nk: 'syz-executor.3': attribute type 16 has an invalid length. [ 2631.996297][ T358] bridge367: port 1(bond0) entered blocking state [ 2632.024847][ T358] bridge367: port 1(bond0) entered disabled state [ 2632.043966][ T358] device bond0 entered promiscuous mode [ 2632.060477][ T358] device bond_slave_0 entered promiscuous mode [ 2632.067042][ T358] device bond_slave_1 entered promiscuous mode [ 2632.078919][ T351] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:26 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x0) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:26 executing program 2: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x1, 0x0) ioctl$VIDIOC_G_INPUT(r0, 0x80045626, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r1, 0x1) sendmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:26 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xf, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) [ 2632.336634][ T384] device bond0 left promiscuous mode [ 2632.352032][ T384] device bond_slave_0 left promiscuous mode [ 2632.367077][ T384] device bond_slave_1 left promiscuous mode [ 2632.390571][ T384] bridge367: port 1(bond0) entered disabled state 04:32:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x10, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:26 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) [ 2632.432410][ T384] bridge368: port 1(bond0) entered blocking state [ 2632.460483][ T384] bridge368: port 1(bond0) entered disabled state [ 2632.492641][ T384] device bond0 entered promiscuous mode [ 2632.499465][ T384] device bond_slave_0 entered promiscuous mode [ 2632.515430][ T384] device bond_slave_1 entered promiscuous mode [ 2632.534903][ T389] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2632.612280][ T396] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:27 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x48}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:27 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000010000105000000000000000000000012", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012000c000100622f274db256a8cee9e0d46f6e640000000014000200080005000200"], 0x44}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x10, 0x800000000080002, 0x0) sendmmsg$alg(r3, &(0x7f0000004500)=[{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000000)="5d17d71449fddce76c75bce1fb2e8602a1e2", 0x12}, {&(0x7f00000001c0)="1f21d9e5bf26c7abe44f709a9f018fc951b8aaf59f3feab51985f2bc937b1e350b6be6c3655a7efe202d0b7cf4eee7763218c3a95ee9a8a9e2010d07d51c896e55bbe8ef69116b353010b400c306999dbaeabc441800a4eed4324753628d32b104eb9deda2e375e579a85a9537e6223edf9dabcceaa35603fbfa0f31fbc58097770df6189c509f5fc62e65501a92d33e33bf4d039951969205c681a392d78669b0219781e681f11c1d8e9ebe089f7311f55e15871c2aba04ee4cf9f595e85713f1f71bc7a3cfe6adbd7995195a04c0459c84fc189f8f37abff1fad9568da561783d8c19bad2a307673d65a7ef945629f47", 0xf1}, {&(0x7f00000002c0)="f909ca13b0e7f4ed3771f079c3d27387b5f5c0a996559af73dc919cb60fb6b6622e8045cf4348258dee5728c9036edd9ca13498a3254c7a7916f3b709e960511cf202ff1b7512a76e2c44208286b4e39150fd6d9e4e29d4c75b3d099b12d159fe9f2cb796771309d1b92767e0b708205d2481fb975c5bb46a5249c7093c6af17f7dd4ea51c6fbf5b3e34af52598442e2a8e5555d5a437e6e6a26f0b93e685915", 0xa0}, {&(0x7f0000000380)="3a5423745ad48b0640f05e1d159c5c2057d650e7d96da99452486dcc1000e1030f928bf6838f1c190f112e52a9c124f7a3a9b835ae61c05ab403dccf495d2125a010bc78e4defa6eb68767b1f100593841fbda129774c995105f2db6d7393f2d448ab17a6412cdecf45a72fdc88dca5a9cc0ed87d357d27d95238f002c9b32b8ecca9162b7e27e4d572ec3a09009cdab688ed56367b489f91cebe630fe07478e63aa39f5b2c3ce95ab88933d6a158f1d2e77caae424ef60e40e410d8c3f5f70a045fe783808f2fa5f0ba8b12d4c5b19eafc8d7", 0xd3}, {&(0x7f0000000480)="aa5bc737b5652244bdfe383f67824fc1c459a8dc798a157276db6fd227ebb44a26aae26a1d2da0cc508f375f684a548bf39445752657c226843f044a082338606d29c02baca23516404bf5891da34966a05b983ee65b6ef375c77db7ec202d6ab25bf8acbcfb3d4d1828f29db9ea3173e158d1c1faf46b99fc80ebce760c9377b239a175d56b4b4397eb3d087d7ea46efb324531f6af9c592b5c4bd3297082", 0x9f}, {&(0x7f0000000540)="e2536ff91af347ce48e9bae21cbbaee56e8d3e56a4fb81df756660abbcbba3c3eadc2bdc40204179ab883c6bcc420aa17cf4ad82de2837be013904b7eef7266ddce323343774dfa2cd156cb7e6b43e70d11257978db9b5a0a05afadec149a8fb05eb25f235bdca0d93e44b30eab61136ecfe248f30358e48308d060f14befc34f73fe18a5935a26793c0fd9ece788d2fd24db85643afa22a7419fdb4c0085b8c46738bc541b5f2fda7757ba63ecad7eb3430aeb1747e35f9c0bb4563486d0311ee5feefd534b421ae3ec76485f621a04b57def9fa322a27682361c27545764", 0xdf}], 0x6, &(0x7f00000006c0)=[@op={0x18, 0x117, 0x3, 0x2}, @iv={0xe8, 0x117, 0x2, 0xd0, "e01e7df329ff92eb07a864efc18eef57ec4e034d7bb3fe07af7e5c3aeed6c9ad009f1e95f010a519bb3feaeb78011e6944dd1563e94a5d87b4c62022f032de448ab729594b518e1ddc99598275859ad3df95d71b00aaab84bb1d567b49b3b469c9bce41bc84fe1ebc101cf7b63ba9c400fb931d49361138432bf71a26b32bcb1c04097ff29c88bb6fb0269329c6848b2e473af2d22d22f229677c4f1f26a82b9d3e354a8bc8b7c4ca0e852d0df5d6f3fecc487ce14e2257c4b3bb9a7895b9d7d43f0ad4b47d286608bf253a2c67f814c"}, @assoc={0x18, 0x117, 0x4, 0x200}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}], 0x148, 0x40}, {0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000840)="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", 0x1000}, {&(0x7f0000001840)="95246e0d2e15c406b429e349f9ef81d306a6c1b7660273fdaea2afe1599d9bc12f5b64a584169ddba1a0ad4eeed3b233b5c3f29730cd24fb0301a07eaffb328e414b3001eea52bc4cb", 0x49}], 0x2, &(0x7f0000001900)=[@iv={0x58, 0x117, 0x2, 0x3f, "1ec04db70ccb24e90e9329fc313f02fd7fe37d26303ecf61eebc90aecae48962b2d7f788cc28e7d11f142cd2485ae84d4b2c27eac7cf4b0c214bd036bb5c1d"}, @iv={0xc0, 0x117, 0x2, 0xa9, "f0f1ab103471f4c75834d9c5d7cf34b5d95e95d54f416674f791e106db05dc78b2072224fd6f5c37cae4a2276293418cf438a25c605499278c493d7780a25ebf64dff0cbb1cc193845196561003244c660357d73551b55aa7594ce6ab6a0ef7a37080d115635f79fc31d56939c4759c032bae07dbcceb8594cedbf9d196f3f330f39f30cd0b5f6fe9680dafc87bdcfb5e824f63fc8b729ff58255734cd8459493abe43d1d06a1d77e1"}], 0x118, 0x20000010}, {0x0, 0x0, &(0x7f0000002a80)=[{&(0x7f0000001a40)="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", 0x1000}, {&(0x7f0000002a40)="86e65f1e6817b41e55bd50097b4a4c9873d6f52dbbba463d3dd166659af1fdf3", 0x20}], 0x2, 0x0, 0x0, 0x8000}, {0x0, 0x0, &(0x7f0000002b80)=[{&(0x7f0000002ac0)="d76b428b69204491704516a1de376384e3653a3a326a1479da2b73da35a128dba47b27e83640872c9bda84fe29f328f6ac4d55e3134a8a4fe3d72c6c55f4d3c150e5a3cab701c442759487bfcdfec34222c9533277da67b5882451df2970db4b3b4d5672ee867808c35e93d8d01a110d15431b03475d73c9e93a08ac674404b53b82e8bee4eddf6729618fe35a83f026e17f7a83c026396e32", 0x99}], 0x100001c0, 0x0, 0x0, 0x4040844}, {0x0, 0x0, &(0x7f0000004100)=[{&(0x7f0000002bc0)="950b11bea19a9dd0fd006d2af4705f911a0105a8cb1250fe907c059be41b7f1574f78d844247c5cf2ad6b7e2fb8f88fb5a8be492e91dfbee1650573a9a41b19fb0551f38b6049f1e8c475055c7803657d17612bdfecf76f0ca7b79e76bb73a5de9b74f43b7f28441043018d7c632aa5c55cd23bfff57c78f51a9fa8fbabde0a651463e4187498a1426f96eb4bdb926ec058905a17268c2183599db0904f23f9a7662b367172c037d2c0764bf28586cd31ff2b63b1c3b715f2159a6784b30c99bc56a34f51d392d12864812cbda8929e0254634da4bda326f681b588091a043d9f9292310507f3d16360d1053bfca3df38df691a0b44ba761ca8ffd34f299cef9d7c90a354801df744c9ee35dc193c7761b79773469612c1977c0c8127abf32796f80543960ff036da82bf5e402bf288fbdc2ea3e27df925d7b162d33c9b6f12ac1e48677d3af37e32158a7dfb609f14a387b9a8a2c5930a7b006b8b3dae7e4261756f3379605d1880b7da45d03c1299bc435caa4aaf086226144509cfe05647e7281edaaa65f752fa705c74f4c0ac75bf19ddeb1177c7745cf6c36ab85231fc1dd027dfb1742784ee275f91d6ac48c1705b9ed1d885bbe74c342a843f68cdd4f395a2de8a630b44c8b9434db19730c6d16ed536a36a565c9ed0b463bbe0280d52e7a2a4724d52915469488ad75656293bf9df4da1215c1b2abbdccdd51820c60bde128097a1b012f861c6e27a4cee50a462d3bf8bbc10aa2d3e076b478d3a0ddb9377dbe91dc2b16547f6c30567e746efc583f382640662ccf370f5067f3e5090e3845ab64604dc5a6ff898fee370af95f87f8100d775b765f53fb2d0269198756493a3c25ca2a2ea71e31ad243a79ff281cffbf4ae60361041018897882d69e9251ba0dec70c0b0f819274b2c8700be095614d7c7a14d8c7ffe406291fea977b010d695b6b69a048d1fc1fd2cbc7bf037f0c07bca8d3343c95b5d64d5a42275cf55fca5100c9dc3a5dc1a6e75a1e8321c5d192c406dc005f58524ee99fa1a5db4542edab3c0b98bc25cbf03f5e5ef855f331c9cafe6ed5faf229e8ca0b4ffd9f572040b071592eeb9107df436bd562c52731d4444ec7b22892c95b9586e69aa757b235931e9d490ebe5ab513ea1b4c524ed11c899c44c9332ac00fed09a586e971f688fb763569c39df8ace1aa5e77300a0d8faf60cc21854a3347b29bd30e2c369bd4111ececa71442b1bdc0cae03501cd7da39d51e4a1ee7030ab6d56b4e9807c565fbe4e54ab8df9f41a48a11294607d90e1ec7ecd3bc7264cf1011db1c2a290cee787ff856fe527ddf66b8348e1f34b9b03eee75e4b0a46d39ce510e393462a2856809c163ec06eb86025ff40e7ab9af9a796962fff08f5791873d91f5ab40a07bf8cb69d670bbdd571f861550bfb920646562b0589f7f907452714a7cd88dc2f33df2835cfd5a83f08512ccb0493e38f8d67c589563162537380140d9086805bc375f93806b7bd07ae2d64dc8098c8e55afe97b2c29b31216a54be77e2404e35369dc3d99328bb5a7563332d170b8bfa7aa47916015a06bddc512605a45428a95216f73c4834c3cbd94a0ec77710ff6278031c8fc0888bf7299061a7996c7e8c0f80c86838215ba0872ae1c4b041bfb57da0257a24e39c495c0e2eab20cca628f4413a43733b50b63b280c1710499aa1db5fe275e4c2e054e060850a9f2b2d87c0ce1815056a3cf4f7d75f100bb045ea733d84fe1b4fd8f730e3fb9dd33966a7e517564728182f40a59f749829b1c8e2cf61da421c654b1f666fa2d9061bd228bcfcf12f92a8b9f73401a305debe4857f9c1126bfe2b330c15ad74a29a599089a09a05882e324cd1c91569462aeda0ad9c3035ff2d8cdbaca1a847c190d5c6a3991ab822751e5b3516504344d6165cebe41d8b2288b5c647fa29620d238a109702903768d012d7fbf49aa7535817716ded3e911ac574c97c2347b3b93cf233589462d8ad7aa533dc35ca4427cc877e4726d3cc5c9ae52159712182505cd0aa4e6de1f6c2b4036e6a6302f5a1abc0a4a01e010352981770ccdff859eeda7a06dcb3c74c8a8a27749e15aa40ba0b6ca9d12512b2ba04769be8614e8b48908806a5a8c191308b1444f340d1f590fe50c9479464e4920e4e652042c350363aba80b069cee749274343428ae9b784cc52b7d516a35a3d39d87b56dc45e4364c09e79ed896d8512c6de3933114ee5b4e3453371f36c9059123ab6445a334c4fb34f4603952cd9d0bea614da402fe52bd23db0cfac41f411a6e26a05c2bf711ccb24590ca0c525bf830f4cf9927f566a007199dffc7198d9932654b7c08a737dad87334e3e77698d1837c78aa8723345105d88d572b159a48acc69e30f34227671bbcb4e4e9ad5f85553f96bca54e995ce8ca25f3e6f7f81cbac14abc8a089af5d469f7b6163d4b875be24916edbfd1fedadc7fdfcf570c12151e9d2e7752da278af9b851ed7aeadb5f17221243123c8a4f3d8446ce3cb513275ea1016e7c165ca478be89cfa858ce5f04a0494eda6180d55b5b104b44cb0b089824a310f457aff9d977a32fb960a876cc732d3b55f0e792f35adb5c94f3a1056514772db2c194b4dc384f757ef11dc0645104b93b5d75c316c3c21394ea035709c7bc47db056e8f4b9809ecf3b2ead4655aa10030d6cf140a3f52dd7851872b3d0a7d0dc990c03191b938045048c0e6032e60e54fd1257a85106519e6a424ad2f1d21f149b40918a872a80f4e8ab8a4e1ddee7337183dc406a1d2700c35144b9d3ac01eb272236c7fcdb52b4fc70af4b5b6e563de60b267425736483102c051d80591caa7fcc4323370e2b77cd1b246f15468739e1e61a6d11f8c1e4a15d0fdb8894394936f0c349eaa653c90f0b98192c2a3f71028d7014597bf8c22406f3e2be498a33cb5db87b20e235cd6cff380a6aecee4cbffc358caff8956e9bdd7435e2ec1b984e578ee379c1c6d8c1f08e5f8a6e56dbeb0115efb709d34088d4083e1a61455f07618f6738092a95cbc2e469994b174cca8572565623c64292d8b652a429f86377cdfb6b2e2d52b2ea5bf6abf6f1e6b6818c41369b0f00109e16b6b4a48d295a94a0619dbbe6233b6f28e86fad41f1f4406d7e525a236c75168f9df443e08e58503cb8255d1ae24cc0466091b3662b585537a3d0a7f94cfb9e9fa703f31bf8d9bb839259c253face002863cc9828db5fef8029cbf8a9cf852c57d79e42247aa9a063a1e5ab608397ecf6b0f94752e922eef57d75a91915c35adaa7bcc4e4dab9105fc41f9fcaefcd8a99c518742d258743a8fb80792de7a69e9e4121dd52621bef289bd111cec0440c51cee657071d4f50e34b6727d6a5823a0476786fa1462841b55891c843f458cd6ec45232bf4efb6714c735184ccd77568c5c76b3da4a5cb7ba1319d0991f5c5d2a457d9587ef5761e0ed3118e3f691ed0aa247e379dd12cfdcca14cb8266ff327a2cfbc4e020df31f0e1ddd9dd2f71db949984eb71cfb25b396227e2e8e2a7a3b3d5e39e63e38bc5418d5c1a8af2676532fa41498432c4545840bf74283e51779cffd9ea0170f5fc033bf35013e265105b0b559eb74d6690811aa0e689aea830b695f56d3967fc3d7cb41bf2d26146f931a084a5593e105515cd7a40fbde1243fa16032b2b22b0c436d3e992f44dfff98fb7457190c7955386cc229e9495a4b1c2fd6668648c44020985bdc9d3b361910c3d578a90505430243d260d7bafa48dd22d92929f2248a5b1c9a21dc116186fb141729bcce30a492f8fe8274e1a2a668e86c753a216fa58fd46c30275f7bb29c1502859a1102daef0c46702dfccb8927b5a2ca64a45b813e5cc812e9ec2ffc33aa8376d1a3f2840b15829d70472eb44c00e32dff2ce8a37cd9fb84ba93b85805a168a1d96c75b49c0acbb897d3decc35beef133304ac440a59edbce8448dc782e519467135c05965da0e7e9835f518e08bab8a790bb9dd41ee364d4530eb537ceaae9d5eb91b838f5a21126d51f319d69d363fac0a19347f8f665639de76ca1eafe192f13f4de446690963d8dc25e185d5c4f7e4cf0b7257d52c4dc5e29c1fc99514f8ae30e3cb7a3ef311e4d6b9068420574aa63c34f49bd99d64f233efa7f358ef2777d5842a869d1697cfd8ea0b234d9c59fc14436b344aff9060ef4b8b8b7a06419b5bdf622f4ce6891d2ba041cf8b7b73f76f06110ea57ec4da85206bd08e3c9ddfc72976d6c8794d512f7905e878ceae6ac05a64d07f67066a48bc9779136b20d2a5f76445ae770416b0598afc5d7ac01fcee394c36f1b59f700f2ae76593c26b00431aa10aca5a6e35737b56952a268487e28df6783b8ac508f53ae6178d963a675306d74636c65dc70aa2690db2494dc97756f9b651cc9c194c846497ab1cf83d8505fb98b87a9da1ff5ef991c4e81a9009e0e18059f0ba2fe2d2b923b2fb06cbb38138301e494e7b065a78928ebe88f2df4ba96bbfd2038f9464d218d6bacde87418651737ead21d3582f49548ba1daa3e2c897c53645dbaed8820697a5b566766a7cd8f773e9daba3b67bb62e18c8a609b00fb8a2884c45445b104a5032579fcb30855e106557fd5cefd8ea9b8658f0451859271e9555eb3b6751900a28b7d9b64ec5cce01dbe70cef257fe589a542424a8739b2de9e649263f6a0ffe215d121a9d2a009e04956c38a19631824a1cb0b857006d9be8e9312536b60edc8730c3b0334f5e92129f37f439fae45a6d98f8e19ad476fe827f894c8afc7f87cfe01524c117a661db39d9f60fd04388ee4d4301c5bb8a7476fed68e678d4b362bfb76a5a04e92783374097170db63dc5a9bb25997a02b94f2ac4d303e29237c64aa1aab18315b7ce6b722b131cea57cc18b7f8bcc115b7cab88b989e77df2ae77ce027872831a1290e22018f5d58cb8f8a8571e8c151044439cb76da04fcd05b8fbd6d2b163eee9b0d5a7e5acad25cf0aa61adf04ee2f246f8896e7dc2567dd12f3b132fd822a908b82e48bed9c2b65a9ea0c00799375c5e62cb32987aa08527250122a579d31f3bfcca04d433811b72da84d733b7771fcebbce762f5aa89fb60468f4815c3880260fbe0c173ce42e9c3333679fd3b35cf08b71b016bdb31a65797e87f25e5bbe74ffd7521fc50d42b99ccce4e60f8196c015b48f4dd657415f3fe905da2d075d4d2ac6251e50cb761cab3ee04ac288a1d3d4c79345788690a16b1eeb930dde6e1f2b9a6ffa94bdb6cba3e2161a4ce8318190ff3a725c969c274ff10857764c9c61a5d7818737932dac907d7f369f2dd1accb0d4f2c2299877bfb45be856cc335992ce9311d632de8b8eabdb128c2d13c0fd307a1cb7b573d09cf32a23341c2609f68cce29ec716e11eabd31ddbc79e58eee46606cbc571676cc0150a3cdf90aa46391d069a54dd8112b1869d22a004fca300500fb5d8d88540ecd637e088997d744d919d73bd0360054509ba7914cd21d585c37481313c86b919cf9853fca1b538d89860d595a23cbfa8bcc80e2b113a5dd8923a48bfc4f0578abe75b7861961df16d83ea9b1ef7ce32a4b6e75e106c5ece03c1a917e3e94ea29e741143faba9cac7530a33f4be2d6930fa3798da7dc69618c0631fc18d3ab4cdf52e2894b306e51e2f5f3777952580fb800e630f1d940c4f0ebdf95cebf6ed63fbd7841fc7b108ec63245ce3605e303620df388726125f5e00ed13af9af4335a956e343d7aa0a781ff1abdb5d32455c0c7ee6449f98c182b006b597df1fd5effd35b460d68c7", 