[ 106.989297][ T30] audit: type=1800 audit(1562747617.038:26): pid=12707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="mcstrans" dev="sda1" ino=2457 res=0 [ 107.028329][ T30] audit: type=1800 audit(1562747617.068:27): pid=12707 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="startpar" name="restorecond" dev="sda1" ino=2436 res=0 [....] Starting periodic command scheduler: cron[?25l[?1c7[ ok 8[?25h[?0c. [ 108.198828][T12775] sshd (12775) used greatest stack depth: 53592 bytes left [....] Starting OpenBSD Secure Shell server: sshd[?25l[?1c7[ ok 8[?25h[?0c. [....] startpar: service(s) returned failure: rsyslog ...[?25l[?1c7[FAIL8[?25h[?0c failed! Debian GNU/Linux 7 syzkaller ttyS0 Warning: Permanently added '10.128.0.232' (ECDSA) to the list of known hosts. 2019/07/10 08:33:50 fuzzer started 2019/07/10 08:33:55 dialing manager at 10.128.0.26:35329 2019/07/10 08:33:56 syscalls: 2348 2019/07/10 08:33:56 code coverage: enabled 2019/07/10 08:33:56 comparison tracing: CONFIG_KCOV_ENABLE_COMPARISONS is not enabled 2019/07/10 08:33:56 extra coverage: enabled 2019/07/10 08:33:56 setuid sandbox: enabled 2019/07/10 08:33:56 namespace sandbox: enabled 2019/07/10 08:33:56 Android sandbox: /sys/fs/selinux/policy does not exist 2019/07/10 08:33:56 fault injection: enabled 2019/07/10 08:33:56 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2019/07/10 08:33:56 net packet injection: enabled 2019/07/10 08:33:56 net device setup: enabled 08:34:46 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) syzkaller login: [ 177.132019][T12895] IPVS: ftp: loaded support on port[0] = 21 [ 177.303702][T12895] chnl_net:caif_netlink_parms(): no params data found [ 177.368965][T12895] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.376295][T12895] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.385806][T12895] device bridge_slave_0 entered promiscuous mode [ 177.396301][T12895] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.403587][T12895] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.412845][T12895] device bridge_slave_1 entered promiscuous mode [ 177.450563][T12895] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 177.463291][T12895] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 177.500964][T12895] team0: Port device team_slave_0 added [ 177.511510][T12895] team0: Port device team_slave_1 added [ 177.787453][T12895] device hsr_slave_0 entered promiscuous mode [ 177.922800][T12895] device hsr_slave_1 entered promiscuous mode [ 178.088301][T12895] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.095630][T12895] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.103586][T12895] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.110910][T12895] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.213559][T12895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 178.238270][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 178.249791][ T3335] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.260715][ T3335] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.274788][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 178.296101][T12895] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.315430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 178.326459][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 178.335885][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.343282][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 178.393922][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 178.406148][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 178.415496][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.422811][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 178.431523][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 178.442925][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 178.453197][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 178.463386][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 178.473173][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 178.483528][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 178.493483][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 178.502768][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 178.519677][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 178.530148][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 178.539436][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 178.556537][T12895] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 178.603627][T12895] 8021q: adding VLAN 0 to HW filter on device batadv0 08:34:48 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 08:34:48 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 08:34:49 executing program 0: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/pfkey\x00', 0x0, 0x0) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(r0, 0x400, 0x1) 08:34:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x5}, 0x98) 08:34:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x5}, 0x98) 08:34:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x5}, 0x98) 08:34:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x0, 0x5}, 0x98) 08:34:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff}) 08:34:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff}) 08:34:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff}) 08:34:49 executing program 0: r0 = syz_open_dev$dri(&(0x7f0000000280)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r0, 0xc0106407, &(0x7f0000000000)={0xffffffff, 0x0, 0x1, 0xfdfdffff}) 08:34:49 executing program 0: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpid() rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 08:34:49 executing program 0: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpid() rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 08:34:50 executing program 0: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpid() rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 08:34:50 executing program 0: mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x4) getpid() rt_sigprocmask(0x0, &(0x7f0000000080), &(0x7f00000000c0), 0x8) 08:34:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}], 0x1, 0x0) 08:34:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}], 0x1, 0x0) 08:34:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}], 0x1, 0x0) 08:34:50 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = getpgrp(0x0) getpgrp(0x0) sendmmsg$unix(r0, &(0x7f0000003700)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000880)=[@rights={{0x14, 0x1, 0x1, [r1]}}, @cred={{0x1c, 0x1, 0x2, {r2}}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x50}], 0x1, 0x0) 08:34:50 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @empty}}]}, 0x28}}, 0x0) 08:34:50 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @empty}}]}, 0x28}}, 0x0) 08:34:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @empty}}]}, 0x28}}, 0x0) 08:34:51 executing program 0: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000100)={0x2, 0xc, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x17, 0x0, 0x0, 0x0, @in={0xa, 0x0, @empty}}]}, 0x28}}, 0x0) 08:34:51 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:51 executing program 0: r0 = gettid() capset(&(0x7f0000000400)={0x19980330, r0}, &(0x7f0000000440)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r1, 0x2, 0xffffffff80000000, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) [ 181.545079][T12977] capability: warning: `syz-executor.0' uses 32-bit capabilities (legacy support in use) 08:34:51 executing program 0: r0 = gettid() capset(&(0x7f0000000400)={0x19980330, r0}, &(0x7f0000000440)) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt(r1, 0x2, 0xffffffff80000000, &(0x7f0000000000)=""/118, &(0x7f0000000080)=0x76) 08:34:51 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 181.843065][T12982] IPVS: ftp: loaded support on port[0] = 21 [ 181.868215][T12985] dlm: non-version read from control device 408 08:34:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.052584][T12989] dlm: non-version read from control device 408 [ 182.091287][T12982] chnl_net:caif_netlink_parms(): no params data found [ 182.166888][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.174555][T12982] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.184789][T12982] device bridge_slave_0 entered promiscuous mode [ 182.196384][T12992] dlm: non-version read from control device 408 [ 182.204609][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.213136][T12982] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.222011][T12982] device bridge_slave_1 entered promiscuous mode 08:34:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.277196][T12982] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 182.297705][T12982] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 182.360991][T12995] dlm: non-version read from control device 408 [ 182.380855][T12982] team0: Port device team_slave_0 added 08:34:52 executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.406115][T12982] team0: Port device team_slave_1 added 08:34:52 executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.527765][T12982] device hsr_slave_0 entered promiscuous mode [ 182.563755][T12982] device hsr_slave_1 entered promiscuous mode 08:34:52 executing program 0: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.655331][T12982] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.664165][T12982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.672246][T12982] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.680453][T12982] bridge0: port 1(bridge_slave_0) entered forwarding state 08:34:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:52 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 182.881250][T12982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.918363][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 182.934496][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.954251][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.974907][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 183.016786][T12982] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.048100][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 183.058713][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.066001][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.127801][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 183.138043][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.145322][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.156426][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 183.167027][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 183.197751][T12982] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 183.209393][T12982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.244284][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 183.254113][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 183.263388][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 183.273459][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 183.282979][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 183.294459][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 183.320796][T12982] 8021q: adding VLAN 0 to HW filter on device batadv0 08:34:53 executing program 0: r0 = openat$dlm_control(0xffffffffffffff9c, 0x0, 0x0, 0x0) pread64(r0, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:53 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:53 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:53 