.357054] hardirqs last disabled at (313658): [] _raw_spin_lock_irqsave+0x53/0x60 [ 263.357843] softirqs last enabled at (313654): [] kernel_fpu_end+0x59/0x70 [ 263.358634] softirqs last disabled at (313652): [] kernel_fpu_begin_mask+0x1bb/0x300 [ 263.359480] ---[ end trace 0000000000000000 ]--- 02:02:23 executing program 3: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:23 executing program 1: socketpair(0x2c, 0x0, 0x10000, &(0x7f0000000a40)) 02:02:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:23 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:23 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:23 executing program 6: sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x68, 0x0, 0x100, 0x70bd2c, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x34, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xbe}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010102}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x68}}, 0x4000010) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x54, 0x0, 0x100, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x4004880) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x0, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48840) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) socketpair(0x2c, 0x80000, 0x10000, &(0x7f0000000a40)) 02:02:23 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r1, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:23 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:23 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r0, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) 02:02:23 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') 02:02:23 executing program 1: socketpair(0x2c, 0x80000, 0x0, &(0x7f0000000a40)) 02:02:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100), 0x4000) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r1, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:23 executing program 7: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) pipe2$9p(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) write$P9_RXATTRCREATE(r1, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r2, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) openat$cgroup_devices(r2, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r2}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) 02:02:23 executing program 0: perf_event_open$cgroup(&(0x7f00000003c0)={0x0, 0x80, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x450dbf49574c9b2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x2, 0x4, @perf_config_ext={0x7, 0x401}, 0x1000, 0x2, 0x7fffffff, 0x9, 0x7, 0x511, 0x400, 0x0, 0x800, 0x0, 0x7fff}, 0xffffffffffffffff, 0x2, 0xffffffffffffffff, 0x0) 02:02:23 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0), 0x2002, 0x0) perf_event_open$cgroup(&(0x7f0000000040)={0x1, 0x80, 0x0, 0x9, 0x1, 0x1, 0x0, 0x7, 0x20008, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1, 0x1, 0x1, 0x0, 0x6, 0x2, @perf_bp={&(0x7f0000000000), 0x6}, 0x220, 0x59, 0x90000, 0x9, 0x5, 0x2, 0x0, 0x0, 0x1, 0x0, 0x4}, r0, 0x5, 0xffffffffffffffff, 0xd) write$P9_RXATTRCREATE(0xffffffffffffffff, &(0x7f0000000140)={0x7, 0x21, 0x1}, 0x7) syz_open_procfs$namespace(0x0, &(0x7f0000000180)='ns/pid_for_children\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000380)={&(0x7f00000001c0), 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xf4, 0x0, 0x4, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x6}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}]}, 0xf4}, 0x1, 0x0, 0x0, 0xce7871faa9be3a45}, 0x20008004) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f00000003c0), 0x4360565b47200c66, 0x0) openat$cgroup_pressure(r1, &(0x7f0000000400)='memory.pressure\x00', 0x2, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000480), r1) ioctl$LOOP_CTL_GET_FREE(r1, 0x4c82) openat$cgroup_devices(r1, &(0x7f00000005c0)='devices.deny\x00', 0x2, 0x0) syz_io_uring_setup(0x55e4, &(0x7f0000000780)={0x0, 0x825b, 0x20, 0x1, 0x1a8, 0x0, r1}, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000000800), &(0x7f0000000840)) VM DIAGNOSIS: 02:02:15 Registers: info registers vcpu 0 RAX=0000000000000001 RBX=0000000000000001 RCX=ffffffff84d1a2ce RDX=fffffbfff0b82d11 RSI=0000000000000004 RDI=ffffffff85c16880 RBP=ffffffff85c16880 RSP=ffff88800f47fb10 R8 =0000000000000000 R9 =fffffbfff0b82d10 R10=ffffffff85c16883 R11=0000000000000000 R12=1ffff11001e8ff63 R13=0000000000000003 R14=fffffbfff0b82d10 R15=ffff88800f47fb48 RIP=ffffffff84d1a2c1 RFL=00000202 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055557b1d6400 00000000 00000000 GS =0000 ffff8880e5342000 00000000 00000000 LDT=0000 fffffe7c00000000 00000000 00000000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007fe926507000 CR3=000000001eae0000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=0000000000000000696c61766e49002f XMM01=00000000000000000000005f4e49002f XMM02=ffffffffffffffffffffff0f0e0d0c0b XMM03=ffffffffff00007ffc920030706f6f6c XMM04=2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f2f XMM05=0000000400000003000055c1ac118040 XMM06=000055c1ac9a043000000005ffffffff XMM07=00000000000000000000000000000000 XMM08=732f636f72702f006b63616d7300632e XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000 info registers vcpu 1 RAX=000000000000005d RBX=00000000000003f8 RCX=0000000000000000 RDX=00000000000003f8 RSI=ffffffff82975135 RDI=ffffffff889c19e0 RBP=ffffffff889c19a0 RSP=ffff88806cf08938 R8 =0000000000000000 R9 =ffffed10016ef046 R10=000000000000005d R11=6572617764726148 R12=000000000000005d R13=0000000000000010 R14=ffffffff889c19a0 R15=ffffffff82975120 RIP=ffffffff8297518d RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 00000000 00000000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 00000000 00000000 FS =0000 000055559522a400 00000000 00000000 GS =0000 ffff8880e5442000 00000000 00000000 LDT=0000 fffffe3d00000000 00000000 00000000 TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000048000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007ffce6093e78 CR3=000000001e97f000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 XMM00=00000000a60ce07b00000000cec3662e XMM01=000000000000000003515b82db34ca11 XMM02=0000000000000000333bebdfd0a6a21d XMM03=00000000000000000000000000000000 XMM04=000000000000000000000000000000ff XMM05=00000000000000000000000000000000 XMM06=00000000000000000000000000000000 XMM07=00000000000000000000000000000000 XMM08=00000000000000000000000000000000 XMM09=00000000000000000000000000000000 XMM10=00000000000000000000000000000000 XMM11=00000000000000000000000000000000 XMM12=00000000000000000000000000000000 XMM13=00000000000000000000000000000000 XMM14=00000000000000000000000000000000 XMM15=00000000000000000000000000000000