0x1000}, {&(0x7f0000003bc0)="f664249000f1f132fdcb8ee3d5e412aff70b96253810cf1fb2b3608f9f0afe7eabda8735c92fa199c786c27bdf76febc0e5fca3ad590415938939bbed6d904ce824e44e796255adad6318a590017030b30db751bca62c1ca6142e14b4d3627dd666dc9db37cadb62f12d2fa5e71dae8c07985151a5804b1ecdcbad612dd5aaec545675addac71d908714c79c9c343c7769c7e60e23a6e7b7ed96f399f2c66d6adf292c0446d681b2dc3eaa2a731b99ae7d368fb8f4646a005a3b6b6c6abfd3752c0ec5d308a12c4345990cc19a85d07fa99de37301ca4f22b4ed16f6453efacdfa82d1666697", 0xe6}, {&(0x7f0000003cc0)="bb1d6ffb30a6bc71775452fa7446c91e65b0e65b32f0ac88a3ecab9e8edb7f0afb73de149375601218fdab0cfb37afb76a8ec47d02cd43cd5b397fdd22cd804774859c9e73119f4a2631c53e986244cd0848231b4743e05ad676ab5881635f34ff31f4adba400b9a47bfac54573a6417b5c2359f393409a585b8f62d7be85eec0146deee4d8737923f464f1b23a013437ac7ac1a35ae4b00c49cb256eb890698e199cf37b2991f6e8593fb67f496b6", 0xaf}, {&(0x7f0000003d80)="7cd474cd9d4dff6a23cecc62b0c518a72df6cb58a8b29fed1c5bd195f66963570c0a8af3d8582f250b9b1eafd8763c4231584afbed06aa4c59be31886d588545b58c62d8dab29d5b10dd31c586ba8e6bdd8c5dfe5eecbb0f0b1a338d4399436e2354196006f4e80c79d3f5f4542d2d8245f2aa40aea6e58ee3990289b30329c225e701f69abdf6795cdc421c17e73e90a124db02bb567df52eb237b73bb585ee254320722c5d00fa561aff5f51a81602d53c4648ae3a", 0xb6}, {&(0x7f0000003e40)="0a5754bea54268f95cbea03670bed8c09e4589382fa5999719b1e92c153caaf007fd9a9a114d91e6e8edcc32111a740f7fbdbd679906f5a72319f1bdaacafe72429844c29934a06fa93c801b6eb26d2a21c1ce6ce76eddb794d87ffe78c31b34858f96c3f2a764f4641ea8bf167c7a25e63733", 0x73}, {&(0x7f0000003ec0)="093f29b817fa71aa80cb8be73d7ca4249e6f06033750447b582621dbc10f821f21e2eac8da42a299ac7fb6c5e9b21cae275da3fac7de8719c056e29be66981436ee23eeec8de3c83a101dd3df64f90989aec04c51f6cbc6cb89684c546cf4d0fea5cabb7819f38a06a7a272b64d005fd35d6df1ea9fc3d27e35cc5c7a967f6d2f5e956eadde3a4b152f4ca61c87eb659fc5d072cf3d05126", 0x98}, {&(0x7f0000003f80)="e6d6", 0x2}, {&(0x7f0000003fc0)="217c8cd11eb34f6e6ae4bbd6f540a2be6a169ae7f5b6874ebb", 0x19}, {&(0x7f0000004000)="7de20f96e92f59fa8d165943dfb3a8e1028a70e12910ef66fa4c93207656f3a6f779c1cb284d2ae9471a632e5ec2825c25e622a9a47cf0c9e1258330ba49b06eee82c538865241eb553bfe5dcb9548864a7601ec452374d70318be0d5cd7b615edd65e3df4d622a023a5d5d876bf1bb791a593399cf656b76527410dbc7b4b1975afcac3dc1e28fca3797d75351b2777924fccd94f796c31c6200d628f3c1f8d166d8bd3c9f337ffb3251708c577c80d339e5593c576bf8392343d94b147acecb21f5f70dac233de7d96b84c33fe90530a42ab65f6", 0xd5}], 0x9, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000004280)=[{&(0x7f00000049c0)="beb6f5ac389eef0847da9ab5e0091e688c99da887b3e097d826bdcaac9ca4627d8eddc7f335f8ef29ca24b337d7c6dc0cb113367fdbc2d50cc27ea165399fab30732aaa172b76657371534255b9480ae48649cbb29c4850bca20b8d93beefc070b94558cbb41be2edaf6f7612e21c1464b08ffcf561e6e400d1d6755736c4b5306eee37cf693683d6694aee2bd7f9f6ffad7870afeac9d12a2bb915843029880ea24791470f031ced6b5deea5d42410be2dd68572fb8403cd1bbb9f6f79a1c525bfeb7e8d5197931842c37ca8e2d1a245d09ba912a42d0f66e4ff8a16f2fe6528a1db5bd7675af3f99c635cde913680d969ececd87ce7ebcfbbc04af78a3169a76bd8c8619473438cc942d556db20862e00e478e4624a2b428b497066e768ee3ae5be7e973d8e9c0fe21a37d1443f1728ca8f2dab5093fad9b99e07317da4235693208065ce712182dafcb9b6847635c7c86e8049ed0be934b08665baac1966685a71eb6dda650562a7e70264320aad3fd4c3713f6d1dba624907d451db63597c42d1796b9867869cd2477aa3426142c55905ec5a60782cf37b228ce5914734567739953334bd6875abd1fbfb70584f4a5d04623b9ede1fab0fb390fa4a6f2aff964a3a1dd81f92b920cba16c28de3a39dd2ffa32df98d50349ceb452765e330113368f785006570191425d0182e4a9ee430b1ee5a6dcc67a5c1084389645f8182456992a9a5f67b60753979e594ca8d2dc58966d693b466ffeda28fe4a9d295784d991a57395ca2684dcc9fcce53f9c164cb07aaeea976d53325e372e5cf0de24ab0763b5773d1d2a31512da6156a9640abdd6dfca6eac908ff7b7cc68d322212713221a28dd8066ee5bd4665c82a23005f2f99f4e624d3c2062839f08a4882c0dacc6b7384c378496fc4fbc28b7601a8f7951553e7d74490b73aca432fd91c5f0032d17c0d5fb9e46bd88363dac2bbaa032fc217b857a1a712975aaeb40d9089fa5c0165781cbbf0a75d673066ec3eb8f834fac04cc20749f9612d830de0e991804ff6369636f4e5e37fa8c5c6d5dd07993d66a42313072cab6d69d3b0af34c35e4521df8b3ba31c83ac6585cb6f425feb9d984aeae2c8371a6b301402e6268ce4ae5f7f4fc4389237b830bdffce2f9f32dfc45d2830caf260ee3bcfb338c9b9cc0a27f05e29313489ff484b9669867cf3798f31343338d92ee1cad0bcb0e053cc32f7b531dfb65d3654e92eceef123159007946444201bb05ec2cbdf3abd87fe749a371dea722f565833c7de2fdd42bb3b48175b2325f1129e3dbd504c0df34b0fdf2fc65ff05f45c53a212a78b55a34804d0a13ba0aac14bc78245fa404863c8ba0c69680f81201838da7b58870adcc00e53d3411e404c6eec7a1d66fdb06bd08fee8138b58f2cc1a39654983a367aef46f5feb9666ea70db1d8bc380c3c51a0ec71b27baa6ec54b6b246f58a455040a81fe0fc086eb9f5692510b787b69a7028c7a1a441674d4f1312dbdf7a583f88b88dc580ca0f9d57d7cdf95a02fe062072a65c5c2984adf1831076a19511df96aba6594bcc5cef23ccc89adab18eccce586233428af94ad13a8c75e9b4adda6dc32088b6a97dea3ffc6389200646860cb7458b2a2e7aa4e87a5b812fc90c2253062f88d094cfa55539db2996dc0218033166af8b2d05c9163568af1409a008b121efa99e62f070470d8193044ca9ec7d569a75d7a420f907f912c4a6f1d41a89261aef28d3cd18848512965c3da47e4a92c81d797b967b0106aaf059467a6a701e5e2d5587d4647668ce7c62eb59936acc0c3035d724bda7f9115b27ef4b640806304290a1d52815ca619d87ce82d50610ce7762c7c7792fcbdc3b7f7b63362dcfc4cc6dc4c606d361fb43b9ee136044782bf728f0185dc542642a66b7e3779a06ecf89d8cac5f54c8104b71a4e157b3e8c9af0d05fe2529fa151541ded77d7697dd10d16f0e7ae1944bcc944c1d6c2553cb2574fa22a155b2f83386130049b408fd180e36dd90a3dc3756b4ac64a8e30575256b63b8084559ce94803f43d15f9c2479e2ceaa98b722d2646a121edcdbe0ad32b789d8c3e585907e82057fbf8c74eafec9f7bfd147dac4f20f5489c29f135d38d99af31370c85cf0c629806fb992aa1340af6cb9093ec40b4c6739b56a5f3e148d45d71a29a099f8e518358e13b7d62fea3083496a101d60ff3c7577efa8dcd6d398c3d6bb93721715f87c5ee5eb4df28946cc8e67f77da2ab5a82104f1ca7d847c6c782111cd744d75d45c264a3d8078d9fea8938e2ce27bb2a7cfd86611204a33478f106171f05c5c6f531ffd3d9c5b77bbfe38e5f0adcacf86957a63e49816238ac4d8df4601b46ec8b9624b3195bff84977a8923bc5246741920bc6a65493192d4cf13b452e8fbd68bfb54995ec0e1c852dbd50de499561efc1229c1cf66f4ec098bd343a8bc1917fc8ca00c6953dc357418c0491ec084c88b8c66c200152d349ca85ba36be4cb0b76dcc8beac3ddd9940585d5be1f3ccd841839120323530466882ee61ddd804ec6ffad749f8dc877dc62e27bb43ae459f04b2e4be2dadd40b399b428cd4c452d346feae0a9805aa90a1486bde39de54ca76c6e1ae08c76e2fc1dd9502e7c6f915b4f23e9d49fd602c3b4dfadf893a2030f0b08e70e40deeb25d82825a3df616f69e8503c6b3b2b6786c8ecb67a496d4489bfb52be4b4c8d7ee4efbf5a8a8a58003e87176afab746283f8fbf89482a095a5cd00e50aa424c07e25ccced4e230a29fba337a952f2d5dde23997340fc48ddd2e3fe41e386bc6efed7cc5fa2336683d9c62aa06d2a0d60356eb101f103d08268411d06b21ee4e0ee6c9dbc88c94d385024f8553da0e4bfac5408492fa10912fa469e24de4179185a185a21be0722310a9912fb59a24f3eaef2fa5b0d647fa23c94bdb748ca0566041abb3b839c5a3b54e8137dfbce79583ec8166078ed428dc95e6120b336190ada42210b8cefff7e52a30599bb14966dad8cb0c591e243e32db2f517cb1d733473654ee94c87e5255cf046864a0ce4e620bb7929fbb3d228c7e7e2de09d875b7a5f18224d8eca9f40a781e690a0c4935a0d5ce72d0d35e4da207da3bf43427e1dba509c86ce1f774f1cc183d65827d226811b4f8b14f94d8727721459bdf6374edee840b649c58b831f1e13bde3efe786c37bdbd0c6c02ed18532a0e39834e98250e4ef803a572993ccb8c4e9c71162d5896fed982ac318ecb5cea9eaad1ba120c9e904d77be5f71d1af8f3411ed5dff461769386b536811f22d352ff2c9f010d76b2635e7cff6fe6a0795844c868d5ca8901f4c278be8e3f31b54337f4da2c323c3824c1fc49efafb96ea4ce39010ae0f5f17df2ac9bd84978cb509bc0e18fdf5db73cea3123109e2db2794a494944f9655e1022330e0d5718a3c2960274d977fd4e4477641e00798b2c78c5e63827fcc2bae65c1be3951607892fef681ee45527926fcef3f64ba9dc5f0afdaca36eb95bb52025b0ee5067ffab4267d436ea2fb903758d712bffec0c3b38c81c647e93cdaa5ff54d1e1e278e61cc5efa616edc7672d6665b1ed05d689c9dab9ade6d1902006e27ba33b17663cb096f2c03294532465d3bbb24ed049ffd77fced72e9835a611d049c09c3155d0f172bace5b5cd713760c6bd2d642d81dcea359ff2a267e896c1738b7525e3f870e47a231677bc9454da71675c43907ec7192d4630c4e182b0cb2ee29d698409abbc88d5da96bc76a81d6e74cfac71da9870fab0c4dc6f0f037813322b46e9ea093705fa9fa996a5191649e7d6c35bd840837f7da7f8b5f96355d34b8cfaa65fad37bc3786e5cc2ed363b55c13c8cf566124e138def9cd2033eb7df3222926c92dcbccc4efeaa50e4a49f89403441f7c680fe32622a8e5e74ba320baa3b87e5a3a1bd64f67decdbbefe7eebfec6eb5a964f27d238dcb6c295dafd39c3ff8f0db0c5bd0fe18fc2769ae873c472172de47e7a151970e39aa6071d1623508bc1486a44725f314c1c87b9b1756ca279cd23360bcfb1b847c89394d083796ebfef95032c0726a8974f34cd816fbdaa508e29ccd6aab9b95ec012c81fcf5347039096f18b1b648e7519eda87984714e9ba848cfcecdb5ea5cef8231a2ec29505eedf553d979d99c1c243117251e5029201e763324dff6ed06a22a899eb8f08761605012b887859a9da34ee2e35521d3b2cb415046b70cd3267dbcd9cd61041245d318aa6fcf5d2b8ae57745d2e1c9113c056d94278050619e940032e7c7d06916a5cb34efe12580f9aa6343bc3174ecb2d33aad30ff20e67649178a24c03c25502764ed9546a9c07e2e30e892c93d9e7d9c55fd609f8846cc247dc99c4482a979972798a4f8598813df2bde5ff529e24e4c84fbf6c638a61b88f62db806474e85f1b340fcfb76c8a60e30c0fa3634667496785fdde6b50d7928703baffd13f8c2b7cada63c96beb4eb2e5789bda82a2184c8f6d715af39326abbfff78c3440d80f0783942899b11473402f93d0ebe0092360ac3f7337803c29bad9e2f5ed6a28760a6857bc7115e69d0e87730b42eb5c1684dc1a58ceb92e9b6cf5b94d27ef86bf265fc18d415b53eede73eafb4aeffda637d9fba1bdbaaf17ad5afc605047d80daa50004862a4afa08e6919686453c9fd32ad46be7bba50b584099a0f0e9439618ce0d28f3778e4338374ec5798179b1458d763ba8d3985c50326ea071fb6030ea2f31ba2cee86f11d0821692585b6ea705da896d75a83177253e6106b9f646a34f026b85bbcb693f747f4aba4040e39e0880367ce34527e68a30abe34f933f681473d1dedc744cff0c259ae736f2a25a73545f07d3a4f86f5b9028fbe2a0d6360b7d4dfd08b3fafae657075e565bedaa3278409f442e2d9dac8d27cb77d7ef0273936cb1ddb1053f6682f0eec092730b12d7d303480701e7b98074684fc3145585ad8dd091a61abd65e48df05201aa0b4c234c9cebf72a4c11f8a2bd9040ceccfb7561993b7f7cf2392fbce172e249cf60dcae0fb7431ed2491844a870ea69cefe6e35bf18159485a3a24efc2c49c0ed76815c535c69e0c001204b0ca8cc74dcaf0fd4599d45d7dd4950450698338669e7e56b20a8d8c1bf14ff0e9398f9b5cb6a44d8abb57532e7ab50f1785575138a4e12025d9423300ab816bb5e8ca55359dcd1e49118fb281ae5135d3fcd277d04b7fa7dda53394694dba5f9d301de8c24d3fda3d49054d2eb1d319f7b8a1785ae85cae9a1877a7c8a5db1d76bc33ebaf8ee4237f7fbce8f10a9bc308b01ef1146986171c802b5538c332182c21e5ccdefb8b90469b1fcf2203f434e1c826157ed5c5cb32d09c410c6bd6d70b2413a00a19ed05bd65df06a6a7ba5c99eada9643f792ae8a919779937cc2c159a5b9b685437b8891f159dd02d69cc239783ccf0fe9b18b6f46836a0f17b6cff66eba2f8e74d480e9daea058bf43ec1b85fc9662acb6aaa182143c6d853845c0954e703120c9f82dddd5588950182e6762e752f6f878a1034456163ac6f14560000c8ed6906b20a139d68866b37fa47e536617c9bc31409c71ca9ec02b41df1a7cf5d0362ff7d39d3cc2b24b2716f238523e7075920f6d6b197cd1cc08298e484971c0bac4a0e150957ce0a9e0f9a86c27bcb6dcb38914cf1b3d23b5094145af702e414735ca7a304e4c4fa45fa1ce18c9b4c0b7314417b0d80eba6c4dc0683f30cd68a7636a9a59cbe0f4bef71dc4bbd71e2ee44319df6f9ff48b9e06f7936141768cabe7d2e5d", 0x1000}, {&(0x7f00000041c0)="eb70fbabd1ad63ccea67b2c0abbd126177599bdde24636aa812769c28e958aa82f416e6095d517885be451a89d4fa84d8fc7aa7f6a9abd6bb635e121833ecf1812ea6a4f5273377983fa20d67f7d520f43ac2785cc6d84d5121f556ae601b69faabee7930318c49cd7c5d11c783fda3b75867d3caa1172fdaf468bc05aa39b7a27c098b86e5a2b07c3a1e0562f44615946160262585c14be44bdfd6d809209eafc97", 0xa2}], 0x2, &(0x7f00000042c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x4}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x48, 0x10}, {0x0, 0x0, &(0x7f00000044c0)=[{&(0x7f0000004340)="806654e9a1cae857c97ab460f303854838792e480059ba12a9840f58b2ee7ec513ce1a5897f5fe3c95853073d2e444be1366d8f1cb8f5208f05c927c29551c76b6e739c37c3282e732097d3344954adef7badaaea314d8f3932fabe6f3", 0x5d}, {&(0x7f00000043c0)="dde1847b4dcfbfab6d4b2857ed35f55f31ccb49a17456bbae8b89274d15766032eaff336810719547554afaec88fab15d649ac8fac2ca9f72deeffc776a96771d72f111948e9bf", 0x47}, {&(0x7f0000004440)="e4fcd0e0da2d8520afc174b68a71d3f42b4c995206532ae0c769c53ff509dbd8287ab036d97be762537a45f5c2c3422e1acf4063340d9aeaee4798e8d887d2442ecb480ea2c6f36d966baccc93b031c9525c6299", 0x54}], 0x3, 0x0, 0x0, 0x8000}], 0x7, 0x40004) r4 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r4, 0x1) sendmmsg(r4, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2632.949554][ T424] device bond0 left promiscuous mode [ 2632.955347][ T424] device bond_slave_0 left promiscuous mode [ 2632.961788][ T424] device bond_slave_1 left promiscuous mode [ 2632.967893][ T424] bridge368: port 1(bond0) entered disabled state [ 2633.002167][ T424] bridge369: port 1(bond0) entered blocking state [ 2633.008787][ T424] bridge369: port 1(bond0) entered disabled state [ 2633.019088][ T424] device bond0 entered promiscuous mode [ 2633.024659][ T424] device bond_slave_0 entered promiscuous mode [ 2633.031234][ T424] device bond_slave_1 entered promiscuous mode 04:32:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x60, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:27 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x3000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:27 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, 0x0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) close(r1) ioctl$IMHOLD_L1(r1, 0x80044948, &(0x7f0000000000)=0x3) 04:32:27 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:27 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) [ 2633.294444][ T439] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2633.314857][ T443] device bond0 left promiscuous mode [ 2633.330370][ T443] device bond_slave_0 left promiscuous mode [ 2633.336500][ T443] device bond_slave_1 left promiscuous mode 04:32:27 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x300, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2633.361636][ T443] bridge369: port 1(bond0) entered disabled state [ 2633.435712][ T443] bridge370: port 1(bond0) entered blocking state [ 2633.453445][ T443] bridge370: port 1(bond0) entered disabled state [ 2633.474304][ T443] device bond0 entered promiscuous mode 04:32:27 executing program 2: arch_prctl$ARCH_SET_GS(0x1001, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) shutdown(r1, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2633.480096][ T443] device bond_slave_0 entered promiscuous mode [ 2633.493811][ T443] device bond_slave_1 entered promiscuous mode [ 2633.502007][ T452] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2633.585383][ T474] device bond0 left promiscuous mode [ 2633.603745][ T474] device bond_slave_0 left promiscuous mode [ 2633.617441][ T474] device bond_slave_1 left promiscuous mode [ 2633.626252][ T474] bridge370: port 1(bond0) entered disabled state [ 2633.673700][ T475] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:28 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x600, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x4, 0x2, 0xfc) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000280)='tls\x00', 0x4) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) close(r1) epoll_create1(0x100000) setsockopt$SO_RDS_TRANSPORT(r1, 0x114, 0x8, &(0x7f0000000200)=0xffffffffffffffff, 0x4) setsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000080)=0x60, 0x2) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000002c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000300)=0x14) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000340)={r4, 0x1000, "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"}, &(0x7f0000001380)=0x1008) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$DRM_IOCTL_GET_STATS(r6, 0x80f86406, &(0x7f0000000000)=""/36) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, 0x4000}) r7 = socket$inet6_dccp(0xa, 0x6, 0x0) accept$inet6(r7, &(0x7f00000000c0), &(0x7f0000000240)=0xfffffffffffffde8) fstatfs(r7, &(0x7f00000001c0)=""/54) 04:32:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2633.735617][ T479] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x5000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2633.915812][ T495] bridge371: port 1(bond0) entered blocking state [ 2633.937667][ T495] bridge371: port 1(bond0) entered disabled state [ 2633.955433][ T495] device bond0 entered promiscuous mode [ 2633.962355][ T495] device bond_slave_0 entered promiscuous mode [ 2633.973236][ T495] device bond_slave_1 entered promiscuous mode [ 2634.054111][ T514] device bond0 left promiscuous mode [ 2634.060094][ T514] device bond_slave_0 left promiscuous mode [ 2634.068022][ T514] device bond_slave_1 left promiscuous mode [ 2634.081395][ T514] bridge371: port 1(bond0) entered disabled state 04:32:28 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, 0x0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) connect$netlink(r1, &(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x40000000}, 0xc) 04:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xa00, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:28 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:28 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x68}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:28 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(0xffffffffffffffff, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) r2 = getpid() sched_setattr(r2, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x400, 0x7}, 0x0) sched_setscheduler(r2, 0xc378008b18e17f17, &(0x7f0000000000)=0x3df7) sendmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:28 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xc00, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2634.303406][ T530] bridge372: port 1(bond0) entered blocking state [ 2634.335535][ T530] bridge372: port 1(bond0) entered disabled state [ 2634.356524][ T530] device bond0 entered promiscuous mode [ 2634.380434][ T530] device bond_slave_0 entered promiscuous mode [ 2634.388172][ T530] device bond_slave_1 entered promiscuous mode [ 2634.451905][ T546] device bond0 left promiscuous mode [ 2634.471390][ T546] device bond_slave_0 left promiscuous mode [ 2634.478222][ T546] device bond_slave_1 left promiscuous mode [ 2634.484860][ T546] bridge372: port 1(bond0) entered disabled state 04:32:29 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:29 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0xfffffffffffffffb) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000000000)=""/220, &(0x7f00000001c0)=0xdc) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e21, 0xfffffffc, @mcast1, 0x5}, 0x1c) shutdown(r2, 0x1) sendmmsg(r2, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x7000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xe00, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2634.781061][ T559] bridge373: port 1(bond0) entered blocking state [ 2634.788484][ T563] IPVS: length: 220 != 8 [ 2634.806524][ T559] bridge373: port 1(bond0) entered disabled state [ 2634.808448][ T563] IPVS: length: 220 != 8 [ 2634.821569][ T559] device bond0 entered promiscuous mode [ 2634.827460][ T559] device bond_slave_0 entered promiscuous mode [ 2634.834192][ T559] device bond_slave_1 entered promiscuous mode 04:32:29 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, 0x0, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980), 0x0, 0x0) 04:32:29 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xa000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xf00, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:29 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x74}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:29 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x2000, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40042409, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2635.138341][ T583] device bond0 left promiscuous mode [ 2635.153398][ T583] device bond_slave_0 left promiscuous mode [ 2635.160176][ T583] device bond_slave_1 left promiscuous mode [ 2635.167008][ T583] bridge373: port 1(bond0) entered disabled state 04:32:29 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x5865, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2635.208685][ T583] bridge374: port 1(bond0) entered blocking state [ 2635.227370][ T583] bridge374: port 1(bond0) entered disabled state [ 2635.239149][ T583] device bond0 entered promiscuous mode [ 2635.250794][ T601] Unknown ioctl 1074013193 [ 2635.254959][ T583] device bond_slave_0 entered promiscuous mode [ 2635.258262][ T603] Unknown ioctl 1074013193 [ 2635.266447][ T583] device bond_slave_1 entered promiscuous mode 04:32:30 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x84800, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x4000000, @dev={0xfe, 0x80, [], 0x29}, 0x5}, 0x1c) shutdown(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1400000022000700000000000026310001030000689f7b727e297cd80101e2908d605841c81faaa4435b59baea43866c60cb6d5593561d3ca03db48d65de31a94a82604a0b8333f5ea56ce41d4c5079ea687b8c1cf5e1a63e988915f941381f532d464a94bba2ac92fadb1d71cbcf6ce0ea223060341d4b8ec0cfe938cd8f448ef1f5930863ba6dea38b61be483603c12a62027b23cb2925c09c14dd22bfb09626d3833d1c852fdcfcd882638a92073ce1f1c34805e27cf0ab79"], 0x14}}, 0x0) r4 = socket(0x10, 0x80002, 0x8000000010) sendmmsg$alg(r4, &(0x7f0000000080), 0x492492492492751, 0x0) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7a}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x6000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2635.715626][ T626] device bond0 left promiscuous mode [ 2635.729169][ T626] device bond_slave_0 left promiscuous mode [ 2635.742853][ T626] device bond_slave_1 left promiscuous mode [ 2635.758130][ T626] bridge374: port 1(bond0) entered disabled state [ 2635.842187][ T626] bridge375: port 1(bond0) entered blocking state [ 2635.848751][ T626] bridge375: port 1(bond0) entered disabled state [ 2635.856175][ T626] device bond0 entered promiscuous mode [ 2635.861818][ T626] device bond_slave_0 entered promiscuous mode [ 2635.868340][ T626] device bond_slave_1 entered promiscuous mode 04:32:30 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000000b00)=[{{&(0x7f0000000000)=@ethernet={0x306, @random="761a5641f66a"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000080)="b2e7560ed97254cb8cf38d8581c06f2480b32a928f8e50a3712fb4a91d7f31c250e9c7f1fcace586d037f286167f9234d2f0254129a352dc05912d56cac81fe36b780b456fa22299f5b3c7e877a720b5b72671", 0x53}, {&(0x7f00000001c0)="5478b2a6e9f64adce222ce7805077a68dafaf3e91c502027ad143fadaac92f649846ab0aaf908f216b65be233025c4f210507773d3bd8d6b780e3838b02dfb5ee73d3e303c63b1cb41a83868b772ddd595f3107f15ce94c3f468f9976aee1ae1b609de3a8669c1f1855e832207400b7746b4fbafd47f24465dcbbeac2e5d85b3c868793ea09e43f71d73a067595aa33bf0541522d6f15dbf53d650e7ec5f953c71a95f3b7d257cb435b9992440a8ce30b486c3", 0xb3}, {&(0x7f0000000b80)="7e719bbdbf365fc78bff94398ed368fa68cbfc51d43b9e8f50cba99d3e239031836e2a898a980fc6a8e11de5fb476aa6bb2948e0f5f61f63d0e61d5a8b897e6f5b9a7a7b8fde27693f5774cab12a845e5fb90a0bc437f6f4e479539e6795f53430fe89755ea4caeca9d01a540d9e659b6c24f173da932b384f81e7f88a8d2f1ba98cf9cdd513a61c752bc1a7f418723ae25af92b974cd3f589ad7b5fb1f83d7e904b1ea7df9434e05c4421deeca6d713", 0xa6}], 0x3}}, {{&(0x7f0000000380)=@x25={0x9, @remote={[], 0x0}}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000400)="da38cacfdc3df132d966e4a53cca43c3c086ef742f352bc149361e67c30ae4f3242bb1911f02d2ca5b7a346bda7f4e79f7e5c4557fa097f43b4ba5803320fd3c0aca61af67ca2c8879d7cdd5b8742be9bb05122db6bcfed4b76d7e8f59f05ecee1856cecbb3caf4202", 0x69}, {&(0x7f0000000480)="155df6ac8de4522fbea35b708869f99a22868ced9974b2f788023673b0d512d58a21d5", 0x23}, {&(0x7f00000004c0)="b8fe20c7daeb3c5e51f5e0e3730aed2d62e5ec01dc942200bd3fb0051fcfdd8abfeec98583351cc5cd1b3e13b461c1d95f2696c7998e56ea8cff247c1aff58c36400d554dc4caadaa5d3733ff4e0705f907e8051fd1cc48c009ade01559b14681faf3d27ff731f923b1dd6a721", 0x6d}, {&(0x7f0000000540)="1edc1b697b296b4eb77d28fea1837e19e675990ba28a7885719336cbebae297ea92099f4273c11c1aaf22451755c015d6361be1b61b90899aa70cf8c4a9022304e7cc75d752ce84bcabb4ec8e3f1a50462cc9e82ace2915711543f7a65b0473e281a6dc2344588b21d530e7d36bb9a9f329b4940ef78aa7ce016c1595514202d4bac8961df4bc59e8ccf8c7f45dfc4ea5b9e571d3ea81d10108ffb07d60a8cf991f9a6eef78e710012b59b5e540fc8ad64c1ac780070ceb1d425", 0xba}, {&(0x7f0000000600)="1b20b2c65d7d1a512cd35ae95e4dc282deeb4c726fec3ea9b6745131f6a5dfa662e04eb98364a53af9a635632443ced96f5bff3eb8e7c0a872e676b784f93dba5fa7d9a016a322a053118728315207a5ab785f5fe8c8c439967e78ec1c18952292f659ac11ae92d9779e1fa1e6bff859dfc79cb98b7a931fbe88e4b633a0a0b127553fdbf4adddc2414e3d7907b5f06a3736f9433d9016ced0fa4924a8352432bd2a6fd33f0990b4854976fd4d1e833e263736b2574f99837d7ca71ae05df3705ae64b30519e1c0b4af2dfe7bb9510d24c", 0xd1}, {&(0x7f0000000700)="cb4c21561b976b1ec0ef8abc50aa2699c36983a6b77feae6c90426f091109f2648b6a5c2aefbf08f6ba5fa2d3695349920fe5cba031344d4e98331c45e0073e18400d88ad996ccf50be4d9b01b529d43fa7122b25a8b8727bc187bb306d0994cda4a3e907757f82b4407b7d8c79cbee52bbac354ca72a3b56789180c98ea66c76a9b", 0x82}, {&(0x7f00000007c0)="19dfa3674507686685d885f6b0625390800a78109932947b565a5a81668ade835144f31426b4d8c93f571a39dd77afe34b897e9434f53cc69075ee191cac50e2d38a5b50aed7f36cf254d65fa70c3f3a1eb1c64ca6d6a7b1d610e56c4bac1a2d0abb0a3419093168a4e1564b4b77d5943e269a3e32d35071b84aadef6cffd614e39d50b647e0a0f47c49614928c14e3f6661266d89d37b61540cf238451566380f903e254469d737d038ba940beaeb4b6119449de8dbb5c8d5c7d0e3", 0xbc}, {&(0x7f0000000880)="6580f45a9642d845e58b4c206be6e0245078229c828b2ab87406ae3b9a18b0cacf6a9c1622c3ef8640ff6292f3c842cd02776aadc7a35cc7a074018092a3ba34227b46c9f0805b342d4bb1c44484ed532b17023df029c7e554b2f74772345918c8e2b2011ef03f9574ca0fdebe27a18385b9b56837e2002334c97d1002fa85e9955a020d78d2ef54e39f318b923bbcff6169fcbbae5753826ccc513d9f24e1a2bdb30bcedee1c9699d0a832293ff2423b94daba1ca2c73e8f9045e6cd1de6b355e79f5593adfe3fba5b1943f5acc2f4124515da4", 0xd4}], 0x1000000000000067, &(0x7f0000000a00)=[{0xa0, 0x88, 0x300, "095c91bb90a6d1274cfcc8fa9aafae0cde5da882900f6e8290092d8e6767f27bf9a19059369c1406196e006c38c74567aff0a615243fca0e176d8c3cfbbbbb96e38c0c477a639a9f71a51ebf684aba51651a49b48196df26ab48988bf0c9f306d553c1d1925cd50e217eee5ebe476650304c2145ba34a12c36c41d0fc7e9f70d0d22c9dae338f1f5f2b994"}, {0x58, 