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:54 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) 08:34:54 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') 08:34:55 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:55 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x111, 0x7}}, 0x20) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:56 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:56 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:57 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:57 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2}, &(0x7f0000000300)=0x14) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) splice(r3, &(0x7f0000000940), r4, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') splice(r3, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:58 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:58 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: splice(0xffffffffffffffff, &(0x7f0000000940), 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:34:59 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7fffffff, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:34:59 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:34:59 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:00 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:00 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:00 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:00 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:00 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:00 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) [ 190.386078][T13296] IPVS: ftp: loaded support on port[0] = 21 [ 190.685350][T13296] chnl_net:caif_netlink_parms(): no params data found [ 190.751587][T13296] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.758940][T13296] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.767902][T13296] device bridge_slave_0 entered promiscuous mode [ 190.780744][T13296] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.792888][T13296] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.801862][T13296] device bridge_slave_1 entered promiscuous mode [ 190.843241][T13296] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 190.856315][T13296] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 190.894228][T13296] team0: Port device team_slave_0 added [ 190.904597][T13296] team0: Port device team_slave_1 added [ 191.078658][T13296] device hsr_slave_0 entered promiscuous mode [ 191.233863][T13296] device hsr_slave_1 entered promiscuous mode [ 191.501861][T13296] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.509225][T13296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.517265][T13296] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.524573][T13296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.633775][T13296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.664339][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.676723][ T17] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.688400][ T17] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.706965][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.730508][T13296] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.749091][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 191.759310][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.768884][ T17] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.776434][ T17] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.846482][T13296] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 191.857762][T13296] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.875685][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 191.886049][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.895281][ T17] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.902884][ T17] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.912228][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 191.923340][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 191.934022][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 191.944412][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.954367][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 191.964822][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.975040][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 191.984642][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.996825][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 192.007361][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 192.025437][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 192.035251][ T17] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 192.072281][T13296] 8021q: adding VLAN 0 to HW filter on device batadv0 08:35:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:35:02 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:02 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:02 executing program 1: splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:02 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:02 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:35:02 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:35:02 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:35:02 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:02 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) 08:35:03 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) ioctl$KDDISABIO(r5, 0x4b37) 08:35:03 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:03 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) 08:35:03 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) 08:35:03 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:03 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) 08:35:03 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) 08:35:03 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:03 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) 08:35:04 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "b669779fc3d1d1e0b594dd1e31680f22870df1ebd5d106896a617c4bdcc6a183263ab6663f4081efc901d67961ccb73f27933609bb1157a2a037dc7441735c5261cf03a63c7aaf1df46ca6c2e49c0dd4d3f97c6c63e3e7ccc6b81adff7c66f9ae9037ecc8e266a0afe7344758e8bccadf4de3b64f50d6f7349f61abb16258ed46971d2affcf4dde90019f96ba7bd7bfcd919688fafd1e5d10a41834918f5bb22b8972010b618ac73a60456b187061bb65bc0f4d9c75b1dbe439b5619eb2dba9ef6daca960f924575616908abd75a888fde829da55bde42d2f4c52e4793602a294233c0dd5ac4cda1e82e2f678e3d5ca8ce61c6a2ba848b03155eb30a0d1d023d", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) 08:35:04 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") 08:35:04 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:04 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') 08:35:05 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) 08:35:05 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:05 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") 08:35:05 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:35:05 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) 08:35:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) 08:35:05 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:05 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) 08:35:05 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:05 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) 08:35:06 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x111, 0x7}}, 0x20) 08:35:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) 08:35:06 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) 08:35:06 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:06 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740), 0x111, 0x7}}, 0x20) 08:35:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:06 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:06 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:06 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r3, 0x54a3) 08:35:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r6, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2}, &(0x7f0000000300)=0x14) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') 08:35:07 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:07 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) 08:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) sync_file_range(r2, 0x100000001, 0x6, 0x2) 08:35:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) sync_file_range(r1, 0x100000001, 0x6, 0x2) 08:35:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r4 = openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r4, &(0x7f0000000340)=@ll={0x11, 0x0, r5, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) 08:35:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(r1, 0x100000001, 0x6, 0x2) 08:35:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r3, 0x29, 0x0, &(0x7f00000002c0)={@mcast2}, &(0x7f0000000300)=0x14) 08:35:08 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00), &(0x7f0000000c40)=0xc) 08:35:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') openat(r3, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) 08:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:08 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:08 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r2, 0x3}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:09 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:09 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{}, {}]}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:09 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(r1, 0x100000001, 0x6, 0x2) 08:35:09 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') [ 199.406567][T13625] IPVS: ftp: loaded support on port[0] = 21 [ 199.657990][T13625] chnl_net:caif_netlink_parms(): no params data found [ 199.728740][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.736492][T13625] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.745368][T13625] device bridge_slave_0 entered promiscuous mode [ 199.757745][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.765241][T13625] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.775367][T13625] device bridge_slave_1 entered promiscuous mode [ 199.817260][T13625] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 199.831262][T13625] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 199.868253][T13625] team0: Port device team_slave_0 added [ 199.878430][T13625] team0: Port device team_slave_1 added [ 199.959082][T13625] device hsr_slave_0 entered promiscuous mode [ 200.162858][T13625] device hsr_slave_1 entered promiscuous mode [ 200.351466][T13625] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.358991][T13625] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.367150][T13625] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.374544][T13625] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.482315][T13625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.507515][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 200.520422][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.530704][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.549995][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 200.573617][T13625] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.593501][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 200.602673][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.609874][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.656069][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 