0x1, 0x2, "660d16ea29fdb818db7de5fa70eebbc7c0f2aea8cac54e505c39106a9790df873f4a669b27b9937918400c6300b5c0ba07445247ed01777123c82b1b67117644bff8650588"}], 0xf8}}], 0x2, 0x4014) 04:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x6558, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:30 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xe000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:30 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:30 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0xd4cc9b452cbd5ec8, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000000)={0x7, 0x0, 0x0, 0x1}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000380)="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", 0x1000) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000340)={@loopback, @broadcast}, 0x10) ioctl$DRM_IOCTL_AGP_UNBIND(r2, 0x40106437, &(0x7f0000000040)={r3, 0xfff}) r6 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r6, &(0x7f0000000000)=@name, 0x10) close(r6) r7 = accept(r6, &(0x7f0000000080)=@can, &(0x7f00000001c0)=0x80) getsockopt$bt_sco_SCO_OPTIONS(r7, 0x11, 0x1, &(0x7f0000000200)=""/247, &(0x7f0000000300)=0xf7) 04:32:30 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x8100, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2636.209743][ T671] bridge375: port 1(bond0) entered disabled state [ 2636.285261][ T671] bridge376: port 1(bond0) entered blocking state [ 2636.300099][ T671] bridge376: port 1(bond0) entered disabled state 04:32:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x10001}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x34000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x500}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2636.655818][ T689] validate_nla: 12 callbacks suppressed [ 2636.655865][ T689] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2636.677012][ T687] bridge376: port 1(bond0) entered disabled state [ 2636.742296][ T687] bridge377: port 1(bond0) entered blocking state [ 2636.757669][ T687] bridge377: port 1(bond0) entered disabled state [ 2636.778451][ T699] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:31 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="63eb0395b0635bfc2fb26d27b99fff60073c6202506de4e3fc9a6c6a1f16b0af36892937bfcaaefea769", 0x2a) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x400300, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x10000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f00000001c0)="b401536fbf72401e3f8fe9f4f7300d6369db86045e6367bd1e774b0b4ae2ad8972572d896c7ee5fa5c85a4e7e510b01142ca2cbbad72e3922e6f685e6d5499bcbe26bca45c06825216abb8df20a018b1627c4147d994d07660bb9c82ee96d092cb70efd7c483f4637153335ae3a3443e71343ca7ef8bc7a026f9f28cffcbe121d06e7178894ebb9cb8981ad90a71d8dce069bea2f22e0c2830530e46f4cd658777d2d441ce0ebb09338214c379effa981427d18e2896085fedd6b5d7dfb188aaaed562c04bff79fadced609392c6eadd9897a18fa256145ab9", 0xd9, 0xfffffffffffffffb) keyctl$unlink(0x9, r2, 0xfffffffffffffff9) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) shutdown(r4, 0x1) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) fcntl$F_GET_RW_HINT(r5, 0x40b, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x1000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2636.978299][ T714] device bond0 left promiscuous mode [ 2636.987544][ T714] device bond_slave_0 left promiscuous mode [ 2637.000688][ T714] device bond_slave_1 left promiscuous mode [ 2637.011282][ T714] bridge377: port 1(bond0) entered disabled state [ 2637.071933][ T714] bridge378: port 1(bond0) entered blocking state [ 2637.094724][ T714] bridge378: port 1(bond0) entered disabled state [ 2637.106464][ T714] device bond0 entered promiscuous mode [ 2637.120934][ T714] device bond_slave_0 entered promiscuous mode [ 2637.127370][ T714] device bond_slave_1 entered promiscuous mode [ 2637.136831][ T712] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2637.153749][ T723] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2637.194252][ T741] device bond0 left promiscuous mode [ 2637.199609][ T741] device bond_slave_0 left promiscuous mode [ 2637.235592][ T741] device bond_slave_1 left promiscuous mode [ 2637.255177][ T741] bridge378: port 1(bond0) entered disabled state 04:32:31 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:31 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x4000, 0x0) ioctl$KDMKTONE(r1, 0x4b30, 0x5) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) r4 = socket(0x1e, 0x2, 0x0) bind(r4, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r4) r5 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={r6}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r6, 0xff}, 0x0) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f00000002c0)=ANY=[@ANYBLOB="205c11a1f4d756f4baf1ecf77cafb21079634a342fef66d896ef949e4c48a0c8681d7f54953efd6c643dfa36211c85c7d4fd0872b4a67509a813e9e113185f04d32ac472b8eb", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={r8}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r8, 0xff}, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f00000001c0)={r6, 0x0, 0x7ca5, 0x1, 0x6, 0x1, 0x401, 0xc, {r8, @in6={{0xa, 0x4e23, 0x6, @ipv4={[], [], @remote}, 0x6}}, 0x8000, 0x636, 0x4, 0xfffffffa, 0x3}}, &(0x7f0000000080)=0xb0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f00000000c0)={r9, 0x97}, &(0x7f0000000280)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$TIOCL_SETVESABLANK(r3, 0x541c, &(0x7f0000000040)) r10 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r10, 0x10f, 0x82, &(0x7f0000000040), 0x4) close(r10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r10, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x20}, &(0x7f0000000380)=0x8) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:31 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:31 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x2000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:31 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x700}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2637.507453][ T751] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2637.566113][ T755] device bond0 entered promiscuous mode [ 2637.596556][ T755] device bond_slave_0 entered promiscuous mode [ 2637.619906][ T755] device bond_slave_1 entered promiscuous mode [ 2637.627951][ T755] bridge379: port 1(bond0) entered blocking state [ 2637.638627][ T755] bridge379: port 1(bond0) entered disabled state [ 2637.648258][ T761] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2637.696516][ T772] bridge379: port 1(bond0) entered disabled state 04:32:32 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, 0x0, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x3000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x20000, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="0100ff00", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={r3}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r3, 0xff}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000040)={r3, 0x7fff, 0x7}, &(0x7f0000000080)=0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000080)=0x6) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) close(r5) getsockopt$IP6T_SO_GET_REVISION_MATCH(r5, 0x29, 0x44, &(0x7f0000000300)={'NETMAP\x00'}, &(0x7f0000000340)=0x1e) r6 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f00000000c0)=0x0) ioctl$VIDIOC_S_STD(r6, 0x40085618, &(0x7f00000002c0)=r7) chown(&(0x7f0000000140)='./file0\x00', r3, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x4e22, 0x6d3, 0x4e22, 0x9d, 0x8, 0x0, 0x80, 0x2f, r2, r3}, {0x6, 0x1ff, 0x3, 0x3f, 0x2f, 0x9, 0x40, 0x1}, {0x1f, 0x5, 0x4, 0xfff000000000}, 0x10000, 0x6e6bb6, 0x6}, {{@in=@empty, 0x4d3, 0x3c}, 0x0, @in=@multicast2, 0x3502, 0x0, 0x0, 0x8, 0x7f, 0x3, 0x7fffffff}}, 0xe8) [ 2637.913879][ T780] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2637.934004][ T783] device bond0 left promiscuous mode [ 2637.939600][ T783] device bond_slave_0 left promiscuous mode [ 2637.953905][ T783] device bond_slave_1 left promiscuous mode [ 2637.985346][ T783] bridge380: port 1(bond0) entered blocking state [ 2638.014557][ T783] bridge380: port 1(bond0) entered disabled state 04:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x4000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2638.034631][ T783] device bond0 entered promiscuous mode [ 2638.040223][ T783] device bond_slave_0 entered promiscuous mode [ 2638.066465][ T783] device bond_slave_1 entered promiscuous mode [ 2638.090064][ T792] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:32 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:32 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0xe8146f3891fc7b60, 0x0) ioctl$TCSETAW(r1, 0x5407, &(0x7f0000000040)={0x4, 0x100, 0x7fff, 0x2, 0x19, 0x1, 0xda, 0x3, 0xff}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x2, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10800}, 0xc, &(0x7f0000000300)={&(0x7f0000000200)={0xe4, r3, 0x300, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @rand_addr="9ceed3d633aed8dd45f2a82ec15184e7"}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x54, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xd02}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'erspan0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team0\x00'}]}]}, 0xe4}, 0x1, 0x0, 0x0, 0x14}, 0x800) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:32 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x48000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:32 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:32 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x6000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2638.473747][ T817] device bond0 left promiscuous mode [ 2638.495257][ T817] device bond_slave_0 left promiscuous mode [ 2638.501513][ T817] device bond_slave_1 left promiscuous mode [ 2638.508916][ T817] bridge380: port 1(bond0) entered disabled state [ 2638.562145][ T817] bridge381: port 1(bond0) entered blocking state [ 2638.568748][ T817] bridge381: port 1(bond0) entered disabled state [ 2638.576227][ T817] device bond0 entered promiscuous mode [ 2638.582506][ T817] device bond_slave_0 entered promiscuous mode [ 2638.588825][ T817] device bond_slave_1 entered promiscuous mode [ 2638.597247][ T815] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2638.614646][ T826] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:33 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440), 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8dda65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c) ioctl$sock_ifreq(r1, 0x8915, &(0x7f0000000080)={'veth1_to_bond\x00', @ifru_names='bridge_slave_1\x00'}) 04:32:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xa000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xe00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2638.903682][ T848] device bond0 left promiscuous mode [ 2638.919795][ T848] device bond_slave_0 left promiscuous mode 04:32:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xc000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) ioctl$FIGETBSZ(0xffffffffffffffff, 0x2, &(0x7f00000000c0)) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) close(r1) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4e21, 0x432, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, 0x1c) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r2, 0x10f, 0x82, &(0x7f0000000040), 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0x40a85323, &(0x7f00000001c0)={{0xbe, 0x3}, 'port0\x00', 0x4a, 0x1000, 0x4, 0x8, 0xff, 0x800, 0x0, 0x0, 0x9, 0x6}) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000080)={0x8, 0x81, 0x5, 0x2}, 0x8) r5 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) close(r5) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r8, 0x0, r8) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) r11 = fcntl$getown(r10, 0x9) lstat(&(0x7f00000000c0)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(r12, 0x0) setresgid(r12, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0x0, r12) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) r14 = fcntl$dupfd(r13, 0x0, r13) ioctl$PERF_EVENT_IOC_ENABLE(r14, 0x8912, 0x400200) r15 = syz_open_dev$tty20(0xc, 0x4, 0x0) r16 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000001900)='/dev/rfkill\x00', 0x42c481, 0x0) r17 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r17, 0x0, r17) r18 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r18, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r18, &(0x7f0000000000)=@name, 0x10) close(r18) r19 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r19, 0x0, r19) r20 = getpid() sched_setattr(r20, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x400, 0x7}, 0x0) r21 = clone3(&(0x7f0000001ac0)={0xc800, &(0x7f0000001940), &(0x7f0000001980), &(0x7f00000019c0), 0x9, 0x0, &(0x7f0000001a00)=""/58, 0x3a, &(0x7f0000001a40)=""/17, &(0x7f0000001a80)=[0xffffffffffffffff, 0x0, 0x0, 0x0, r20], 0x5}, 0x50) lstat(&(0x7f0000001b80)='./file0\x00', &(0x7f0000001bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getegid() sendmsg$unix(r5, &(0x7f0000001d40)={&(0x7f0000000280)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000013c0)=[{&(0x7f0000000300)="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", 0x1000}, {&(0x7f0000001300)="3a2e824eafe6dca175ffe25b9a192de24b57d77d77ca6c02de27ce4510159f686b253af9c6284d8b8c244baa1ec8864bd3f28d0b1219677477335222c59bc5896eabdc788ee22a7e035732285aab7f2413eda0c37e66cfcfdb10c6b04e2e05488366939e0a30a3ea1d46ec1b23c39d11ccb80a5fe8b2e4cccd41afc3abbde69d603eccd129bc3e3b45bde1cd34a5673b5c2e6fb4e02417f0924742cc505d88b070ec2d01b807eefc3b914bd3c3f9c02e3c03e5e1492276c1da6a654f140fe6", 0xbf}], 0x2, &(0x7f0000001c40)=ANY=[@ANYBLOB="2c000000000000000100000001000000", @ANYRES32, @ANYRES32=r0, @ANYRES32=r7, @ANYRES32, @ANYRES32=r8, @ANYRES32=r0, @ANYRES32=r4, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0xee00, @ANYRES32=r12, @ANYBLOB="000000001c000000000000000100000001000000", @ANYRES32=r14, @ANYRES32=r15, @ANYRES32, @ANYBLOB="0000000024000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r16, @ANYRES32=r17, @ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r18, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32=r19, @ANYRES32=r0, @ANYBLOB, @ANYRES32, @ANYRES32=r2, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0x100, 0x10000}, 0x8000) [ 2638.948687][ T848] device bond_slave_1 left promiscuous mode [ 2638.958141][ T848] bridge381: port 1(bond0) entered disabled state [ 2639.025824][ T848] bridge382: port 1(bond0) entered blocking state [ 2639.038188][ T848] bridge382: port 1(bond0) entered disabled state [ 2639.047219][ T848] device bond0 entered promiscuous mode [ 2639.053011][ T848] device bond_slave_0 entered promiscuous mode [ 2639.059306][ T848] device bond_slave_1 entered promiscuous mode 04:32:33 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:33 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x60000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:33 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000000)={'caif0\x00', 0xfffff657}) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:33 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xe000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:33 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2639.414508][ T880] device bond0 left promiscuous mode [ 2639.420130][ T880] device bond_slave_0 left promiscuous mode [ 2639.435067][ T880] device bond_slave_1 left promiscuous mode [ 2639.455319][ T880] bridge382: port 1(bond0) entered disabled state [ 2639.495701][ T880] bridge383: port 1(bond0) entered blocking state [ 2639.502306][ T880] bridge383: port 1(bond0) entered disabled state [ 2639.512354][ T880] device bond0 entered promiscuous mode [ 2639.518099][ T880] device bond_slave_0 entered promiscuous mode [ 2639.524994][ T880] device bond_slave_1 entered promiscuous mode 04:32:34 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440), 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10400, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0xfffd, 0x20, @loopback, 0x406}, 0x39ba66e4ff6693f4) shutdown(r0, 0x1) ioctl$VFIO_CHECK_EXTENSION(r1, 0x3b65, 0x4) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xf000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x65580000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r3, 0xc0086420, &(0x7f0000000040)) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2639.813761][ T911] device bond0 left promiscuous mode [ 2639.822199][ T911] device bond_slave_0 left promiscuous mode [ 2639.828690][ T911] device bond_slave_1 left promiscuous mode [ 2639.835924][ T911] bridge383: port 1(bond0) entered disabled state 04:32:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x10000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2639.872284][ T911] bridge384: port 1(bond0) entered blocking state [ 2639.882146][ T911] bridge384: port 1(bond0) entered disabled state [ 2639.891312][ T911] device bond0 entered promiscuous mode [ 2639.898366][ T911] device bond_slave_0 entered promiscuous mode [ 2639.904759][ T911] device bond_slave_1 entered promiscuous mode 04:32:34 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:34 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x3) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000004e80)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="08cfa23c2f7850a10acf8c3d00c2998c14675dbebd0e2a00ab38616ac290927d4d4378c895c53139c231a32c22a79a2ac16fe93ca76cdfa41edc9d7f15d83f8378aebcf5f6cf6fa8e45ac8f4401f7f6956c749ba32d04f3d56142bc3c363fb0e87afdf84c7e05e", 0x67}, {&(0x7f00000001c0)="015fe3251f894116e8dd59e6e588bc4a660cf727a68c47d22041080dcb07cb36b74f17946d896673cb329749da0e93805782b4a2c80bd4e2735874bc2316e12b4874bdac6cbda21c19d61b6abe6514a0914deff684af0bf363f7a13e7ca80eb5a93d164625e95e6e9feb5213603910640fdf5eaa95ba74d028154838f9bc1741d5d5cbc8ad9577a7598004ed8b2576c3ca6d", 0x92}, {&(0x7f0000000280)="1f8ebd22aabfbed648c7988324b8af99836305e898ef2d1c34294ed0662ce76f1d758ac79d0240f838799a98b4e1b8bfc3b41cbff86f84811075da545060ab39042cbf7bf4ef3987deb31dd3668f777d16c942c4ae929948ecb207a50199856c5213b138fa818a266f221ed121528af765b7485a2e1bc0fe6eb03d7f81096abf990512ad5d8970657b8a7f0e4702fa30326cccfb28fef9e51ce99703e04e935fc90e2dfb5bc472616aece72edc2079138fd488af3621c458114a4795d79d37b1adf2601b69c4e68e84324b2dbe60ad6cfbf5048ba39b4492964dfa68b51f021768a9abcf0c1e87f79c106a3caabafa0e9be30c51a93d", 0xf6}, {&(0x7f0000000380)="92df5f36ea2ced8aa0796fc7c4d42e0ca2d48b2ba91002c79d94bff0848e644162d22254dc08f868e86a4e2fce5cd6ee4a9bb53526828643f83a349a1e7b3aa43c1a96f950d084458972bea58cfb26f11707f0c0c90f0f946e394f2d94980219359fccf27ef9df85e56b7ff327e23b53bc3e45a6c4331180ba716ff508ac8ad1a8848894b1e50744a83011f0f34cf9c1a05369a129a4958009ef4e54ca6815835727ff2420417da9e129c1f2f86da2c977b28b44ffcefcb69058e82e2b14afb87e18aaf1401c889b3fb40d7717800779a44ba678fdbdc0f2c4db3e744faa6f4acf995825e60639b3ce164593b0", 0xed}, {&(0x7f0000000080)="cc044a804a8c8c7ddc75dd6656f9968b1d68ecf04d8205e37e5765c66561501a19db541de357e990a7b9508a32823a43ac33227a222ec00eba018c612f013772f60b10389a02f156d68856a0422f96e6525a7b14dfbc3cfb13214f7cd217", 0x5e}, {&(0x7f0000000480)="12f061c1fe65fcece3f2c29318209cb4e274c63bbf2e9d5191e30feb6ae1c9b1b8c385a2187c428bce036f20441664a18da5728d3350870b820f723500e4046c4138694c70a9bc6068298074755d6f9bf4a4ca4c62a8c14084e33e8d5246c8a12b8e8e9c9e5847eca5d8538c405a54d01cb324c96c211067c85269b85184d2d6503afd7c378140e499e3283715eeb7b723cdafe3bd56c5047139c7e5b425f9cadee15a1f1739a580ca3e438d968335f5d0e59913a9569babd8d0a2d9b86483724b440d6a6012da6c2e8e878bbe739a61aeb2f1549405dcf0c2231471c0076c8fd9f283278e2a", 0xe6}], 0x6, &(0x7f0000004fc0)=ANY=[@ANYBLOB="400000000000000029000000360000005e0400000000000004010605020040010400000000c910ff010000000000000000000000000001c204000000060000001400000000000000290000000b0000000000000300000000649004cd0afae03f2c1ac3a6ad3cb806d8aa7cab28f2278b4bcaa3ef29d88ea59adb0a782ba3aa26728a15e40629fa18b092242cd2df7fd74f27f17f49a55bb33b797047bf"], 0x58}}, {{&(0x7f0000000680)={0xa, 0x4e20, 0x0, @rand_addr="713f0d1ed63d86cc321182689e4fab43", 0xffffffff}, 0x1c, &(0x7f0000001b00)=[{&(0x7f00000006c0)="fed2cbf632610057c2ccf4147649c2401c2ded6fa5211e023a8939d1b6332e1f0eb67b9b6775778cb46dd95cf717fb8fb177d7906b7c676e1d0d877b243eb26b980036c793179315c27757dbeddb82d7bd5b1642232c565ee4ebe2847c2a70f58ad67531d68f0a20c5f653793e5fb453c5032ffa387d20c903019c9cc01acf41bc36b1305ffae88015e5670f60e6f39306fbb68970e29c1c3d8429f2fc518e79a5a607923717e50827b0af1587c9b72e3773bfe00ad705e7ffd98a6042f8cc57d9568ef220648ab7df0bbdc82f4710e00ceb6ebec5e80e3d7f", 0xd9}, {&(0x7f00000007c0)="d1d6786d2c30ee06261da486632d32773f30bfc7", 0x14}, {&(0x7f0000000800)="d105d1f694ba2f4d974b41cebe72b169d6c1a24fad0ca6a37ff157ed0379400162dd85bc7b6ba28831108a6a11bcef4424c18c340f64fc889f", 0x39}, {&(0x7f0000000840)="20e2a1ce9c371b57ec52ef2d08f948a9de9f9ce1b859", 0x16}, {&(0x7f0000000880)="f3bf2504beaf0cb6dbb8444d2c35a4388750aba862f85e9149f25bfb478f6d8fc8315c8b40dd939a76fe4c", 0x2b}, {&(0x7f00000008c0)="83afea1259fc3b7ee49891535576c3d9a8ae589f9ff4e3adbfa89548770c8430179ca5df518820c8ae46fdbe4d3a5c4733d61ababcab32e0eb71a2dcbcf649ee3bb2b80b6d05da8c3af0f61c28e4d9d4b5e6421ef0c306c3c20b9b67ec112715356f50f3b51364da1fe082e6a3d242373453", 0x72}, {&(0x7f0000000940)="c9ef3d0407f5b7ee61a088cc5777b8c1375330f3e3db599e413d94abe917e1be774d5e8673e61874005b2e0111dd48580e1af3fd8378a17bcd082e14c1b07a90e05218ef359f73fb49eef3d27de9f1ab12a545ffc2d77964f35fa95b640a292db3d42b5a2b463deb8dfcf6f141cb805aa76a6b890a89a7af77af2c8d67057c6521f124387abf3662011d6692a819020212be6ffca150f299b34918fe381cc46e5014360e950f68e3c1f22b47c5bbe01bc332", 0xb2}, {&(0x7f0000000a00)="a8cc0f0b231845da14fdba3e64a29f6ca114017067b3a617c1fc3e38d6a3d67548180d9285540f00a90c84ab658fdf00f425166061fa9eb8e8debbb1ddd6047e424d974b0c10964a55b80316fa586e25dc387014b5de54", 0x57}, {&(0x7f0000000a80)="dbaf1b7db7a9adfc4926798690f40727cd49000a5e2a569a3aa918437baac2a242016f19b660ca750a9465e6e5e01c9b1187552ad30a6ee76040b6176c9312688e61b6ca861b658e792267927935aa1c68eb43650ce7a0114a69c4563e159457c079f5a3eaccddb013ad2f4ca3fee86eff4bfe58", 0x74}, {&(0x7f0000000b00)="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", 0x1000}], 0xa, &(0x7f0000001bc0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x3c, 0x6, 0x1, 0xc6, 0x0, [@mcast2, @empty, @mcast2]}}}, @dstopts={{0x30, 0x29, 0x37, {0x12, 0x2, [], [@enc_lim={0x4, 0x1, 0x7f}, @pad1, @ra={0x5, 0x2, 0x6}, @calipso={0x7, 0x8, {0x8, 0x0, 0x6, 0x7}}]}}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x2e, 0x2d, [], [@generic={0x1, 0x9a, "cdb17f7dcf1a116fe3b4719db2d2ddba4862962a9f14cd823d4a3903bbe5386e24f57f6d1ec87e7afb303daf9ecfe3fe71cf48272458264484a435ff89905baf1b4d7a238d1eecdc99b019328747f4a7b9ab0d8a4aaab848ec6633ba2a6bdd72b3d5a4888fa51af70bd9df70116fe6c0b2c7f18cb9205f672a5d414cdd3581307312ad256ed8341d55f9d77ed24ca7da56777af73a3bcbe5fbf1"}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @rand_addr="087cf0b979285b30a091fb824d02716c"}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x7}, @calipso={0x7, 0x38, {0x9, 0xc, 0xfe, 0x101, [0x2, 0x8, 0x6, 0x10000, 0x6, 0x4]}}, @generic={0x9, 0x72, "351f028a1466ceeebd1bf9676301ee078d114234fe8c6e86494087213f5c4eeb59c605f46c9c01f3f79afaeb613e47cdcefb118a807f66f678778188ca3b1bfb11e714cad3c994723b6c33502acd4d27a8f6ba050639c73296859ec6828161c1d9afac406341f11e118df9da3230e864fdea"}, @pad1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x7}}, @rthdr_2292={{0x28, 0x29, 0x39, {0x73, 0x2, 0x1, 0x2, 0x0, [@initdev={0xfe, 0x88, [], 0x1, 0x0}]}}}, @dstopts={{0xf8, 0x29, 0x37, {0x33, 0x1b, [], [@calipso={0x7, 0x20, {0x11d7, 0x6, 0x1, 0x3, [0x4, 0xfffffffffffffffb, 0x3]}}, @generic={0x3, 0xac, "bc195ebc084726e8783b90606ddb3be710c56af3ca69c8a11d4ac045f1278659cd72158ccce0d6c34835e5dfbdac352ff25d25171b803850bf28e240ff4bd8cc543c15099d04eb848c6cf1533b9ac384bc74b1ce458c6327c1911da2fc1a73c886f618a3bd2d5bbbd5f89440609e86131302fbcec5c81e28d6fd6941db1f8d806da694d90d9d1957ea56a8cae6c9489badcd75fa835498fea31a8f1512f8b731525045ff507bd2489261b100"}, @ra={0x5, 0x2, 0x2}, @jumbo={0xc2, 0x4, 0x6}, @pad1]}}}], 0x338}}, {{&(0x7f0000001f00)={0xa, 0x4e22, 0x29e, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xf6}, 0x1c, &(0x7f0000002300)=[{&(0x7f0000001f40)="87c64f6a3553d9cb796247e331b6150a48b866705034771ee2e8bfcb7c616128839f093b3004f1377f9a339d6e847fcfd2956ba05f830aea7529a78e13d57ddd3ea25c6b5a23729062a39ee5f617213f183ecf61af44ec0dc608acbcbf39317998502a1346201e0a209771f2c9e88313e191475b1a57ad82c0c709a5848fe870f5a86c520295fc0e72c58a6953d1e5e383a470c9d8d66f9d0a4bee1bec1898a1deae7f27b60292ad52d5b10da513c440000a90d244d1", 0xb6}, {&(0x7f0000002000)="42bd1ce2ffbd76b9a4e4410310cf63011066da33a2a6fe9c5c383f5392ac93ebaa41d73dfefdb3f4eb5ef5b7379ab82b9ef8430ba83b65bfac2c9f003800e08fc5bf95d7de39423790a5489c", 0x4c}, {&(0x7f0000002080)="5baedaa64d3c0f3fe91e4bee30b7d53a8c5311f32394f7062959455f4b83656082e0d2309041", 0x26}, {&(0x7f00000020c0)="8ce9d8815799013912aa730d843aea", 0xf}, {&(0x7f0000002100)="70306b6597af78dad9d0cbd4b4d1f9bd61ca020eb6eb693ba4e2cfd792b0e1d559cb44db29144998a7eb2e9265a561ce5a61f5101323c6fa1c9329a9a997c13d03747813b6cae7b082e115f0564b308f7c176d89c7783a67a8b31417d70b0afe3d3cee623b7de00f3750d1f7564e14de7284dc19ae2d8b2670368754c48cd8d7e40e5ada52bc37c64989d352f9117d29a1b6b4df14ef6538286c5045a2180f25be356b356ac1476517d0d23f5d527afe71f7b206608149c7ce4174ea16854c2c9a4695120d7ea91da9eb80a8200b802c531611d9257bf4ad", 0xd8}, {&(0x7f0000002200)="522137a04f9e3f76b725b55e9ca454d595ebca24261cbbbce0355db460fbed8f0a0de72e04579c46ec4dd8b920b5e3ba4a8e24166c8c45099f6a7c9bc010af48825c7a2163f2b5a3cd8819334c6c5bf7da1f4b1651268e4363be11d31514084d571504af9dff5f532d90ad576468a113f97c3e02619d877f6388df7175c4585ef32ff9a79bea9f8afdeb6a16205ebfd5532f15da6cae8228fb29442a9dcf70824b90a679272492a3e63a459e7ef058b99a3555d333f13bbcdd9a1ac6dc4bd9714347a27ecf2c37b2c351da7ace8cfa5134c94788d9fd95a5093fb5b0", 0xdc}], 0x6, &(0x7f0000002380)=[@hoplimit={{0x14, 0x29, 0x34, 0x2}}], 0x18}}, {{&(0x7f00000023c0)={0xa, 0x4e22, 0x73, @ipv4={[], [], @loopback}, 0x2}, 0x1c, &(0x7f0000003600)=[{&(0x7f0000002400)="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", 0x1000}, {&(0x7f0000003400)="6e7512c567088a400103d706d618eeb0380da03d0f80a2c467b348c90367caf886cf0c17741591b9ef8e60d3202a0625bdde046aa77f0b149d510fa3bd5d7f120137d84e6c3aee8084802c324385013f260d05881764424df13536432410c37780364d78ec6f52c2265ce22f5f3265fed8419016be3b68180d0b2fc84a7b1eddad8e3b39b14969e204e4a007be28d6d842c74265504e52f148f66d1a65cf3fcd3f5b6bb2d146200aee79f4bafaa1282968c1d0b51791de44a61ab114e4a8f8147651750bcdcf52c3c5dede4e32ad37de7175d6676f54850e777d", 0xda}, {&(0x7f0000003500)="6a4d0f41693f34368b9ca1e22a5272b9ed5bdac4ba51b2aa6eec348bcd3ba7fcd2d1f7e55a148fa2493e211af69579ccf4b7744f0cb1d8c49ed2f1597a5009dfae78a3049490a625954a4489ce2be3dece97ceab96d0a0e454536cc9a1e6d4efd3325163f667f74cc6a634dcfa5a655060ace9ea25be9d0f84f7f538077ad39ff5e4a3e06a1af2fb0446e0b98da79054e8ed73a571328f953690a556e27339201c24fca61fcb313e0712616267acfd9e0821c42400c27c3874db0437003331392711db2b0c65cdef8c88a22f193f508ba4c84ed1d95dbfe8554721c45fa25be77a64304056a19987f13e632e3c226985ef83b9efc2", 