200.665746][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.673025][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.684032][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 200.718049][T13625] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 200.728855][T13625] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 200.743866][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 200.753574][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 200.763787][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 200.773474][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 200.782800][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 200.792818][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 200.802176][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 200.818750][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 200.862679][T13625] 8021q: adding VLAN 0 to HW filter on device batadv0 08:35:11 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:11 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r1 = openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f00000000c0)=0x7fff, 0x4) r2 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f0000000180)={0x2, &(0x7f0000000140)=[{0x0}, {}]}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f00000001c0)={r3, 0x3}) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') r5 = openat(r4, &(0x7f0000000240)='./file0\x00', 0x0, 0x20) getsockopt$inet6_mreq(r4, 0x29, 0x0, &(0x7f00000002c0)={@mcast2, 0x0}, &(0x7f0000000300)=0x14) connect(r5, &(0x7f0000000340)=@ll={0x11, 0x0, r6, 0x1, 0xad, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x80) ioctl$PPPIOCDISCONN(r0, 0x7439) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000680)={&(0x7f0000000440)={0x204, r7, 0x700, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x74, 0x1, [@TIPC_NLA_BEARER_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000000}]}, @TIPC_NLA_BEARER_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe3a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xfc, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e20, @local}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz0\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x3, 0x5, @mcast2, 0x2}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x3ff, @loopback, 0x4}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @empty}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e21, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}, @TIPC_NLA_LINK={0x50, 0x4, [@TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x40}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_SOCK={0x24, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x956}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x4000) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000700)) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r4, 0x54a3) sync_file_range(r2, 0x100000001, 0x6, 0x2) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000780)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000740)={0xffffffffffffffff}, 0x111, 0x7}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r4, &(0x7f00000007c0)={0x8, 0x120, 0xfa00, {0x4, {0x0, 0x2, "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", 0xd, 0xfffffffffffffc00, 0x4, 0x1ff, 0x3, 0x9, 0x3}, r8}}, 0x128) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000900)) splice(r4, &(0x7f0000000940), r5, &(0x7f0000000980)=0x2c, 0x7fffffff, 0x0) set_thread_area(&(0x7f00000009c0)={0x2, 0x20001000, 0x1000, 0xffff, 0x101, 0x3, 0x1, 0x8, 0x245e, 0x8813}) clone(0x1000000, &(0x7f0000000a00)="91b05808bcc20ef1059556f6a5523fc7bc77e08027938b680c8230cb011689930698f4832b58d8dd1760d2b33af0e75d610cd3dfd312240c72e3ae18d0dbbbbb94f013aeba78876a687c18c57cb939f1d121bea99d591277558c040479cb751a17af2704579564d43282238f2a8b8b8bdda2ac6e184179c676badc965457fa68b65771a77e4badc20a4159aa289f84d2ffd3eaa79f1d6cddc5bdccae351ef115c35746061d4f2a7ab0d40742f2310418c401dd0c09ffcdc29f9ec235360aeb43270c410413b74486", &(0x7f0000000b00), &(0x7f0000000b40), &(0x7f0000000b80)="834c2706870d57825c142882ef06dcbb219a677e00d5269e4be8379d054e991ec2d6f1859fd51c3bcaa40448712da3ab3025384ac3c65b99c0252ba566173adc") ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f0000000bc0)='team0\x00') getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000c00)={0x0}, &(0x7f0000000c40)=0xc) ptrace$getenv(0x4201, r9, 0x5, &(0x7f0000000c80)) ioctl$SG_GET_SCSI_ID(r5, 0x2276, &(0x7f0000000cc0)) ioctl$KVM_GET_SREGS(r4, 0x8138ae83, &(0x7f0000000d00)) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000e40)={0xffffffffffffffff, 0x400, 0x79, 0x2, 0xd6, 0x3}) 08:35:11 executing program 2: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) r1 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(r1, 0x100000001, 0x6, 0x2) 08:35:11 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) write$P9_RFLUSH(r0, &(0x7f0000000080)={0x7, 0x6d, 0x1}, 0x7) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:11 executing program 2: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(r0, 0x100000001, 0x6, 0x2) 08:35:11 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 1: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) openat$cgroup_type(r0, &(0x7f0000000040)='cgroup.type\x00', 0x2, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(r0, 0x100000001, 0x6, 0x2) 08:35:11 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 1: openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x400100, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:11 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sync_file_range(r0, 0x100000001, 0x6, 0x2) 08:35:11 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:11 executing program 1: syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:12 executing program 3: pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:12 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) 08:35:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sync_file_range(r0, 0x100000001, 0x6, 0x2) 08:35:12 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:12 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:12 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) 08:35:12 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:12 executing program 2: r0 = openat$apparmor_thread_current(0xffffffffffffff9c, 0x0, 0x2, 0x0) sync_file_range(r0, 0x100000001, 0x6, 0x2) 08:35:12 executing program 1: syz_open_procfs(0xffffffffffffffff, 0x0) 08:35:12 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:12 executing program 3 (fault-call:0 fault-nth:0): pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:12 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:12 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:12 executing program 1 (fault-call:0 fault-nth:0): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:12 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x40, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000040)=""/158) [ 202.787861][T13724] FAULT_INJECTION: forcing a failure. [ 202.787861][T13724] name failslab, interval 1, probability 0, space 0, times 1 [ 202.801601][T13724] CPU: 0 PID: 13724 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 202.809623][T13724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 202.819729][T13724] Call Trace: [ 202.823106][T13724] dump_stack+0x191/0x1f0 [ 202.827505][T13724] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 202.833466][T13724] should_fail+0xa82/0xaa0 [ 202.837971][T13724] __should_failslab+0x25f/0x280 [ 202.842994][T13724] should_failslab+0x29/0x70 [ 202.847659][T13724] kmem_cache_alloc+0xca/0xa40 [ 202.852518][T13724] ? getname_flags+0x12e/0xb00 [ 202.857400][T13724] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 202.863358][T13724] getname_flags+0x12e/0xb00 [ 202.868551][T13724] ? __msan_poison_alloca+0x1c0/0x270 [ 202.873991][T13724] getname+0x55/0x60 [ 202.878304][T13724] do_sys_open+0x53e/0xa30 [ 202.882812][T13724] __se_sys_open+0xad/0xc0 [ 202.887304][T13724] __x64_sys_open+0x4a/0x70 [ 202.891875][T13724] do_syscall_64+0xbc/0xf0 [ 202.896402][T13724] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 202.902351][T13724] RIP: 0033:0x4136b1 [ 202.906344][T13724] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 202.926032][T13724] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 08:35:13 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x400001, 0x0) ioctl$VIDIOC_G_MODULATOR(r0, 0xc0445636, &(0x7f0000000040)={0x2c5, "ea76b504e60048dd127703dd88abb98bd44c0b42a3e264151a35ac1453f504f6", 0x3b0, 0x4f4d, 0x4, 0x3, 0x4}) 08:35:13 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) [ 202.934499][T13724] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 202.942517][T13724] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 202.950522][T13724] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 202.958621][T13724] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 202.966652][T13724] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:13 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:13 executing program 1 (fault-call:0 fault-nth:1): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:13 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:13 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 203.302854][T13742] FAULT_INJECTION: forcing a failure. [ 203.302854][T13742] name failslab, interval 1, probability 0, space 0, times 0 [ 203.316197][T13742] CPU: 1 PID: 13742 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 203.324233][T13742] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.334351][T13742] Call Trace: [ 203.337747][T13742] dump_stack+0x191/0x1f0 [ 203.342234][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.348223][T13742] should_fail+0xa82/0xaa0 [ 203.352758][T13742] __should_failslab+0x25f/0x280 [ 203.357794][T13742] should_failslab+0x29/0x70 [ 203.362478][T13742] kmem_cache_alloc+0xca/0xa40 [ 203.367342][T13742] ? __alloc_file+0x80/0x690 [ 203.372059][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.378026][T13742] __alloc_file+0x80/0x690 [ 203.382608][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.388586][T13742] alloc_empty_file+0x1f2/0x4a0 [ 203.393519][T13742] path_openat+0xf4/0x6ab0 [ 203.398023][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.403991][T13742] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 203.410134][T13742] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 203.416364][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.422324][T13742] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 203.428469][T13742] ? expand_files+0xa4/0xf00 [ 203.433137][T13742] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.439078][T13742] ? do_filp_open+0x89/0x710 [ 203.443721][T13742] ? do_sys_open+0x642/0xa30 [ 203.448401][T13742] do_filp_open+0x2b8/0x710 [ 203.453007][T13742] do_sys_open+0x642/0xa30 [ 203.457525][T13742] __se_sys_open+0xad/0xc0 [ 203.462530][T13742] __x64_sys_open+0x4a/0x70 [ 203.467083][T13742] do_syscall_64+0xbc/0xf0 [ 203.471579][T13742] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 203.477514][T13742] RIP: 0033:0x4136b1 [ 203.481463][T13742] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 08:35:13 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) [ 203.501126][T13742] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 203.509606][T13742] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 203.517619][T13742] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 