0xf5}], 0x3, &(0x7f0000003640)=[@rthdr={{0x88, 0x29, 0x39, {0x6, 0xe, 0x2, 0x40, 0x0, [@dev={0xfe, 0x80, [], 0x2b}, @empty, @mcast2, @mcast1, @mcast1, @local, @mcast1]}}}], 0x88}}, {{&(0x7f0000003700)={0xa, 0x4e21, 0x2, @rand_addr="2f766a9eb753a4c65dc4feaf3db1b5a7", 0x8000}, 0x1c, &(0x7f0000004c80)=[{&(0x7f0000003740)="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", 0x1000}, {&(0x7f0000004740)="ec5fc5bba15e877be267ebc7f3472e90f3ac18cd567924a6396aaec4d536b979ea5cecc1d3bfde258beaca3ece95b900319c7d6419c61a6ffd843a33181ec2462b47fa7d43529a0fc4da464236ca34f60ae84c418bd8532dc73c68d0db14e66ed5d2c176317cedd99eb51e489687ffa53d18d22eda1a665aa47e42d52bd8ead155e655f91c732519eb45ec7ac552d7558956c8a7b92b621aeab11edd48096147300f5724b7697baa79b329a6be6777317ed10a46d945ce75a7727afaef38b7b0ea8ffaaf23c577261091cca5ac00ed99bda4719d392caa347687110162e952b754a9ead9df7d5d9bb4c04d0589dc99aeeb0997a176ed", 0xf6}, {&(0x7f0000004840)}, {&(0x7f0000004880)="da33a9f9805e5edb2bdbd16d4822a5c59141d563bace172e66e0ddd2ae2e4387a27ccd3ff19433ebb79fde60f5b96110bf3aef33c3db182647255bc6e9a9a052fa46503d489e92caad1fbfc7393f45f36e23a112517c40240e47a6d9be2f06d8b942671387adfec9f060ea09cd", 0x6d}, {&(0x7f00000049c0)="69f395d38c094cf52b45f483c71077878884efbbcfc3f0df166d72233fdc85bc317bc24086513b922f8f3e20d8cd469824b6ad427e08340baed1f80834de3d465c4984b78a4c0adc82e5b0f7076706a07f6669fcbf323d6b30b2f79647f2cc64ba5835b1cb95fa4ffd80135287c0e1191856a9e4fc0e5d91cd1cdfa49aa529fd1ba1a1feb9fb1f39df1976b6bc5df042ce2fc8e535121e5d5a90e60a3e713f67022f4cf3dab9a1247665edd45d0bfb9d79b79c66428b47bdadf7ccc36a480d18a7748baf9d91862eee5f8a1410ec00616ecf60ed77d99e979e19d5b3d65912aa208e1e0e2b5a323d7476a13ef61329", 0xef}, {&(0x7f0000004900)="1a8e711738e18295c38941a9f7f920e7d25abf9f7a5443140623737c", 0x1c}, {&(0x7f0000004940)="236c7f3079cb1fb4096a806d924f461c428520574d2709a630dc6fa8790f9edaf3c2ee8880ce", 0x26}, {&(0x7f0000004ac0)="9e03fa1f107d6259acb72bca4abfe402ffc0449cae195a43b859894bc33b5870be4fac26af9d277f0ba61592611885960c9c1489c8f73ca52a8b97218f16c32299ff98733aa76cf0ab333ac5b517bd3037c956b98272077de8d10d101fd7a25bc3f06ae603aeaa466146b63f58f7a229068d7db96c2e9fb9e03682d569c5e9ed8cfe652ab0a79e6751590ab42880ea572c424a7b4a7001fa2be059886a65ab4cfb3ed45df1893d077d4cf70e7b15857855e3ea7cc6ecdec9889e6c8a365e1845e4ea609cd9bbe10e80", 0xc9}, {&(0x7f0000004bc0)="459fc25f6771b784319975ed27c3eff38a32f32275fcdcd48d94301656305b48a0134410d0542a0de5498c6d7fcdbfea17d52865f816afed6c7ec17c06146ac8a4dcc78ca35c3201f8c9bfca6c33642a943a20ce0bcdd0658c180cf0174563d640ee814cf3855f23ad3822173adb6a05717785f8ba4b789a46f973ffe6b0dcd3b4bea6014372cdde0b", 0x89}], 0x9, &(0x7f0000004d40)=[@rthdrdstopts={{0x80, 0x29, 0x37, {0xe8f0a6641b38f0d2, 0xd, [], [@ra={0x5, 0x2, 0x100}, @jumbo={0xc2, 0x4, 0x8}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x10}, @calipso={0x7, 0x50, {0x0, 0x12, 0x7c, 0x8001, [0x8, 0x8, 0x8, 0x1, 0xaaf, 0x9, 0xffffffff, 0x7fff, 0x2]}}]}}}, @flowinfo={{0x14}}, @hoplimit={{0x14, 0x29, 0x34, 0x5fb2}}, @rthdr={{0x28, 0x29, 0x39, {0x32, 0x2, 0x2, 0x10, 0x0, [@mcast1]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x3}}, @flowinfo={{0x14, 0x29, 0xb, 0x5b}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}], 0x120}}], 0x5, 0x9b5cbc91b9b08c5e) 04:32:34 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x68000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:34 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x4aaff1db, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2640.356475][ T942] bridge384: port 1(bond0) entered disabled state [ 2640.403002][ T942] bridge385: port 1(bond0) entered blocking state [ 2640.416547][ T942] bridge385: port 1(bond0) entered disabled state [ 2640.461579][ T959] bridge385: port 1(bond0) entered disabled state 04:32:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x60000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) open(&(0x7f0000000000)='./file0\x00', 0x0, 0x42) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:35 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440), 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6c000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2640.726300][ T971] device bond0 left promiscuous mode [ 2640.749144][ T971] device bond_slave_0 left promiscuous mode [ 2640.761655][ T971] device bond_slave_1 left promiscuous mode 04:32:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) getuid() connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_SIOCDELRT(r0, 0x890c, &(0x7f0000000000)={0x0, @llc={0x1a, 0x1b, 0x7f, 0x9, 0x1, 0xfc, @local}, @tipc=@nameseq={0x1e, 0x1, 0x1, {0x41, 0x1}}, @ethernet={0x1, @remote}, 0x2, 0x0, 0x0, 0x0, 0x9, 0x0, 0x6, 0x43}) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x65580000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2640.777601][ T971] bridge386: port 1(bond0) entered blocking state [ 2640.801753][ T971] bridge386: port 1(bond0) entered disabled state [ 2640.830224][ T971] device bond0 entered promiscuous mode [ 2640.867415][ T971] device bond_slave_0 entered promiscuous mode [ 2640.880884][ T971] device bond_slave_1 entered promiscuous mode 04:32:35 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r3}]]}}}]}, 0x40}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'veth0_to_bridge\x00', r3}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000004c0)={@empty, @mcast2, @mcast2, 0x8000, 0x800, 0x7ff, 0x800, 0x7, 0x20, r4}) r5 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg\x00', 0x90800, 0x0) read$rfkill(r5, &(0x7f0000000040), 0x8) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r7, &(0x7f0000000280)={0xb, 0xfffffffffffffd27, 0xfa00, {&(0x7f00000001c0), r8, 0x1}}, 0x18) 04:32:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x74000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x81000000, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:35 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x88a8ffff, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2641.233961][ T1007] device bond0 left promiscuous mode [ 2641.240184][ T1007] device bond_slave_0 left promiscuous mode [ 2641.246471][ T1007] device bond_slave_1 left promiscuous mode [ 2641.253431][ T1007] bridge386: port 1(bond0) entered disabled state [ 2641.303160][ T1007] bridge387: port 1(bond0) entered blocking state [ 2641.309732][ T1007] bridge387: port 1(bond0) entered disabled state [ 2641.321264][ T1007] device bond0 entered promiscuous mode [ 2641.328126][ T1007] device bond_slave_0 entered promiscuous mode [ 2641.340080][ T1007] device bond_slave_1 entered promiscuous mode 04:32:35 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x7a000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:35 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000)='/dev/udmabuf\x00', 0x2) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980), 0x0, 0x0) 04:32:36 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61", 0x60) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4c00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x9effffff, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x400) [ 2641.748651][ T1053] device bond0 left promiscuous mode [ 2641.756606][ T1053] device bond_slave_0 left promiscuous mode [ 2641.773746][ T1053] device bond_slave_1 left promiscuous mode [ 2641.780602][ T1053] bridge387: port 1(bond0) entered disabled state [ 2641.822024][ T1053] bridge388: port 1(bond0) entered blocking state [ 2641.828521][ T1053] bridge388: port 1(bond0) entered disabled state [ 2641.845088][ T1053] device bond0 entered promiscuous mode [ 2641.851196][ T1053] device bond_slave_0 entered promiscuous mode [ 2641.857591][ T1053] device bond_slave_1 entered promiscuous mode 04:32:36 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x7e040000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:36 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xdbf1af4a, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000300)='/\x00\x00\x80\x00', 0x9, 0xf3ae582b5d2dc1c9) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/amemthresh\x00', 0x2, 0x0) ioctl$SNDRV_PCM_IOCTL_USER_PVERSION(r2, 0x40044104, &(0x7f0000000380)=0x100) r3 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x82, &(0x7f0000000000)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000000)={r4, 0xff}, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000040)={r4, 0x9, 0x20, 0x1, 0xff, 0x40, 0x1000, 0x2, {0x0, @in={{0x2, 0x4e23, @local}}, 0x9, 0x0, 0xff, 0x200, 0x1f}}, &(0x7f00000001c0)=0xb0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r5, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x29}}}}, &(0x7f00000002c0)=0x84) 04:32:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5865}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2642.125081][ T1078] validate_nla: 15 callbacks suppressed [ 2642.125108][ T1078] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2642.144709][ T1088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2642.162592][ T1088] device bond0 left promiscuous mode [ 2642.168027][ T1088] device bond_slave_0 left promiscuous mode [ 2642.177743][ T1088] device bond_slave_1 left promiscuous mode [ 2642.191153][ T1088] bridge388: port 1(bond0) entered disabled state 04:32:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = dup3(r1, r0, 0x100000) fsconfig$FSCONFIG_SET_FLAG(r2, 0x0, &(0x7f00000000c0)='mand\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040)={0x7, 0x9, 0x2533000, 0x8, 0xa3a}, 0x14) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) chown(&(0x7f0000000140)='./file0\x00', r4, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000580)={{{@in=@multicast2, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xfffffffffffffdc0) chown(&(0x7f0000000140)='./file0\x00', r5, 0x0) r6 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r6, &(0x7f0000000000)=@name, 0x10) close(r6) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000200)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000001600)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000015c0)={&(0x7f0000000340)={0x1280, 0xd, 0x6, 0x8, 0x70bd29, 0x25dfdbfc, {0x2, 0x0, 0x9}, [@typed={0x8, 0x7, @uid=r4}, @generic="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", @generic="663fe2dd82115cf35e98c11542bf3268dd93b88356e7401f6317ab9f5f3f27d8aaf83028171b00df772bfa4771384596f6c6a52eca201d1dfdcff12992f184c5f30ddf0decc652d41680b4a743e147d92cf8a2806d6dbb3e813b4fac5490065033ee09917e2912a28d9d100e05ff6f1d82931a675c21220f1fd44abe7acf77d04161b585ee266cfe1c68021150077ec09a401761ce9a4e4e79ea09bc382688ce7b755f3801e22be23e65d648a320d849eae8fa53add365daf104e0ca9976fb", @nested={0x1a4, 0x27, [@generic="e5ac7b5fd6a00c16314a433977b32505455adc158fda3cd21a790b3160dd5da071fca141d640fc25cb1eac70d2bbd860a9c1bf4804a9e7906727eb1d7ee663c8ec61f76fc18e32c981211804540740f4625d3f0a2cb82bf2568de5b182e3a8164b5b8530b6e7aac1a192d616db0671a512ed7e501ce9a5d05adf1554f44a4b097b1ecabdfd5387e6baa6a81013f139a14da9c75059677fdc099a9cdaba9b3002eb9422", @typed={0x8, 0x72, @uid=r5}, @generic="b9df4722e7cfa4a46577d12d2e2f789113f1255117d8f659abbce8edddb65e81397c835f5910791465f10a1d1e50776ec7104f1cfad943ef071c2a05fc8191d897191821a2dfc7e17139bce98cf9561d152c93", @typed={0x8, 0x96, @uid=r7}, @generic="fb1f4d2fc427d0fe6c612bf0350f88e9d5a96b2adcb5b2c65068e0598ac16e8b0b47b8f5ec3b5eedc8da896756e2fd88db77a644e479b265f3917faefb0425873c9d157ac0baec12200f65885c2d34128dcd289316a946e54494221e21a404b71f2da7563e2149f4db9d45609e69937141780827ed2ddf5421bf739268262af58d6bf5ff722b0fd7bc832698980da1d3ff83c1e1667d48"]}]}, 0x1280}, 0x1, 0x0, 0x0, 0xc0}, 0x20880) socket$kcm(0x29, 0x7, 0x0) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) ioctl$PPPIOCDISCONN(r8, 0x7439) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r0, 0x0, 0x7, 0x13, 0x40}) r9 = pkey_alloc(0x0, 0x2) pkey_free(r9) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x400000000000249, 0x0) [ 2642.234563][ T1088] bridge389: port 1(bond0) entered blocking state [ 2642.257922][ T1088] bridge389: port 1(bond0) entered disabled state [ 2642.265946][ T1088] device bond0 entered promiscuous mode 04:32:36 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e24, 0x40, @rand_addr="e1e0d0ea7e547df32a265c5958814530", 0x9}, 0x1c) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_GET_PIT(r3, 0xc048ae65, &(0x7f00000001c0)) ioctl$SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000000)) ioctl$KVM_DEASSIGN_PCI_DEVICE(r3, 0x4040ae72, &(0x7f0000000140)={0xf1, 0x2, 0x7, 0x0, 0xfffffffe}) sendmmsg(r0, &(0x7f0000004980), 0x0, 0x80) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = fcntl$dupfd(r4, 0x0, r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r5, 0x12, 0x2, &(0x7f0000000040)=""/90, &(0x7f00000000c0)=0x5a) [ 2642.280401][ T1088] device bond_slave_0 entered promiscuous mode [ 2642.286826][ T1088] device bond_slave_1 entered promiscuous mode [ 2642.321015][ T1092] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:36 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x81000000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2642.505125][ T1113] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:37 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61", 0x60) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) r1 = openat$full(0xffffffffffffff9c, 0xfffffffffffffffd, 0x400, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="4000000010003b0e00"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000008001000000000001800120008000131736974dd7e4e08000c000200", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$xdp(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2c, 