203.525628][T13742] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 203.533640][T13742] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 203.541660][T13742] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:13 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') lstat(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000240)=[r2]) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0xb00000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @dev={0xac, 0x14, 0x14, 0x20}}, @FOU_ATTR_PEER_PORT={0x8, 0xa, 0x4e23}, @FOU_ATTR_AF={0x8, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x40) 08:35:13 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:13 executing program 1 (fault-call:0 fault-nth:2): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:13 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:13 executing program 3: [ 203.867308][T13761] FAULT_INJECTION: forcing a failure. [ 203.867308][T13761] name failslab, interval 1, probability 0, space 0, times 0 [ 203.880916][T13761] CPU: 0 PID: 13761 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 203.888944][T13761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 203.899028][T13761] Call Trace: [ 203.902418][T13761] dump_stack+0x191/0x1f0 [ 203.906829][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.912780][T13761] should_fail+0xa82/0xaa0 [ 203.917272][T13761] __should_failslab+0x25f/0x280 [ 203.922269][T13761] should_failslab+0x29/0x70 [ 203.926923][T13761] kmem_cache_alloc+0xca/0xa40 [ 203.931742][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.937691][T13761] ? security_file_alloc+0x98/0x520 [ 203.942955][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.948910][T13761] security_file_alloc+0x98/0x520 [ 203.953992][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.959962][T13761] __alloc_file+0x19c/0x690 [ 203.964547][T13761] alloc_empty_file+0x1f2/0x4a0 [ 203.969483][T13761] path_openat+0xf4/0x6ab0 [ 203.973975][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.980007][T13761] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 203.986154][T13761] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 203.992401][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 203.998448][T13761] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 204.004590][T13761] ? expand_files+0xa4/0xf00 [ 204.009246][T13761] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.015185][T13761] ? do_filp_open+0x89/0x710 [ 204.019821][T13761] ? do_sys_open+0x642/0xa30 [ 204.024468][T13761] do_filp_open+0x2b8/0x710 [ 204.029073][T13761] do_sys_open+0x642/0xa30 [ 204.033580][T13761] __se_sys_open+0xad/0xc0 [ 204.038069][T13761] __x64_sys_open+0x4a/0x70 [ 204.042634][T13761] do_syscall_64+0xbc/0xf0 [ 204.047231][T13761] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.053161][T13761] RIP: 0033:0x4136b1 [ 204.057106][T13761] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 204.077019][T13761] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 204.085486][T13761] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 204.093584][T13761] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 204.101679][T13761] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 204.109689][T13761] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 204.117703][T13761] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:14 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:14 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:14 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:14 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:14 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000080)='/dev/snd/timer\x00', 0x0, 0x10080) fremovexattr(r0, &(0x7f0000000040)=@known='system.advise\x00') 08:35:14 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:14 executing program 1 (fault-call:0 fault-nth:3): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:14 executing program 3: openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x1, 0x0) openat$cgroup_procs(r0, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) pread64(r1, 0x0, 0x9fb, 0xfffffffffffffffe) [ 204.660802][T13786] FAULT_INJECTION: forcing a failure. [ 204.660802][T13786] name failslab, interval 1, probability 0, space 0, times 0 [ 204.674551][T13786] CPU: 1 PID: 13786 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 204.682590][T13786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 204.692713][T13786] Call Trace: [ 204.696086][T13786] dump_stack+0x191/0x1f0 [ 204.700498][T13786] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.706474][T13786] should_fail+0xa82/0xaa0 [ 204.710985][T13786] __should_failslab+0x25f/0x280 [ 204.716106][T13786] should_failslab+0x29/0x70 [ 204.720772][T13786] kmem_cache_alloc_trace+0xf7/0xa50 [ 204.726144][T13786] ? proc_thread_self_get_link+0x1e5/0x400 [ 204.732026][T13786] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.738003][T13786] proc_thread_self_get_link+0x1e5/0x400 [ 204.743721][T13786] ? proc_setup_thread_self+0x5e0/0x5e0 [ 204.749328][T13786] link_path_walk+0x1331/0x2170 [ 204.754268][T13786] ? proc_setup_thread_self+0x5e0/0x5e0 [ 204.759906][T13786] path_openat+0x275/0x6ab0 [ 204.764512][T13786] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.770485][T13786] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 204.776617][T13786] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 204.782843][T13786] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.788824][T13786] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 204.794961][T13786] ? expand_files+0xa4/0xf00 [ 204.799628][T13786] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 204.805663][T13786] ? do_filp_open+0x89/0x710 [ 204.810312][T13786] ? do_sys_open+0x642/0xa30 [ 204.814998][T13786] do_filp_open+0x2b8/0x710 [ 204.819615][T13786] do_sys_open+0x642/0xa30 [ 204.824121][T13786] __se_sys_open+0xad/0xc0 [ 204.828627][T13786] __x64_sys_open+0x4a/0x70 [ 204.833217][T13786] do_syscall_64+0xbc/0xf0 [ 204.837710][T13786] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 204.843651][T13786] RIP: 0033:0x4136b1 [ 204.847636][T13786] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 204.867315][T13786] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 204.875799][T13786] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 204.883826][T13786] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 204.891872][T13786] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 204.899920][T13786] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 204.907964][T13786] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:15 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:15 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:15 executing program 3: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x200000, 0x0) ioctl$KVM_SET_GSI_ROUTING(r0, 0x4008ae6a, &(0x7f0000000080)={0x6, 0x0, [{0xb2a0, 0x2, 0x0, 0x0, @irqchip={0x6514, 0xc15}}, {0xffffffffffff0001, 0x3, 0x0, 0x0, @sint={0x3, 0x101}}, {0x3ff, 0x1, 0x0, 0x0, @msi={0x1, 0x100, 0x9}}, {0x4, 0x2, 0x0, 0x0, @msi={0xff, 0x8, 0x2}}, {0xfffffffffffffffb, 0x2, 0x0, 0x0, @sint={0xb6, 0x3}}, {0x67d, 0x4, 0x0, 0x0, @sint={0x6, 0x101}}]}) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x80, 0x0) pread64(r1, 0x0, 0xfffffeb3, 0x0) 08:35:15 executing program 1 (fault-call:0 fault-nth:4): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') [ 205.295624][T13806] FAULT_INJECTION: forcing a failure. [ 205.295624][T13806] name failslab, interval 1, probability 0, space 0, times 0 [ 205.308526][T13806] CPU: 0 PID: 13806 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 205.323249][T13806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 205.333344][T13806] Call Trace: [ 205.336733][T13806] dump_stack+0x191/0x1f0 [ 205.341650][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.347614][T13806] should_fail+0xa82/0xaa0 [ 205.352138][T13806] __should_failslab+0x25f/0x280 [ 205.357236][T13806] should_failslab+0x29/0x70 [ 205.361914][T13806] kmem_cache_alloc+0xca/0xa40 [ 205.366750][T13806] ? __d_alloc+0x8e/0xc40 [ 205.371162][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.377246][T13806] __d_alloc+0x8e/0xc40 [ 205.381471][T13806] ? __x64_sys_open+0x4a/0x70 [ 205.386229][T13806] ? do_syscall_64+0xbc/0xf0 [ 205.390903][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.396921][T13806] d_alloc_parallel+0x135/0x2220 [ 205.401919][T13806] ? __d_lookup+0x828/0x960 [ 205.406493][T13806] ? kmsan_internal_unpoison_shadow+0x2f/0x40 [ 205.412643][T13806] ? __msan_poison_alloca+0x1c0/0x270 [ 205.418101][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.424075][T13806] ? walk_component+0x34c/0xba0 [ 205.429008][T13806] __lookup_slow+0x18f/0x760 [ 205.433702][T13806] walk_component+0x34c/0xba0 [ 205.438464][T13806] link_path_walk+0xa8e/0x2170 [ 205.443291][T13806] ? proc_setup_thread_self+0x5e0/0x5e0 [ 205.448919][T13806] path_openat+0x275/0x6ab0 [ 205.453517][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.459466][T13806] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 205.465616][T13806] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 205.472016][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.477991][T13806] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 205.484212][T13806] ? expand_files+0xa4/0xf00 [ 205.488871][T13806] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 205.494816][T13806] ? do_filp_open+0x89/0x710 [ 205.499458][T13806] ? do_sys_open+0x642/0xa30 [ 205.504111][T13806] do_filp_open+0x2b8/0x710 [ 205.508700][T13806] ? noop_direct_IO+0x40/0x40 [ 205.513469][T13806] do_sys_open+0x642/0xa30 [ 205.518660][T13806] __se_sys_open+0xad/0xc0 [ 205.523154][T13806] __x64_sys_open+0x4a/0x70 [ 205.527710][T13806] do_syscall_64+0xbc/0xf0 [ 205.532196][T13806] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 205.538147][T13806] RIP: 0033:0x4136b1 [ 205.542099][T13806] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 205.561753][T13806] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 205.570228][T13806] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 205.578261][T13806] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 205.586293][T13806] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 08:35:15 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:15 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) ioctl$ASHMEM_SET_NAME(r0, 0x41007701, &(0x7f0000000100)='/proc/self/net/pfkey\x00') setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="822235e1cc40a1b62cad00fbaceb5a743da2178c3fc8d518d7d982990bd6b35e8e8085669cc4ded621b0b7a22905088a6499f9d8319e5a2f45755c6d5a68c86b4a4ac467fec9ce98f1ac1d6cfcbc3b831982e16f14f6de072c4439dbb377e0954886374d9fcb28d0829173d27e63b0b641a414aa001706dc7890a61b1097fcce3d78541be44a0c92062f8a9aae427d42362551cb15297c4e49a6f52f97", 0x9d) socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0xe67, {{0xa, 0x4e23, 0x7fff, @remote, 0x2}}, {{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0x12}, 0x8000}}}, 0x108) [ 205.594322][T13806] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 205.602354][T13806] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:15 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:15 executing program 3: socket$inet6(0xa, 0x0, 0x7) ioctl$TUNGETDEVNETNS(0xffffffffffffff9c, 0x54e3, 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x22000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x10, r0, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x80000, 0x144) pread64(r1, 0x0, 0x81b0bbee7f44826a, 0x0) 08:35:15 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:16 executing program 1 (fault-call:0 fault-nth:5): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') [ 206.071685][T13835] FAULT_INJECTION: forcing a failure. [ 206.071685][T13835] name failslab, interval 1, probability 0, space 0, times 0 [ 206.084462][T13835] CPU: 0 PID: 13835 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 206.092486][T13835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.102582][T13835] Call Trace: [ 206.105950][T13835] dump_stack+0x191/0x1f0 [ 206.110353][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.116323][T13835] should_fail+0xa82/0xaa0 [ 206.120847][T13835] __should_failslab+0x25f/0x280 [ 206.125864][T13835] should_failslab+0x29/0x70 [ 206.130535][T13835] kmem_cache_alloc+0xca/0xa40 [ 206.135370][T13835] ? proc_alloc_inode+0x5d/0x1b0 [ 206.140421][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.146378][T13835] proc_alloc_inode+0x5d/0x1b0 [ 206.151199][T13835] ? init_once+0x50/0x50 [ 206.155517][T13835] new_inode_pseudo+0xb1/0x590 [ 206.160354][T13835] new_inode+0x5a/0x3d0 [ 206.164615][T13835] proc_pid_make_inode+0x71/0x890 [ 206.169703][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.175672][T13835] proc_pident_instantiate+0xf8/0x4e0 [ 206.181103][T13835] ? bcmp+0xb3/0x180 [ 206.185324][T13835] proc_tid_base_lookup+0x294/0x3a0 [ 206.190594][T13835] ? proc_task_instantiate+0x310/0x310 [ 206.196102][T13835] __lookup_slow+0x58f/0x760 [ 206.200876][T13835] walk_component+0x34c/0xba0 [ 206.206119][T13835] link_path_walk+0xa8e/0x2170 [ 206.210944][T13835] ? proc_setup_thread_self+0x5e0/0x5e0 [ 206.216665][T13835] path_openat+0x275/0x6ab0 [ 206.221250][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.227216][T13835] ? kmsan_internal_memset_shadow+0x104/0x3a0 [ 206.233344][T13835] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 206.239583][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.245554][T13835] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 206.251674][T13835] ? expand_files+0xa4/0xf00 [ 206.256333][T13835] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.262278][T13835] ? do_filp_open+0x89/0x710 [ 206.266918][T13835] ? do_sys_open+0x642/0xa30 [ 206.271650][T13835] do_filp_open+0x2b8/0x710 [ 206.276839][T13835] ? noop_direct_IO+0x40/0x40 [ 206.281586][T13835] do_sys_open+0x642/0xa30 [ 206.286081][T13835] __se_sys_open+0xad/0xc0 [ 206.290561][T13835] __x64_sys_open+0x4a/0x70 [ 206.295117][T13835] do_syscall_64+0xbc/0xf0 [ 206.299702][T13835] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.305647][T13835] RIP: 0033:0x4136b1 [ 206.309598][T13835] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 206.329270][T13835] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 206.337749][T13835] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 206.345765][T13835] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 206.353785][T13835] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 206.361798][T13835] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 08:35:16 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) [ 206.369811][T13835] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:16 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2c000, 0x0) ioctl$sock_inet_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000040)) 08:35:16 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:16 executing program 1 (fault-call:0 fault-nth:6): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:16 executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) listen(r0, 0x100000000) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) 08:35:16 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 206.745427][T13849] FAULT_INJECTION: forcing a failure. [ 206.745427][T13849] name failslab, interval 1, probability 0, space 0, times 0 [ 206.758300][T13849] CPU: 0 PID: 13849 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 206.766455][T13849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 206.777418][T13849] Call Trace: [ 206.780800][T13849] dump_stack+0x191/0x1f0 [ 206.785205][T13849] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.791169][T13849] should_fail+0xa82/0xaa0 [ 206.795678][T13849] __should_failslab+0x25f/0x280 [ 206.800775][T13849] should_failslab+0x29/0x70 [ 206.805450][T13849] kmem_cache_alloc+0xca/0xa40 [ 206.810282][T13849] ? __d_alloc+0x8e/0xc40 [ 206.814691][T13849] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 206.820955][T13849] ? step_into+0x61c/0x1c00 [ 206.825549][T13849] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.831516][T13849] __d_alloc+0x8e/0xc40 [ 206.835752][T13849] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.841716][T13849] d_alloc_parallel+0x135/0x2220 [ 206.846728][T13849] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 206.852858][T13849] ? __d_lookup+0x828/0x960 [ 206.857535][T13849] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.863521][T13849] path_openat+0x2795/0x6ab0 [ 206.868252][T13849] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 206.874215][T13849] do_filp_open+0x2b8/0x710 [ 206.878807][T13849] ? noop_direct_IO+0x40/0x40 [ 206.883568][T13849] do_sys_open+0x642/0xa30 [ 206.888073][T13849] __se_sys_open+0xad/0xc0 [ 206.892566][T13849] __x64_sys_open+0x4a/0x70 [ 206.897135][T13849] do_syscall_64+0xbc/0xf0 [ 206.901638][T13849] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 206.907576][T13849] RIP: 0033:0x4136b1 [ 206.911534][T13849] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 206.931282][T13849] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 08:35:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) [ 206.939782][T13849] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 206.947810][T13849] RDX: 00007f303d9cfbe9 RSI: 0000000000000002 RDI: 00007f303d9cfbd0 [ 206.955841][T13849] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 206.963881][T13849] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 206.971915][T13849] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:17 executing program 3: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x5, 0x40) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f0000000040)={0x5, 0x8, 0x6, 0x80800, 0xffffffffffffff9c}) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x8000, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r0, 0xc0385720, &(0x7f0000000140)={0x1, {r1, r2+10000000}, 0x5, 0x100}) socket$isdn_base(0x22, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) r3 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x600000, 0x2) pread64(r3, 0x0, 0xffffffffffffff2c, 0x2000100000) 08:35:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:17 executing program 1 (fault-call:0 fault-nth:7): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:17 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000080)='/dev/bus/usb/00#/00#\x00', 0xf5e, 0x800) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r0, 0x40045730, &(0x7f00000000c0)=0x200) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) fcntl$addseals(r1, 0x409, 0x0) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000040)=0x8001000) 08:35:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:17 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pread64(r0, &(0x7f0000000000)=""/175, 0xffffffdc, 0xfffffffffffffffe) 08:35:17 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:17 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 207.723814][T13879] FAULT_INJECTION: forcing a failure. [ 207.723814][T13879] name failslab, interval 1, probability 0, space 0, times 0 [ 207.736659][T13879] CPU: 1 PID: 13879 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 207.744684][T13879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 207.754782][T13879] Call Trace: [ 207.758149][T13879] dump_stack+0x191/0x1f0 [ 207.763415][T13879] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 207.769605][T13879] should_fail+0xa82/0xaa0 [ 207.774110][T13879] __should_failslab+0x25f/0x280 [ 207.779142][T13879] should_failslab+0x29/0x70 [ 207.783812][T13879] kmem_cache_alloc+0xca/0xa40 [ 207.788645][T13879] ? getname_flags+0x12e/0xb00 [ 207.793494][T13879] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 207.799452][T13879] getname_flags+0x12e/0xb00 [ 207.804107][T13879] ? __msan_poison_alloca+0x1c0/0x270 [ 207.809555][T13879] getname+0x55/0x60 [ 207.813857][T13879] do_sys_open+0x53e/0xa30 [ 207.818389][T13879] __se_sys_open+0xad/0xc0 [ 207.822872][T13879] __x64_sys_open+0x4a/0x70 [ 207.827435][T13879] do_syscall_64+0xbc/0xf0 [ 207.831940][T13879] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 207.837971][T13879] RIP: 0033:0x4136b1 [ 207.841931][T13879] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 207.861594][T13879] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 207.870063][T13879] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 207.878075][T13879] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f303d9cfbd0 [ 207.886088][T13879] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 207.894099][T13879] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 207.902107][T13879] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:18 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x38a, 0x0) 08:35:18 executing program 1 (fault-call:0 fault-nth:8): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:18 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:18 executing program 3: r0 = eventfd2(0x3, 0x80800) pread64(r0, 0x0, 0x3, 0x0) 08:35:18 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) [ 208.300852][T13909] FAULT_INJECTION: forcing a failure. [ 208.300852][T13909] name failslab, interval 1, probability 0, space 0, times 0 [ 208.313891][T13909] CPU: 0 PID: 13909 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 208.321919][T13909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 208.332038][T13909] Call Trace: [ 208.335414][T13909] dump_stack+0x191/0x1f0 [ 208.339813][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.345793][T13909] should_fail+0xa82/0xaa0 [ 208.350304][T13909] __should_failslab+0x25f/0x280 [ 208.355318][T13909] should_failslab+0x29/0x70 [ 208.359977][T13909] kmem_cache_alloc+0xca/0xa40 [ 208.364798][T13909] ? __alloc_file+0x80/0x690 [ 208.369490][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.375457][T13909] __alloc_file+0x80/0x690 [ 208.379940][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.385905][T13909] alloc_empty_file+0x1f2/0x4a0 [ 208.390832][T13909] path_openat+0xf4/0x6ab0 [ 208.395326][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.401292][T13909] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 208.407507][T13909] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 208.413651][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.419636][T13909] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 208.425777][T13909] ? expand_files+0xa4/0xf00 [ 208.430453][T13909] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 208.436406][T13909] ? do_filp_open+0x89/0x710 [ 208.441353][T13909] ? do_sys_open+0x642/0xa30 [ 208.446025][T13909] do_filp_open+0x2b8/0x710 [ 208.451372][T13909] do_sys_open+0x642/0xa30 [ 208.455929][T13909] __se_sys_open+0xad/0xc0 [ 208.460471][T13909] __x64_sys_open+0x4a/0x70 [ 208.465059][T13909] do_syscall_64+0xbc/0xf0 [ 208.469745][T13909] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 208.475696][T13909] RIP: 0033:0x4136b1 [ 208.479659][T13909] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 