0x2, r4, 0x6}, 0x10, &(0x7f0000000380)=[{&(0x7f00000001c0)="7455652ee9656d1ddf2a317024bf764ce8202904444fca5692f7f89a230f3efbd908061b349f0f06a457d44bddd65258af761e88d5593f2ca0bf07b27f675e9d46e22d99739aa05050f3238bf253f8139349da4fa261fb51421c69bf0d48b6e039ffe29f271f8891328659ea5b88525ada8b881b34d10e49b4f8ff237686f52288037af1466ca6c675af3fbc57376001c10b28f6a8f1e0c6ddff34e5ec7b64cfe5232d99c482fb89d0d5e03a11418fab70dd2cdb74b77ba0201b488416eaf9fe421f7e1648cfc9309452e1c6d0063757bd", 0xd1}, {&(0x7f00000000c0)="40e672a7627899d624e00396883bd12cbef2630a0d8bdc9a2586cd5c3261674148cd60edecd77b1cb0996013a5309738bad25fa5", 0x34}, {&(0x7f00000002c0)="755e4b4d56743d067e097c04e11dcc760a37df14ed7aaa88c0c1477354050430bee786820272b55d46ef48e8ed8971801acab4fc2f9143bd57d053b5c95fb58d8b0d06fb9c3b386951d60ac6f01d5210990091eb8a2ee692f3f5d25e728dd79416a52330172ff2dd68fe982fe9ed4e965ff2736321012a2ba6d49540", 0x7c}, {&(0x7f0000000340)="94691de864256ff3d103e3352194bc5ad4a0e7765dc28fe8d669b5cbc66f75a24dcb8b33", 0x24}], 0x4, 0x0, 0x0, 0x10000000}, 0x4b842c85d8ce3f47) r5 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r5, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r5, &(0x7f0000000000)=@name, 0x10) close(r5) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x1, @ipv4={[], [], @loopback}}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xf0ffffff, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2642.574750][ T1118] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2642.670020][ T1127] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 2642.679733][ T1127] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 2642.792033][ T1129] device bond0 left promiscuous mode [ 2642.802711][ T1129] device bond_slave_0 left promiscuous mode [ 2642.813210][ T1129] device bond_slave_1 left promiscuous mode [ 2642.823707][ T1129] bridge389: port 1(bond0) entered disabled state [ 2642.882149][ T1129] bridge390: port 1(bond0) entered blocking state [ 2642.888602][ T1129] bridge390: port 1(bond0) entered disabled state [ 2642.895896][ T1129] device bond0 entered promiscuous mode [ 2642.901471][ T1129] device bond_slave_0 entered promiscuous mode [ 2642.907657][ T1129] device bond_slave_1 entered promiscuous mode 04:32:37 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x88a8ffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x0) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0xf}, 0x5}, 0xffffff85) shutdown(r0, 0x1) openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x400, 0x0) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e21, 0x1, @ipv4, 0x3}, @in6={0xa, 0x4e21, 0x6, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x3}, @in6={0xa, 0x4e21, 0x8000, @rand_addr="620224bfc03acb6fca11d1f1225fdaae", 0xef7}, @in6={0xa, 0x4e22, 0xf2a, @dev={0xfe, 0x80, [], 0x1f}, 0x6}], 0x90) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xffffa888, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6558}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2643.091583][ T1153] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:37 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xffffff7f, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:37 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) ioctl$FS_IOC_GETFLAGS(r0, 0x80086601, &(0x7f0000000080)) connect$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast]}, 0x48) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2643.177411][ T1167] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:37 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x9effffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2643.254880][ T1169] bridge390: port 1(bond0) entered disabled state [ 2643.322276][ T1169] bridge391: port 1(bond0) entered blocking state [ 2643.328845][ T1169] bridge391: port 1(bond0) entered disabled state [ 2643.415888][ T1187] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2643.508976][ T1192] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61", 0x60) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) ioctl$int_out(r0, 0x2, &(0x7f0000000000)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_FMT(r2, 0xc0585605, &(0x7f0000000040)={0x0, 0x0, {0x3000000, 0x2, 0x2022, 0x4, 0x6, 0x2, 0x2, 0x6}}) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xffffff9e, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6800}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2643.673231][ T1203] device bond0 left promiscuous mode [ 2643.687567][ T1203] device bond_slave_0 left promiscuous mode [ 2643.697690][ T1203] device bond_slave_1 left promiscuous mode [ 2643.705776][ T1203] bridge391: port 1(bond0) entered disabled state [ 2643.772219][ T1203] bridge392: port 1(bond0) entered blocking state [ 2643.778743][ T1203] bridge392: port 1(bond0) entered disabled state [ 2643.786395][ T1203] device bond0 entered promiscuous mode [ 2643.792575][ T1203] device bond_slave_0 entered promiscuous mode [ 2643.798957][ T1203] device bond_slave_1 entered promiscuous mode 04:32:38 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xf0ffffff}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0xfffffff0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6c00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2644.030935][ T1222] device bond0 left promiscuous mode [ 2644.036621][ T1222] device bond_slave_0 left promiscuous mode [ 2644.047103][ T1222] device bond_slave_1 left promiscuous mode [ 2644.055948][ T1222] bridge392: port 1(bond0) entered disabled state 04:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2644.083488][ T1222] bridge393: port 1(bond0) entered blocking state [ 2644.091545][ T1222] bridge393: port 1(bond0) entered disabled state [ 2644.099678][ T1222] device bond0 entered promiscuous mode [ 2644.105769][ T1222] device bond_slave_0 entered promiscuous mode [ 2644.112266][ T1222] device bond_slave_1 entered promiscuous mode [ 2644.130581][ T1226] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) set_thread_area(&(0x7f0000000000)={0x3f, 0xffffffffffffffff, 0x1000, 0x1, 0x2, 0x0, 0x0, 0x0, 0x1, 0x1}) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:38 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xfeff0000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:38 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7400}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:38 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x2, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:38 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x2000, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x101081, 0x0) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x1e, 0x2, 0x0) bind(r5, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r5) r6 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r6, &(0x7f0000000000)=@name, 0x10) close(r6) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, &(0x7f0000000300)=[r1, r4, r5, 0xffffffffffffffff, 0xffffffffffffffff, r6, r2], 0x7) recvmsg$can_raw(r2, &(0x7f0000000280)={&(0x7f0000000040)=@x25, 0x80, &(0x7f00000000c0)=[{&(0x7f00000001c0)=""/162, 0xa2}], 0x1}, 0x121) [ 2644.583568][ T1267] device bond0 left promiscuous mode [ 2644.588977][ T1267] device bond_slave_0 left promiscuous mode [ 2644.595961][ T1267] device bond_slave_1 left promiscuous mode [ 2644.604921][ T1267] bridge393: port 1(bond0) entered disabled state [ 2644.662490][ T1267] bridge394: port 1(bond0) entered blocking state [ 2644.669100][ T1267] bridge394: port 1(bond0) entered disabled state [ 2644.676462][ T1267] device bond0 entered promiscuous mode [ 2644.682568][ T1267] device bond_slave_0 entered promiscuous mode [ 2644.689075][ T1267] device bond_slave_1 entered promiscuous mode 04:32:39 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) recvmsg$kcm(r0, &(0x7f00000000c0)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000002440)=[{&(0x7f00000001c0)=""/185, 0xb9}, {&(0x7f0000000280)=""/4096, 0x1000}, {&(0x7f0000001280)=""/165, 0xa5}, {&(0x7f0000001340)=""/193, 0xc1}, {&(0x7f0000001440)=""/4096, 0x1000}, {&(0x7f0000000080)=""/53, 0x35}], 0x6, &(0x7f00000024c0)=""/200, 0xc8}, 0x40002162) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:39 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7a00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x4, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2644.991417][ T1298] device bond0 left promiscuous mode [ 2645.002766][ T1298] device bond_slave_0 left promiscuous mode [ 2645.051248][ T1298] device bond_slave_1 left promiscuous mode [ 2645.062727][ T1298] bridge394: port 1(bond0) entered disabled state 04:32:39 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) clone(0x10000000, &(0x7f0000000000)="0ae8aaf722afdcbf594f4a226587bda9208daa3539b1e53ac75150fdf81afe419f71", &(0x7f0000000040), &(0x7f0000000080), &(0x7f00000001c0)="5d3e648ccdaf4c87f99b64c4c0dd38afc1216dedaf6f53c2cc7de394044d7497d68398b480d47807eb332ccd5fb43a19803b6f0e56d3034b635dff61814fc091e455df5c25b38659c7f4652cd5fa9b8e9dd562bf76a607a7f7fc349539238648474a76a7ff7076c2379e6fcbeb4568890d7d8bc2de300c54c41007de1bad2085c428ffdabdc5297efbbe20229b14071acbbc5e75ebcde1e1d32f7aa38e8623") r1 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) close(r1) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000280)={{{@in=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@local}}, &(0x7f00000000c0)=0xe8) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x1, {0x1, 0x0, 0x4}, 0x7b}, 0x18) [ 2645.122074][ T1298] bridge395: port 1(bond0) entered blocking state [ 2645.129212][ T1298] bridge395: port 1(bond0) entered disabled state [ 2645.151596][ T1298] device bond0 entered promiscuous mode [ 2645.157274][ T1298] device bond_slave_0 entered promiscuous mode [ 2645.163921][ T1298] device bond_slave_1 entered promiscuous mode 04:32:39 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:39 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffa888}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:39 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_GET_CPUID2(r1, 0xc008ae91, &(0x7f0000000000)={0x2, 0x0, [{}, {}]}) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r2, 0x1) sendmmsg(r2, &(0x7f0000004980)=[{{0x0, 0x351, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x40b}], 0x100005da}}], 0x40000e3, 0x0) 04:32:39 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x6, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:40 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8100}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:40 executing program 2: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x4e21, 0x7f, @mcast1, 0x20005}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a2ac8d8a65dbe4ebfc0185a95d481000000d558706640a6bca0", 0x28}], 0x1}}], 0x400000000000336, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x800, 0x0) write$P9_RXATTRCREATE(r1, &(0x7f0000000040)={0x7, 0x21, 0x2}, 0x7) 04:32:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xa, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffff7f}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:40 executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup2(r1, r2) r4 = fcntl$dupfd(r3, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = open(&(0x7f00000001c0)='./file0\x00', 0x80040, 0x0) fcntl$setlease(r5, 0x400, 0x0) utime(&(0x7f0000000680)='./file0\x00', 0x0) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r6, 0x1) sendmmsg(r6, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2645.897309][ T1361] bridge395: port 1(bond0) entered disabled state 04:32:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xc, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2645.952487][ T1361] bridge396: port 1(bond0) entered blocking state [ 2645.963371][ T1361] bridge396: port 1(bond0) entered disabled state 04:32:40 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xffffff9e}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:40 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143a", 0x90) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:40 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000d80f80)=@generic={0x1e, "0103000000000000000000000000000009a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f1314a8ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c8b9f70dc136cb184a"}, 0x80) close(r1) sendmmsg(r1, &(0x7f0000004980), 0x0, 0x0) 04:32:40 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x1000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:40 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xe, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2646.375383][ T1404] device bond0 left promiscuous mode [ 2646.380886][ T1404] device bond_slave_0 left promiscuous mode [ 2646.386958][ T1404] device bond_slave_1 left promiscuous mode [ 2646.393416][ T1404] bridge396: port 1(bond0) entered disabled state [ 2646.452095][ T1404] bridge397: port 1(bond0) entered blocking state [ 2646.458665][ T1404] bridge397: port 1(bond0) entered disabled state [ 2646.482847][ T1404] device bond0 entered promiscuous mode [ 2646.488445][ T1404] device bond_slave_0 entered promiscuous mode [ 2646.496111][ T1404] device bond_slave_1 entered promiscuous mode [ 2646.534629][ T1418] device bond0 left promiscuous mode [ 2646.540054][ T1418] device bond_slave_0 left promiscuous mode [ 2646.546224][ T1418] device bond_slave_1 left promiscuous mode [ 2646.552490][ T1418] bridge397: port 1(bond0) entered disabled state 04:32:41 