08:35:18 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:18 executing program 3: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0xc0680, 0x0) write(r0, &(0x7f0000000100)="1e1c63d62e76dd6a80548500431daa3d6494139b3c77d2a7aacd364edffc31b9a496e0b23ae0fa08a914d39702e981db47bc2400710fbc8112871f1bd7aa32a58de7373e04398cff7f24d4e32b6767a2ff3ac5dbe08b607615dc4c2bec12c0c804dde950dd749d6ced61232f5dff895bdbd147544b36feeb254a78266844b4e03f13af7cb807d8a56aae12a256da7e8550a7f2bdd1d654c32fe9673aa14cd9a9adb809d4071f580e72adf48dcaf0f4536b54f9b599c5", 0xb6) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3, 0x80000) ioctl$sock_inet_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f0000000040)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000001c0)={0x0, 0x3f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000240)={r2, 0x2f2d}, &(0x7f0000000280)=0x8) ioctl$KVM_GET_API_VERSION(r1, 0xae00, 0x0) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000080)) [ 208.499501][T13909] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 208.509305][T13909] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 208.517381][T13909] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f303d9cfbd0 [ 208.526113][T13909] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 208.534143][T13909] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 208.542274][T13909] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:18 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:18 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x3c, 0x0) 08:35:18 executing program 1 (fault-call:0 fault-nth:9): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:18 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = eventfd(0xfffffffffffffffa) fcntl$setflags(r0, 0x2, 0x1) 08:35:18 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:19 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7e8, 0x201c0) write$tun(r0, &(0x7f0000000040)={@void, @void, @llc={@llc={0xfe, 0xf4, "4ef5", "0b69eee851c9414b44fa25bedceaccbafc6e3eb818e9ddd9114fb3665c8ed3feb1a6a381e7"}}}, 0x29) 08:35:19 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:19 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 209.166273][T13945] FAULT_INJECTION: forcing a failure. [ 209.166273][T13945] name failslab, interval 1, probability 0, space 0, times 0 [ 209.184201][T13945] CPU: 1 PID: 13945 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 209.192416][T13945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.202519][T13945] Call Trace: [ 209.206323][T13945] dump_stack+0x191/0x1f0 [ 209.210734][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.216704][T13945] should_fail+0xa82/0xaa0 [ 209.221250][T13945] __should_failslab+0x25f/0x280 [ 209.226290][T13945] should_failslab+0x29/0x70 [ 209.238370][T13945] kmem_cache_alloc+0xca/0xa40 [ 209.243242][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.249193][T13945] ? security_file_alloc+0x98/0x520 [ 209.254497][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.261363][T13945] security_file_alloc+0x98/0x520 [ 209.266460][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.272464][T13945] __alloc_file+0x19c/0x690 [ 209.277037][T13945] alloc_empty_file+0x1f2/0x4a0 [ 209.281961][T13945] path_openat+0xf4/0x6ab0 [ 209.286470][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.292436][T13945] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 209.298654][T13945] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 209.304789][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.311172][T13945] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 209.317917][T13945] ? expand_files+0xa4/0xf00 [ 209.322588][T13945] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.328555][T13945] ? do_filp_open+0x89/0x710 [ 209.333202][T13945] ? do_sys_open+0x642/0xa30 [ 209.337853][T13945] do_filp_open+0x2b8/0x710 [ 209.342475][T13945] do_sys_open+0x642/0xa30 [ 209.346979][T13945] __se_sys_open+0xad/0xc0 [ 209.351455][T13945] __x64_sys_open+0x4a/0x70 [ 209.356023][T13945] do_syscall_64+0xbc/0xf0 [ 209.361215][T13945] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 209.367150][T13945] RIP: 0033:0x4136b1 [ 209.371118][T13945] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 209.391057][T13945] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 209.399553][T13945] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 209.407586][T13945] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f303d9cfbd0 08:35:19 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x80000, 0x0) ioctl$PPPIOCGMRU(r0, 0x80047453, &(0x7f0000000040)) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x20, 0x7ffffffb, 0x0, 0x2f}) [ 209.415675][T13945] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 209.430067][T13945] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 209.438268][T13945] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:19 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:19 executing program 1 (fault-call:0 fault-nth:10): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:19 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:19 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000040)=[@sack_perm], 0x1) [ 209.788627][T13961] FAULT_INJECTION: forcing a failure. [ 209.788627][T13961] name failslab, interval 1, probability 0, space 0, times 0 [ 209.807703][T13961] CPU: 1 PID: 13961 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 209.816471][T13961] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 209.828307][T13961] Call Trace: [ 209.831793][T13961] dump_stack+0x191/0x1f0 [ 209.836316][T13961] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.842588][T13961] should_fail+0xa82/0xaa0 [ 209.847390][T13961] __should_failslab+0x25f/0x280 [ 209.853364][T13961] should_failslab+0x29/0x70 [ 209.858453][T13961] kmem_cache_alloc_trace+0xf7/0xa50 [ 209.864865][T13961] ? proc_thread_self_get_link+0x1e5/0x400 [ 209.871993][T13961] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.879551][T13961] proc_thread_self_get_link+0x1e5/0x400 [ 209.887397][T13961] ? proc_setup_thread_self+0x5e0/0x5e0 [ 209.897196][T13961] link_path_walk+0x1331/0x2170 [ 209.903034][T13961] ? proc_setup_thread_self+0x5e0/0x5e0 [ 209.909526][T13961] path_openat+0x275/0x6ab0 [ 209.914556][T13961] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.921272][T13961] ? __msan_metadata_ptr_for_store_4+0x13/0x20 [ 209.928944][T13961] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 209.940839][T13961] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.947973][T13961] ? __msan_metadata_ptr_for_load_4+0x10/0x20 [ 209.956527][T13961] ? expand_files+0xa4/0xf00 [ 209.961723][T13961] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 209.970005][T13961] ? do_filp_open+0x89/0x710 [ 209.976914][T13961] ? do_sys_open+0x642/0xa30 [ 209.984441][T13961] do_filp_open+0x2b8/0x710 [ 209.990316][T13961] do_sys_open+0x642/0xa30 [ 209.998743][T13961] __se_sys_open+0xad/0xc0 [ 210.005991][T13961] __x64_sys_open+0x4a/0x70 [ 210.011556][T13961] do_syscall_64+0xbc/0xf0 [ 210.017109][T13961] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 210.024056][T13961] RIP: 0033:0x4136b1 [ 210.028274][T13961] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 210.049013][T13961] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 210.058436][T13961] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 210.066984][T13961] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f303d9cfbd0 [ 210.075420][T13961] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 08:35:20 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:20 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000040)={0x1, 0x3ff, 0x5, 0x1}) [ 210.083790][T13961] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 210.092983][T13961] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:20 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:20 executing program 1 (fault-call:0 fault-nth:11): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:20 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 210.370126][T13976] FAULT_INJECTION: forcing a failure. [ 210.370126][T13976] name failslab, interval 1, probability 0, space 0, times 0 [ 210.385699][T13976] CPU: 1 PID: 13976 Comm: syz-executor.1 Not tainted 5.2.0-rc4+ #12 [ 210.394272][T13976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 210.405479][T13976] Call Trace: [ 210.408860][T13976] dump_stack+0x191/0x1f0 [ 210.413732][T13976] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 210.419915][T13976] should_fail+0xa82/0xaa0 [ 210.425460][T13976] __should_failslab+0x25f/0x280 [ 210.430951][T13976] should_failslab+0x29/0x70 [ 210.435801][T13976] kmem_cache_alloc+0xca/0xa40 [ 210.441202][T13976] ? __d_alloc+0x8e/0xc40 [ 210.446237][T13976] ? step_into+0x70c/0x1c00 [ 210.451016][T13976] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 210.457302][T13976] __d_alloc+0x8e/0xc40 [ 210.461821][T13976] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 210.467813][T13976] d_alloc_parallel+0x135/0x2220 [ 210.472832][T13976] ? __msan_metadata_ptr_for_load_8+0x10/0x20 [ 210.478963][T13976] ? __d_lookup+0x828/0x960 [ 210.483812][T13976] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 210.490236][T13976] path_openat+0x2795/0x6ab0 [ 210.495564][T13976] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 210.501859][T13976] do_filp_open+0x2b8/0x710 [ 210.506678][T13976] ? noop_direct_IO+0x40/0x40 [ 210.511841][T13976] do_sys_open+0x642/0xa30 [ 210.516853][T13976] __se_sys_open+0xad/0xc0 [ 210.521381][T13976] __x64_sys_open+0x4a/0x70 [ 210.526301][T13976] do_syscall_64+0xbc/0xf0 [ 210.530805][T13976] entry_SYSCALL_64_after_hwframe+0x63/0xe7 [ 210.536753][T13976] RIP: 0033:0x4136b1 [ 210.540752][T13976] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 04 19 00 00 c3 48 83 ec 08 e8 0a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 08:35:20 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:20 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = eventfd(0xfffffffffffffffa) fcntl$setflags(r0, 0x2, 0x1) [ 210.562334][T13976] RSP: 002b:00007f303d9cfbb0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 210.571951][T13976] RAX: ffffffffffffffda RBX: 00007f303d9cfc90 RCX: 00000000004136b1 [ 210.580239][T13976] RDX: fffffffffffffffe RSI: 0000000000000000 RDI: 00007f303d9cfbd0 [ 210.588721][T13976] RBP: 000000000075bf20 R08: 0000000000000000 R09: 0000000000000019 [ 210.597748][T13976] R10: 0000000000000007 R11: 0000000000000293 R12: 00007f303d9d06d4 [ 210.606113][T13976] R13: 00000000004c8c1a R14: 00000000004df8f0 R15: 0000000000000003 08:35:20 executing program 3: pread64(0xffffffffffffffff, 0x0, 0xffffffffffffff1b, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x80000, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000100)={{{@in=@remote, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@empty}}, &(0x7f0000000200)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0, 0x0}, &(0x7f0000000280)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@local}}, &(0x7f00000003c0)=0xe8) write$P9_RSTATu(r0, &(0x7f0000000400)=ANY=[@ANYBLOB="950000007d0200000072000000010000000104000000020000000000000008000004e10c00003f00000005000000000000000e002f6465762f736e617073686f740017006d696d655f74797065747275737465646b657972696e670c007070703076626f786e6574300e002f6465762f736e617073686f74000e00272447504cce7472757374656440", @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r3], 0x95) r4 = getpgid(0x0) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000004c0)=@assoc_id=0x0, &(0x7f0000000500)=0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000005c0)={0x0, 0x80000000}, &(0x7f0000000600)=0x8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000640)={r5, 0xfff, 0x8000, 0x80000000, 0x9730, 0x6, 0x1, 0x7f, {r6, @in6={{0xa, 0x4e24, 0x4, @loopback, 0x8000}}, 0x7, 0xde2, 0x1, 0xdf, 0xf4}}, &(0x7f0000000700)=0xb0) write$FUSE_LK(r0, &(0x7f0000000080)={0x28, 0xfffffffffffffffe, 0x4, {{0x3f, 0x9, 0x1, r4}}}, 0x28) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000040)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f00000000c0), 0x4) 08:35:20 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:20 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:21 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:21 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000040)={0xd7, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xc}}}}, 0x88) 08:35:21 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:21 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x3f, 0x4000) accept4$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000080)=0x14, 0x80800) 08:35:21 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:21 executing program 1 (fault-call:0 fault-nth:12): syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') 08:35:21 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:21 executing program 3: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r0, 0xc10c5541, &(0x7f0000000000)={0x8, 0xfffffffffffffffc, 0x1, 0x0, 0x0, [], [], [], 0x3, 0xffff}) pread64(r0, 0x0, 0x0, 0x0) [ 211.495398][T14013] IPVS: ftp: loaded support on port[0] = 21 [ 211.898494][T14013] chnl_net:caif_netlink_parms(): no params data found [ 211.968396][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.976875][T14013] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.986078][T14013] device bridge_slave_0 entered promiscuous mode [ 211.999650][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.007571][T14013] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.017328][T14013] device bridge_slave_1 entered promiscuous mode [ 212.060633][T14013] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 212.075483][T14013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 212.115637][T14013] team0: Port device team_slave_0 added [ 212.128937][T14013] team0: Port device team_slave_1 added [ 212.235612][T14013] device hsr_slave_0 entered promiscuous mode [ 212.272916][T14013] device hsr_slave_1 entered promiscuous mode [ 212.561851][T14013] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.570230][T14013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.580106][T14013] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.589461][T14013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.713894][T14013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 212.748545][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 212.769101][ T2850] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.779687][ T2850] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.816750][ T2850] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 212.841642][T14013] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.865623][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 212.876889][ T3335] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.885188][ T3335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.955617][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 212.965809][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 212.976384][ T3335] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.984495][ T3335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.994284][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 213.006338][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 213.018255][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 213.029892][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 213.042604][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 213.056305][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 213.067105][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 213.078139][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 213.088667][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 213.099043][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 213.112470][ T3335] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 213.137539][T14013] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 213.194019][T14013] 8021q: adding VLAN 0 to HW filter on device batadv0 08:35:23 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = eventfd(0xfffffffffffffffa) fcntl$setflags(r0, 0x2, 0x1) 08:35:23 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:23 executing program 3: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KDGKBMETA(r0, 0x4b62, &(0x7f0000000100)) setsockopt$inet6_buf(r0, 0x29, 0xcc, &(0x7f0000000240)="e4a39dbdc6ed6f946444485c85aa3741362af944d5bd11237969a9baa76e6747845c99e20b70a8846b7f01b510b276f411a1573df25ce1a2866d2c1300bc0a4868b71bf5a6f0d4476aa160", 0x4b) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) write$P9_RLERROR(r0, &(0x7f00000000c0)={0xb, 0x7, 0x2, {0x2, '.:'}}, 0xb) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f0000000000)={0x66c1, 0xc3, 0x2, 'queue0\x00'}) 08:35:23 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:23 executing program 1: r0 = semget$private(0x0, 0x7, 0x200) semctl$GETNCNT(r0, 0x7, 0xe, &(0x7f0000000240)=""/4096) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/hci\x00') ioctl$UI_SET_PROPBIT(r1, 0x4004556e, 0x9) 08:35:23 executing program 3: r0 = openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x500, 0x9) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x10001}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f00000000c0)={r1, 0x6}, &(0x7f0000000100)=0x8) write$eventfd(r0, &(0x7f00000001c0)=0xffffffff, 0x8) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'rose0\x00', 0x0}) r3 = syz_usb_connect(0x7, 0x377, &(0x7f0000000200)={{0x12, 0x1, 0x350, 0xf6, 0x23, 0x85, 0x20, 0x8d1, 0x3, 0x2157, 0x0, 0x8001, 0x7bd, 0x1, [{{0x9, 0x2, 0x365, 0x1, 0xffff, 0xfffffffffffffc00, 0xa0, 0x4a84a9c2, [{{0x9, 0x4, 0x3e, 0xfff, 0x8, 0x3d, 0x30, 0xd8, 0x1, [], [{{0x9, 0x5, 0x80, 0x0, 0x7ff, 0xffffffff80000001, 0xb26, 0x2, [@generic={0x9e, 0x21, "a5d5302b71a755a59763b9005b03b0e83e029378f394fe1b02a76d67a919799519505eab925ffc54ec66387f1e63930fe36df9a6e009b7d2a82ff67dae3342ab678a37799a72e8fd3d3e3ddb0af4ded560019473e02c9f448377dab60edf53d667289fd211a98f05944fe6c8801154197683af4db1fa8af464956a1fd60f18d9422d1eec46677774089bd561357ac9937d6e6b12b4758b98cceca3ab"}]}}, {{0x9, 0x5, 0x4, 0x4, 0x129c, 0xffffffff, 0x3ff, 0x7}}, {{0x9, 0x5, 0x8e, 0x1d, 0xfffffffffffffffc, 0x2, 0x53, 0x7e, [@generic={0xd6, 0x21, "c0a5ad856fbc4d27ea98279c3d18d856447e6d14fef325d28b27ca4ace898f3cf1ad8c5ff59a8ebf8884a126d3d8639a82eedc1dbce7169a220e2090c36e4b8c9043ffc8c54e60f7693aad6b5e5826e6b63fa15b7523d3f71bc7729a18d670f60b1ef2794a41af292b4afa4f6d4f908b35b75bbf9c81614f03197f6f29c03cefbe7879853599b1f0b2c2ebf86a3e0a5c4b7c0e70ddaa2ca24239e164b788c34a7db218b086e316e4fe1502ec342a41d5f03a0a2c8ba11af987432588ecdb66ba7e425d5e95ed24a6a8d94352ed455a625913ef32"}]}}, {{0x9, 0x5, 0xb, 0x0, 0x6, 0x450, 0x8001, 0x0, [@generic={0x32, 0x0, "0791fef420c4359e1be37d2dd16b4ae3bb24daa0bb8df46f2747a40d9358e62de416da35e6a3258cd145ccaab13f0839"}]}}, {{0x9, 0x5, 0xf, 0x2, 0x6, 0x800, 0x1, 0x4, [@generic={0x56, 0x3d, "4a1bdb7466cbcc0b04bcbbfb4de5895e244cbf39dd0d9abddf2f68990f30e4ebdf884dec96fe1d1fc8f0cf7f98c138e0da4fbe799cdd6400ec578202a1b4d0eed97b21f29c43cb6a47dc3b5616d06959a06875a8"}, @generic={0x1f, 0xb, "4f5d5e69cd024f5a47a704914927a97c8d24aec4b4beee77496a67ac0e"}]}}, {{0x9, 0x5, 0xb, 0x14, 0x7ff, 0x6, 0xb9, 0xcc}}, {{0x9, 0x5, 0xb, 0x0, 0x4, 0x7, 0x0, 0x8}}, {{0x9, 0x5, 0x7, 0x0, 0x56b2, 0x2f, 0x730, 0x4d0f0b00, [@generic={0xe1, 0x23, "090c0758e2e461964e0abcd97d06ad925d95675150ad0a24cae2b2c32e28540eb43709d3d1e4e3cf70e546a048667e7901cf8b97c28eb66532a1fad4d3a32a08cb384bb35eaf99c2882afdf2294c2291773e7de77a5686a1c0eec3a8e2334426bdf80ba68f36ff73217c1af14d2d4414eda2406f5394ac0517b33a947cfc87a9fafbde987c54e357a9ec3525cd5475ecf4c8a588562ebd9421f8e9ddb53afa6b19ad13cacbb7af2757cbcde7594f790bd348fa6eea3caec6e576abaafc1da37f00ce86e9448636d260486fd20a590675dc8ff9f9c642a12046c71144ef2aa9"}, @generic={0xf, 0x6, "971f691f22fb48c6eef8ec8712"}]}}]}}]}}]}}, &(0x7f0000000900)={0xa, &(0x7f0000000580)={0xa, 0x6, 0x311, 0x3, 0x3f, 0xb26a, 0x40, 0x1000}, 0x4b, &(0x7f00000005c0)={0x5, 0xf, 0x4b, 0x6, [@ptm_cap={0x3}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x1, 0x1, 0x8, 0x2}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x8, 0x1}, @ss_container_id={0x14, 0x10, 0x4, 0x4, "3eee4c783df77abddd0412057fbee885"}, @ss_cap={0xa, 0x10, 0x3, 0x2, 0x0, 0x8, 0xc752, 0x5}, @ss_container_id={0x14, 0x10, 0x4, 0x9, "c2d3af877a065aacf6ba34bba61611c3"}]}, 0x6, [{0x78, &(0x7f0000000640)={0x78, 0x3, 0xc55, "42b43b86734e8684f177829eed1bd5bbd827b0a82fb79c7fd9ce6f9b2a3d5286f53a96b2b5a6f5a221cdc17b657643e87577e2b1d3bc87efb0a5cd3cd85b56cf2336fe8b10694b9cd3ecc009a4e8970ab04d4d441c6f7c0d463f5b035a48bbb25c4b9053fa1d047e9bcaffbcee2abb09e7c69ef9"}}, {0xf5, &(0x7f00000006c0)={0xf5, 0x3, 0xe663e67fa04b539d, "6583b45676ffa8775e51c1d79e8bc7e722bf005ae46f7062217b4fab8f1f36f0a3f7f8e6f5b3855283a12558c9a277d8e2700965b092c23b445ec513d0410e89ce3f7d7cdccecc6f1c2ee0ac9c176b5325cf5410252e54bf0fa389ca3882ffcf077335981d14b96e433242bab99ea0112e9b845fbb60d935f185d152bca7822ba50e25e4416e936b40d99aee8403af907743b793f22a2f920d150f75489a5ab6e214d8cec67eb7e6a7a3d81999ca1c9ddf3e2bf5c7658d2a5ebbbea9ddb64abd020f713ec60ef337952b657424d57322b2c4501e74ac8c2d49a48b4386b1a1fa040f02451e7b1904f444c648da2d99ab7d"}}, {0x3a, &(0x7f00000007c0)={0x3a, 0x3, 0x438, "cc01c1037b2946c61c5f6e2a8a90d00a242f76694e2e523b6ff8da5f434f70c6ea187e9789e9e37bf190b627e4407c7d07828a9b71a7"}}, {0x3a, &(0x7f0000000800)={0x3a, 0x3, 0x5c7f, "4318b720b69d4c5e4c94af1b39e4cd5fb29fcdc7b021da5517b1be1ecbe2ce9d24bdd0e2f02ad574abc648cdaf7bcd133eff17a19133"}}, {0x5f, &(0x7f0000000840)={0x5f, 0x3, 0x807, "8d32579ff5b993c29fdfc8a8bec539db59a1e39f15e39bcfcb292bfde2b8d8dcd17bec87f2019598052fae50f69bce46ee4dbf37432719b551de1ab87c16d671457a3e206f6ef40c6ea0aeca0f7d915865315017ae052c7382b40a"}}, {0x29, &(0x7f00000008c0)={0x29, 0x3, 0x144b, "62073893d3b032007bcf287cbb09508e16d9cada6cce2349bc90c39f164ac8c4e8d0ed113e"}}]}) syz_usb_control_io$hid(r3, &(0x7f0000000c80)={0x24, &(0x7f0000000980)={0x0, 0x31, 0x4, {0x4, 0x33, "7382"}}, &(0x7f00000009c0)={0x0, 0x3, 0x4, {0x4, 0x3, 0x47f}}, &(0x7f0000000a00)={0x0, 0x22, 0xc9, {[@short=@item_4={0x3, 0x2, 0x0, "75a9ec1f"}, @short=@item_4={0x3, 0x3, 0xf, "bca0a4c6"}, @short=@item_4={0x3, 0x2, 0xf, "0b13df31"}, @long={0x2, 0x0, 0xf, 0xb2, 0x1, "058e9d7ea13f53524c51c357566804a01ec50c25f5cb27e4b61034a3a5f7d26615c7a95b6a2685db24276ed2957be9e270231d91bf699b3a4559de8e55f04825a1bcdc0326c4edc43f52dac0d35146bd54336cdb442e6fc0224dfb36cf741157a9daa4cf2a55e5a492339b623939db90d65f3c93469a06eef4e3e346367ba9f9a3691a9a2bbd024240168b45701616bf33a2efa7915924b5cbec95a95d6932e8a80214c5b476cc6edba731a042db92a8c33b"}, @short=@item_4={0x3, 0x3, 0xe, "6d1e2f07"}]}}, &(0x7f0000000b00)={0x0, 0xf, 0x161, {0x5, 0xf, 0x161, 0x3, [@wireless={0xb, 0x10, 0x1, 0x2, 0x0, 0x7, 0x10000, 0x3, 0x3e}, @generic={0x68, 0x10, 0xa, "c95768b48fb24aeb047dddd088e2e0b7bfb33a661ba12323b0585886935940fec3a1d833c5d642bbb581be1ebc5ad5d6ec34ff2e4f2989af4417514274d0bc77e2333ad485819d58e0607b21c3d23970bb1deece5fb64222c3ea586f8b76905d0b9cac20d2"}, @generic={0xe9, 0x10, 0x1, "16efc238ea19238e83cc13d19332847dd661ddcf6d294f915da768f69e943891ca34ae4d51f8d53d92dabf30eb43d86212c332ecd79cbb2208f79681966ab03330ecb19336b15a8b5f64d5f776ca095de3383e6d47026c1aa3e47108177108d123177a38eb25c2f9a70ce3bf72413055a06300f36fbbbe26f31a8d814810ae40ce6207f715a35b62ab6da5bbcafab7daae77944e45a2dc5ebcd60f9728949ae7322378fc98caeea05375bb46ed42a47f505366c3971dd9a836f52e6c72cd33d2a68269ada31a2f178220e5b16a7c8db44cdf56d1d46dcde6020a90962ef11f6e0de2199798b7"}]}}}, &(0x7f0000000e80)={0x24, &(0x7f0000000cc0)={0x0, 0x0, 0xde, "3ad105279e7ccefd20faa907572bd9b7c8970ba1a74d5be591d2d8a460441cec39693b13fb42708b9223ead9deb8284fa4ba18ee0411cf4664c4bc309ff9fe5e17a558d5bb238e5126754be24d7d0241fe4c098bca65f1ab6a2d98525e99917420f52b046df785abd11db80964520f37cda35a8b687ed2e02cfa8d4bace69c5db6c8a9aed44e5efbd538e342fc0687ca5c8f58e3d6b6f239cfecbef79ce33b6c4311a31e825a1472786ba048aa728c11fe634280e4ef004691a57e12abed4911b4a1ff202d390cc933fb39f74ace605375fb6a6f0ac3a7c81055360588df"}, &(0x7f0000000dc0), &(0x7f0000000e00), &(0x7f0000000e40)}) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={@dev={0xfe, 0x80, [], 0xb}, 0x3b, r2}) ioctl$NBD_DISCONNECT(r0, 0xab08) 08:35:23 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:23 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000000)) gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) r1 = syz_open_procfs(r0, &(0x7f0000000040)='wchan\x00') ioctl$KVM_SET_MP_STATE(r1, 0x4004ae99, &(0x7f0000000080)=0x1) r2 = getpgid(0x0) r3 = syz_open_procfs(r2, &(0x7f0000000240)='\x80\x00\xd9\x92~\xdc\xadt\xa2c\xb4Y\x06\x10\xe6V\x88\xb4\x92|S\xf4\xee\xcb\x06\a\xed\"\xf7\xad\xec\xac\xc5ur\f^A\xbbo\x1a\xb9\xd11\xa2\x83\x8d{4\xe3\xf5\x7fXZ\xd43\xfc*\x7fD]\x16Y\x8b2(\xc6\x8cE3o\xbak\x18X\x03\x97\b\xee') r4 = syz_genetlink_get_family_id$fou(&(0x7f0000000180)='fou\x00') sendmsg$FOU_CMD_DEL(r3, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xee680433d8863b3b}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x900, 0x70bd2d, 0x25dfdbfc, {}, [@FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) 08:35:23 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:23 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = eventfd(0xfffffffffffffffa) fcntl$setflags(r0, 0x2, 0x1) 08:35:23 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) 08:35:23 executing program 1: gettid() r0 = syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x6, 0x80) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000240)=@assoc_value={0x0, 0xfa29}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000002c0)={r1, 0x1, 0x20}, 0xc) r2 = syz_open_dev$loop(&(0x7f0000000180)='/dev/loop#\x00', 0x0, 0x0) preadv(r2, &(0x7f00000003c0)=[{&(0x7f0000000000)=""/62, 0x3e}], 0x1, 0x0) r3 = gettid() ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="08002dbd7000fbdbdf251400000048000600080001004000000008000100040000000800010003000000040002000800010000000000040002000800010000feffff04000200080001007f00000008000100080000001c0007000c00040000100000000000000c0004000300000035000000"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) syz_open_procfs(r3, &(0x7f0000000080)='net/raw\x00') 08:35:24 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 08:35:24 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:24 executing program 2: openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/attr/current\x00', 0x2, 0x0) sync_file_range(0xffffffffffffffff, 0x100000001, 0x6, 0x2) 08:35:24 executing program 4: pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) fcntl$setflags(0xffffffffffffffff, 0x2, 0x1) 08:35:24 executing program 0: openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000000)=""/12, 0x198, 0x0) [ 214.212503][ T3335] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 214.472742][ T3335] usb 4-1: Using ep0 maxpacket: 32 [ 214.722588][ T3335] usb 4-1: config 255 has an invalid interface number: 62 but max is 0 [ 214.732443][ T3335] usb 4-1: config 255 has no interface number 0 [ 214.739226][ T3335] usb 4-1: config 255 interface 62 altsetting 255 has an invalid endpoint with address 0x80, skipping [ 214.751082][ T3335] usb 4-1: config 255 interface 62 altsetting 255 endpoint 0x4 has invalid maxpacket 668, setting to 64 [ 214.763014][ T3335] usb 4-1: config 255 interface 62 altsetting 255 endpoint 0x8E has invalid maxpacket 2044, setting to 1024 [ 214.776499][ T3335] usb 4-1: config 255 interface 62 altsetting 255 bulk endpoint 0xF has invalid maxpacket 6 [ 214.788185][ T3335] usb 4-1: config 255 interface 62 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 214.801157][ T3335] usb 4-1: config 255 interface 62 altsetting 255 has a duplicate endpoint with address 0xB, skipping [ 214.816197][ T3335] usb 4-1: config 255 interface 62 altsetting 255 endpoint 0x7 has invalid maxpacket 1714, setting to 64 [ 214.828424][ T3335] usb 4-1: config 255 interface 62 has no altsetting 0 [ 214.952541][ T3335] usb 4-1: New USB device found, idVendor=08d1, idProduct=0003, bcdDevice=21.57 [ 214.962644][ T3335] usb 4-1: New USB device strings: Mfr=0, Product=1, SerialNumber=189 [ 214.972623][ T3335] usb 4-1: Product: 厝荥嚴ｶ瞨兞ퟁ讞뼢娀濤扰笡ꭏᾏ돵劅ꆃ堥ꋉ烢攉銰㯂幄Ꮕ䇐褎㿎籽컜濌⸜고វ卫켥ၔ⸥뽔ꌏ쪉舸쿿猇頵ᐝ溹㉃멂麹ᆠ鬮径悻㗙藱勑Ꞽ⮂ລ湁殓΄邯䍷鎷⫲鈯ᔍ甏驈뙚ᓢ컘细ꎧ᧘쪙鴜㻟旇⪍뭞ꦾ뛝뵊༂㹱ໆ㟳⮕瑥픤≳쒲Ṑ건ⶌꑉ䎋놆瑱༄䔂笞Й䓴䣆ⷚꮙ [ 215.013879][ T3335] usb 4-1: SerialNumber: ᑋݢ錸냓2콻簨঻蹐칬䤣邼鿃䨖쓈탨ᇭ [ 215.473888][ T3335] ================================================================== [ 215.482000][ T3335] BUG: KMSAN: uninit-value in read_eprom_word+0x947/0xdd0 [ 215.489139][ T3335] CPU: 0 PID: 3335 Comm: kworker/0:2 Not tainted 5.2.0-rc4+ #12 [ 215.496793][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.506869][ T3335] Workqueue: usb_hub_wq hub_event [ 215.511899][ T3335] Call Trace: [ 215.515241][ T3335] dump_stack+0x191/0x1f0 [ 215.519628][ T3335] kmsan_report+0x162/0x2d0 [ 215.524276][ T3335] __msan_warning+0x75/0xe0 [ 215.528815][ T3335] read_eprom_word+0x947/0xdd0 [ 215.533621][ T3335] pegasus_probe+0xf2b/0x4be0 [ 215.538423][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.544361][ T3335] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 215.550369][ T3335] ? kaweth_get_link+0x70/0x70 [ 215.555164][ T3335] ? kaweth_get_link+0x70/0x70 [ 215.559955][ T3335] usb_probe_interface+0xd19/0x1310 [ 215.565209][ T3335] ? usb_register_driver+0x7d0/0x7d0 [ 215.571473][ T3335] really_probe+0x1344/0x1d90 [ 215.576199][ T3335] driver_probe_device+0x1ba/0x510 [ 215.581340][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.587359][ T3335] __device_attach_driver+0x5b8/0x790 [ 215.592772][ T3335] bus_for_each_drv+0x28e/0x3b0 [ 215.597662][ T3335] ? deferred_probe_work_func+0x400/0x400 [ 215.603446][ T3335] __device_attach+0x489/0x750 [ 215.608250][ T3335] device_initial_probe+0x4a/0x60 [ 215.616770][ T3335] bus_probe_device+0x131/0x390 [ 215.621740][ T3335] device_add+0x25b5/0x2df0 [ 215.626914][ T3335] usb_set_configuration+0x309f/0x3710 [ 215.632466][ T3335] generic_probe+0xe7/0x280 [ 215.636996][ T3335] ? usb_choose_configuration+0xae0/0xae0 [ 215.642783][ T3335] usb_probe_device+0x146/0x200 [ 215.647669][ T3335] ? usb_register_device_driver+0x470/0x470 [ 215.653588][ T3335] really_probe+0x1344/0x1d90 [ 215.658398][ T3335] driver_probe_device+0x1ba/0x510 [ 215.663546][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.669478][ T3335] __device_attach_driver+0x5b8/0x790 [ 215.674985][ T3335] bus_for_each_drv+0x28e/0x3b0 [ 215.679860][ T3335] ? deferred_probe_work_func+0x400/0x400 [ 215.685615][ T3335] __device_attach+0x489/0x750 [ 215.690431][ T3335] device_initial_probe+0x4a/0x60 [ 215.695657][ T3335] bus_probe_device+0x131/0x390 [ 215.700545][ T3335] device_add+0x25b5/0x2df0 [ 215.705112][ T3335] usb_new_device+0x23e5/0x2fb0 [ 215.710301][ T3335] hub_event+0x5853/0x7320 [ 215.714823][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.721102][ T3335] ? led_work+0x720/0x720 [ 215.726058][ T3335] ? led_work+0x720/0x720 [ 215.731199][ T3335] process_one_work+0x1572/0x1f00 [ 215.736459][ T3335] worker_thread+0x111b/0x2460 [ 215.741286][ T3335] kthread+0x4b5/0x4f0 [ 215.745413][ T3335] ? process_one_work+0x1f00/0x1f00 [ 215.750644][ T3335] ? kthread_blkcg+0xf0/0xf0 [ 215.755256][ T3335] ret_from_fork+0x35/0x40 [ 215.759703][ T3335] [ 215.762044][ T3335] Local variable description: ----data.addr.i13@read_eprom_word [ 215.769782][ T3335] Variable was created at: [ 215.774220][ T3335] read_eprom_word+0x498/0xdd0 [ 215.779529][ T3335] pegasus_probe+0xf2b/0x4be0 [ 215.784203][ T3335] ================================================================== [ 215.792268][ T3335] Disabling lock debugging due to kernel taint [ 215.798883][ T3335] Kernel panic - not syncing: panic_on_warn set ... [ 215.805485][ T3335] CPU: 0 PID: 3335 Comm: kworker/0:2 Tainted: G B 5.2.0-rc4+ #12 [ 215.815379][ T3335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 215.825475][ T3335] Workqueue: usb_hub_wq hub_event [ 215.830527][ T3335] Call Trace: [ 215.833848][ T3335] dump_stack+0x191/0x1f0 [ 215.838213][ T3335] panic+0x3c9/0xc1e [ 215.842175][ T3335] kmsan_report+0x2ca/0x2d0 [ 215.846708][ T3335] __msan_warning+0x75/0xe0 [ 215.851240][ T3335] read_eprom_word+0x947/0xdd0 [ 215.856045][ T3335] pegasus_probe+0xf2b/0x4be0 [ 215.860786][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.866697][ T3335] ? usb_unlocked_disable_lpm+0x10a/0x180 [ 215.872438][ T3335] ? kaweth_get_link+0x70/0x70 [ 215.877214][ T3335] ? kaweth_get_link+0x70/0x70 [ 215.882004][ T3335] usb_probe_interface+0xd19/0x1310 [ 215.887438][ T3335] ? usb_register_driver+0x7d0/0x7d0 [ 215.892749][ T3335] really_probe+0x1344/0x1d90 [ 215.897478][ T3335] driver_probe_device+0x1ba/0x510 [ 215.902613][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.909320][ T3335] __device_attach_driver+0x5b8/0x790 [ 215.914737][ T3335] bus_for_each_drv+0x28e/0x3b0 [ 215.919604][ T3335] ? deferred_probe_work_func+0x400/0x400 [ 215.925449][ T3335] __device_attach+0x489/0x750 [ 215.930253][ T3335] device_initial_probe+0x4a/0x60 [ 215.935302][ T3335] bus_probe_device+0x131/0x390 [ 215.940183][ T3335] device_add+0x25b5/0x2df0 [ 215.944830][ T3335] usb_set_configuration+0x309f/0x3710 [ 215.950379][ T3335] generic_probe+0xe7/0x280 [ 215.954913][ T3335] ? usb_choose_configuration+0xae0/0xae0 [ 215.960659][ T3335] usb_probe_device+0x146/0x200 [ 215.965536][ T3335] ? usb_register_device_driver+0x470/0x470 [ 215.971453][ T3335] really_probe+0x1344/0x1d90 [ 215.976176][ T3335] driver_probe_device+0x1ba/0x510 [ 215.981328][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 215.987255][ T3335] __device_attach_driver+0x5b8/0x790 [ 215.992756][ T3335] bus_for_each_drv+0x28e/0x3b0 [ 215.997627][ T3335] ? deferred_probe_work_func+0x400/0x400 [ 216.004034][ T3335] __device_attach+0x489/0x750 [ 216.008837][ T3335] device_initial_probe+0x4a/0x60 [ 216.013885][ T3335] bus_probe_device+0x131/0x390 [ 216.018770][ T3335] device_add+0x25b5/0x2df0 [ 216.023606][ T3335] usb_new_device+0x23e5/0x2fb0 [ 216.028552][ T3335] hub_event+0x5853/0x7320 [ 216.033076][ T3335] ? kmsan_get_shadow_origin_ptr+0x71/0x470 [ 216.044129][ T3335] ? led_work+0x720/0x720 [ 216.048497][ T3335] ? led_work+0x720/0x720 [ 216.052851][ T3335] process_one_work+0x1572/0x1f00 [ 216.057932][ T3335] worker_thread+0x111b/0x2460 [ 216.062758][ T3335] kthread+0x4b5/0x4f0 [ 216.066926][ T3335] ? process_one_work+0x1f00/0x1f00 [ 216.072950][ T3335] ? kthread_blkcg+0xf0/0xf0 [ 216.077600][ T3335] ret_from_fork+0x35/0x40 [ 216.083088][ T3335] Kernel Offset: disabled [ 216.087419][ T3335] Rebooting in 86400 seconds..