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0xfffffff0}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:41 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r0, 0x0, r0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x23}, 0x8) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r1, 0x1) sendmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="12017326224d6158d41c3d0b44353ac7a070351d02783f0bee1321e17b54c0c9cc7875f86fac5e2bcb8b636d3c863451b19d36bc54ebd35f7b60833903b53e45083fbb2812f5da29ad1ac3a6ff3dd4b4fba83064f4", 0x55}, {&(0x7f00000001c0)="f8951fff85f71caee2a365c5f28a3c5340b8f6ff0479e4546c9354ab0ccb8037343f93a3d417a88686f8c1e7bb67df7d52e2f9eb0fb1ce7f98964965213e4f8640be0e6f47824156500428123cd193cc4771f9cf26f4a58fd3b68809a39de3a891ee5a67399a58d816c93977e88758e3d8259f44bdf4288623b64bb6519a15e5202a0ab719dc609038a7c8dc035af0ba0871e2c5d081796aed95a59e50162a9a13ea14d67b9f785f18aae48bbc8907ca275a2de8", 0xb4}, {&(0x7f0000000080)="bec664ff1b9438c103f3e966c50da56d08c0ae8eca1e03", 0x17}, {&(0x7f0000000280)="191fc034571accfd15115df8d3cb3bd64ace4265e149b5b3635d66941c886c526f19345893c8f07aca5cf5a248c8db20bc0ae1e47c90224d72939fd08a7929e96086cd9dfa70b3a61bbe79b7814be919c42544343acd6984f365e8fd893efa3556ec8c36e0e873a1de6e5a8e178e4948aff8e7c7b63d43889beea44ed05a9b6239fb7d024fc64996b22e3f710347e73b4cd381895f6e63bfda47889c049d75cb8642e2dd4df96e1b6b8f7d88b3c8f00bb829fbcafe9bd79d6a4601c235ad5d91896fedebe55f434f7659e66f254cc6608a8dc6", 0xd3}, {&(0x7f0000000500)="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", 0x117}], 0x5}}], 0x1, 0x0) 04:32:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xf, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:41 executing program 2: ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000000)=0x0) process_vm_writev(r0, &(0x7f00000034c0)=[{&(0x7f00000001c0)=""/233, 0xe9}, {&(0x7f0000000040)=""/176, 0x1b}, {&(0x7f00000002c0)=""/67, 0x43}, {&(0x7f0000003840)=""/132, 0x83}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/4096, 0x1000}, {&(0x7f0000002400)=""/186, 0xba}, {&(0x7f00000024c0)=""/4096, 0x1000}], 0x8, &(0x7f0000003700), 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r1, 0x1) r2 = syz_open_dev$media(&(0x7f0000003740)='/dev/media#\x00', 0x101, 0x14880) getsockopt$SO_J1939_ERRQUEUE(r2, 0x6b, 0x4, &(0x7f0000003780), &(0x7f00000037c0)=0x4) r3 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r3, &(0x7f0000000000)=@name, 0x10) close(r3) r4 = dup2(r3, r1) sendto$x25(r4, &(0x7f0000003540)="79f9201306a10aac24a8d117d7075d73ab333e0b69778ebc1414e76a71f65db39118b250730adfb4c87489f9dde1dca807465c35e592d85d881f0e33fc37e3717828a673c1120cbe50a66ec8a85b4e529acb35f39e2c2bd9822e35ddd5151f42e166500baa7b1ae64fd0d8113f966e8b7b8802854d3a8f2beb91a2982ee7dbecc91c35537668f3060f3278d809bb267ce8d44bacb29094ce8d59df3339a98b2d6dd88746e7fe26118c247c9deefe6ef9c1d822234afd9e58b18ba5057eb39774c874e16e252c7a", 0xc7, 0x0, &(0x7f0000000340)={0x9, @null=' \x00'}, 0x12) sendmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0xc5, 0x0, 0xfffffffffffffeb3}}], 0x1, 0x0) r5 = syz_open_dev$loop(&(0x7f0000000380)='/dev/loop#\x00', 0x0, 0xc042832dc973ebb6) r6 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r6, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r6, &(0x7f0000000000)=@name, 0x10) close(r6) readv(r6, &(0x7f0000003c40)=[{&(0x7f00000003c0)=""/2, 0x2}, {&(0x7f0000003640)=""/126, 0x7e}, {&(0x7f00000036c0)}, {&(0x7f0000003900)=""/157, 0x9d}, {&(0x7f00000039c0)=""/75, 0x4b}, {&(0x7f0000003a40)=""/249, 0xf9}, {&(0x7f0000003b40)=""/203, 0xcb}], 0x7) fcntl$getown(r5, 0x9) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000003800)=0x24d, 0x4) [ 2646.780942][ T1425] bridge398: port 1(bond0) entered blocking state [ 2646.788144][ T1425] bridge398: port 1(bond0) entered disabled state [ 2646.796057][ T1425] device bond0 entered promiscuous mode [ 2646.801851][ T1425] device bond_slave_0 entered promiscuous mode [ 2646.808382][ T1425] device bond_slave_1 entered promiscuous mode 04:32:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x2) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2647.070604][ T1453] device bond0 left promiscuous mode [ 2647.076628][ T1453] device bond_slave_0 left promiscuous mode [ 2647.083081][ T1453] device bond_slave_1 left promiscuous mode [ 2647.089432][ T1453] bridge398: port 1(bond0) entered disabled state [ 2647.122230][ T1453] bridge399: port 1(bond0) entered blocking state [ 2647.128773][ T1453] bridge399: port 1(bond0) entered disabled state [ 2647.136080][ T1453] device bond0 entered promiscuous mode [ 2647.141719][ T1453] device bond_slave_0 entered promiscuous mode [ 2647.147906][ T1453] device bond_slave_1 entered promiscuous mode [ 2647.163969][ T1454] validate_nla: 13 callbacks suppressed [ 2647.163994][ T1454] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2647.185899][ T1456] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:41 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:41 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x10, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:41 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @rand_addr="77dc872a2b76d5ccb4ede18ca414693d", 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r1, 0x0, r1) sendmmsg(r1, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x40000) 04:32:41 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x3) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:42 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x101200, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4e21, 0x3963, @dev={0xfe, 0x80, [], 0x23}, 0x7}, 0x8865be04a5ddd3e3) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x60, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000003080)=[{{&(0x7f0000000000)=@in6={0xa, 0x4e20, 0x10001, @local, 0x5}, 0x80, &(0x7f0000000300)=[{&(0x7f0000000080)="d3bf1e45ba3b9b056557ecec56101b65bb3c3244d41ae1be8fb2afe951703e9fa711", 0x22}, {&(0x7f00000000c0)}, {&(0x7f00000001c0)="1901d3f246b03f234fc44c0f4084db428b948dcbf5192cd76064da9a413844dff5a9e9ad5a7fa94e54e41f1799da603d2dfcc7156aea7522710a8f222144961641052d362d2d4198b1c484ef753116c5632f29f364f5fa16d5ab36727a60175ebe5e2fd80cbdea3e94bedb1db7d98fd33e88a406", 0x74}, {&(0x7f0000000240)="c735691f8924b2601fd8cefabe311cd17d2781b518511dddeeda2bcdef8f6d97f85ff3ce087b735542ad95d22868c7a368c1dd5437d86aacffe2235ad5273938bd8e7c6d715e55868db231f72c9441e126c3e2f999ae0de6f211b00d986b54331b8a03c36af489d0879c678dbd08aba128edba2abc175aac4a18f79a5cd289b735fdd9f3cf3926588d667fff0a1f2fd0202185870a75bba4", 0x98}], 0x4, &(0x7f0000000340)=[{0x58, 0x74, 0x3, "8b4bea9a4ffb558c601f5561a611066fcf2dfc3c03e80db2f0b261ebabfc555b85e9a9eef73263ec5254aa55b4fecb6a00ab27d58f16b36fa1cb7392d74e7ef550e34b6990928d"}, {0x60, 0x105, 0x800, "52d562e050b8a0816a397056b965342121451b1b6c1959b943a98537ea9407838ad4e2caf4c4b620505e5fc493aa8d13103d782a778a6dab22114b3b42460a927c20b225ac8350c6553c79418def73"}, {0x58, 0x88, 0x7, "3d1fcbd54edc53fd96e54a8ddd2bb5b280879638465c049a825fea1660c384c91d6e9aef638e13c8a68ce2970dd4638e9af67a17484b43008e1440d3949cbf59a92a"}, {0x78, 0x30c, 0xe30b, "454e6607b1e40055de10164a9454dc7dae34dee92859f92917aceea2a28bf966544930f243de19acfbc7d5c7f392f090c0a118d25a37db78d93586abbabdd486f8eb40ce196d70b438ff30f98a9e0d8500"/99}, {0x48, 0x115, 0x4, "b005918f8a644866cacace00d50cb1c001100b8d757aa53fd391db590dbc3d04a26e248d5f19e1958bab52a00569c2552c7010ea180ea1"}, {0xe8, 0x114, 0x7f, "03000dffcd66ef80ebae1dd7112fb2b7c8b55ee0ce049d658413712af42af0f7e37553918d4591c3dc9df8613b316e304b59eb299b6704a279fa6ba61827c74cfd61100931b8ffb118d5aa09ee3dee2f6b472c9be6e3b42de254867fc0e44af97fd0512971a56dd0dc7b77a3089cff7da69cef0930bdbbf9ec8d2c1f45fae3b05e1585e26369a76fc480949c64f77873c2ad7fed5fbeeb9730ed5c08ea290c1c49ee0aac32b15f5da52176c7d48b120cd913362c0af1af9d4669acb7210de2d23d00f8309cd72ecfa0a081271c9a9d58e639e01847"}, {0xe8, 0x117, 0x7fff, "000852f3bec8e2bea4774dd09287e247acb017766918265def573f24357d29b16b824811c9adb7058250414857887b2fbc44b685055183876e38f1b9db23766ee905bc40929847f39824afa31ea17a648f9764dcc887d8ce6f1a181361ddf18011ae28a2ddf5f416023073ed556392efdea653465083d400f528a79fd4877c0c96fcdf1b6d7aed733f58210220cf605943551b47e03f5d346a8e404a947f978b7aff7da32638d24237d02cae593ab645fad5df8c8df5cae7d6423c49b23cfcbd64f9b494a6af2e6da215d5feb18d516aaff5bb9133063e"}, {0xc8, 0x104, 0x7, "86dc8d579324d2cb53d5111a36fa7f2c9328b1b20f49e43df95970bf3c29524c8e2a493a7413e4252372718f6704a267c1a96ac618ffbd377eadd37c4c45b7cda59b57458285961228576f06c01c36360c041b5b80a34a366c87f24ee917069305aa814fd352599420f9f2c9e7b0ece88e4590d16ef155b0d5285111432fda7d712cef881a27dd37316f458472c80a8fb2221cf4ae5623122f6b8f502b6793fddd73b935d06e831dcd39d6518c50316b76cbe4b8d3fe01e5"}, {0xf8, 0x11, 0x3, "60d8a31cfb2ccbca71b8c5caf077a39ae5a7c9b1cdaddee85476a53817560406988b3f0d9f92df307937e1a744e9ffdf9749d39282f322d6b949aa0d22bcd96761fe04e2b9e55f74a61c2eaf5d2fc1b79a48517fb1ffea98d0f4ca950f050ef6925821d3ca78d95d50e932ffd6d139ede935d1a500412e0d9c7dabb1f2ac14f35bc923be2033fe5238e6882558edfaaf8c06e2c9ef43c9496452d8fd1c2f67a8db4a2b2044cb5e88228fa6cf51e7ac4ddcb61a4d7a042fe86d647bbeb1f43b820358b32d96ccfda5bad8f38adb8a95e79608af7816347756a5c2ad23348cd7c3ebc9"}], 0x560}}, {{&(0x7f00000008c0)=@in6={0xa, 0x4e21, 0x0, @empty, 0x10000}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000940)="7c00c69725940d6bed6d7c416e12b1aae7b1718b1645df2b4faa45db9f9f4577da9cdfb3fd21cb3eb8099516bda94a561b604003c73a7e0401b4ee3e41c81a4d113647d1db1425f788a9045077d82047a15c384d4725a90926b4ba2a5dac", 0x5e}, {&(0x7f00000009c0)="1b93b7812c99f20baa0f90e4e49b84872309aa0cb522108de5ef63d085ce9398633e4816162cbe2acf1661e768a5266207917a8d3d1b0341a8c8dddfc987061f2ab5944218db639b4c5829b058185beb940f5d3e25ce475eb8f81cdf11f68750c9fe739d77a177d5681d26729ea5481c5871641479d122061eab588025ed2c188e458a3f8be75c66dfe4594190f21f6b6df7ea45fb46c6ad2fd3ee298335b24d5c13ebfdb50150fcabb4e3c87cb988cc6d56776c4ee51eae1d47fab39a013ac50f8ea9bd858a639d18b4d48ec2bb3a2630bf", 0xd2}, {&(0x7f0000000ac0)="b11c6a1f9c85f4316280278ae35ed00110d09052e65ab50cacd32110372c3b2860170e3b80b1255938f9eabd57649a5bc84bcef0a531cdf8920ca784e841956a840f9744c26694eb7c27c495c29b893d2f5af13529d862b01d17672ae6326aecd0766937f1d33a4ec9", 0x69}, {&(0x7f0000000b40)="c177d901e43732f006f79e9664d0589fdcb47fdbe9cf2e305b5d38a6ea717dbf5e88369b75b87a5e8fca55ccfa2b58f6c940a1aa131e23865ac93a66f96f6cda79a46367", 0x44}, {&(0x7f0000000bc0)="2c77985230b2f30fe17d895488f0393564fb14c1e96c3d4b8cb1c248ce1dd56d7d80ba9a765febcc9ad6171be62365cbbb5da91e4b80113cfa0422741209be1239f8d28f9a310ae93d25c320142b4d11c14c41ab52ad84e6da0a33465b2cc9e8c443754657ab6d3a7f679f6d57160b988b8c1d836c6a29d4e7a75dc048934d858b7deec3d70320aa5c496da9f73de60d14cc44d013706ca88638e66360a939182d5b800fdf4298870598", 0xaa}], 0x5, &(0x7f0000000d00)=[{0x1010, 0xda, 0xb9, "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"}, {0x60, 0x10e, 0xe000000, "ac3c5ef70687a3d3f7ec7a41589647bad0ea34f699ca4bc3cdb240d132487681dfc21e5fe242f717e6eed581a8610d36c3cdecd23812b8273ca0e03737d830fa07207855e089dc918ca6c3"}, {0xc0, 0x10b, 0xc, "086776465a2b3cbb6ff95b40a116d4141d6774135748fc39d814914b07413dcdc04a966ea45adca56f2fe1029c0483c7a153c1410c5282b41eee08d2dc019ddc24efc13afb103d59d82198cdb829dd13328d21ca9866dec08a42a125fdb509085529f3c37550dd7f49cd784b1b85a5d050e66d2ccfd427594763790368a4d206c799f2ada41ec0712179e7d093e10048486bcceb9ef838622c3ab9a153b6a5ddd20fd845061d624aac78"}, {0x98, 0x119, 0x80000000, "b77c66fe50fe89123990f1a373000c93f50f2fb2cdbd61c26b52401724868ef7b9178e5eacb6956933bdfa24b6a4f2235d2026bb4c1adfa9417f9a8ff365f65e3f2755f812a8226f639727f29b6b3299c29d1a109393a10ed6521419ef428862d0d776a30f9066eba32cc5d839808f8741eb14c797a1a9bbf305753a8fbcc4de2d39ebc63542"}, {0x68, 0x117, 0x3, "445804636a388bc1f603c97268bac081d3acc8577646dc6fd456fdf09e730741b1cb87200c379b1fccb8f75e9d114606aaa6bbd02b650424ed7e1ab11d794a5523d2149624a06ba3e8ce1b2ab76eaf6adf78bfe8"}, {0xc8, 0x1, 0xfa3, "8b24fca4e5daf5d1adcc6ecb2c30b24f586201978defb569c68f7b270bfb0e39bcaf6cea35c84b69b3842afa88da8a2a40e8a1036b9d73c22ace0c18a69634c79762726d703ac677931483b789e4d69c8aabf211380b2abe63e98edd325a21f2c52fb81d5e555ece5a9dae956f621e1404f5b0574d638b42cdecde65b30f3aa2a20abf1a90702909030f07cf51677e5dc39475d4ce6476a7c63e88f3b7f864be6570c4f72f4a1631bc9b1bc6dd0b9b18a210"}, {0x10, 0x10d, 0x101}, {0x30, 0x0, 0x1, "583387768aae04359d83a36109f8ffffff0400ffff4c2bff0c00"}, {0x1010, 0x110, 0x4, "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"}, {0x30, 0x3a, 0x100, "a47988026f59233af05c746a53af162c25b4f1623016756d7a"}], 0x2378}}], 0x2, 0x0) [ 2647.692914][ T1495] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2647.705182][ T1500] device bond0 left promiscuous mode [ 2647.715695][ T1500] device bond_slave_0 left promiscuous mode [ 2647.728517][ T1500] device bond_slave_1 left promiscuous mode [ 2647.735765][ T1500] bridge399: port 1(bond0) entered disabled state 04:32:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x300, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2647.809086][ T1500] bridge400: port 1(bond0) entered blocking state [ 2647.820483][ T1500] bridge400: port 1(bond0) entered disabled state [ 2647.838259][ T1500] device bond0 entered promiscuous mode [ 2647.852819][ T1500] device bond_slave_0 entered promiscuous mode 04:32:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000000)="90f8d0331aca522b7925d0b0e2f3e74cd28ada5d79e018f4a9b08847116c44f066459dbe579e4ae494aa626ab3d330d0b4d6b173b87806407a4c3b47f030cb3d03fd88fcd2df5edec30aeb2ede82580a50aee3d0492863be0e794874e377531226e4f764b4ff09a3128d6d6b30c40514ea3d0843a55db5a07dd5b2fb09d128c25e96fcf96dc6516515ac7f637749be2af1f75b9bb1f2874aabbb20640e71877c843411ce540375c1f4e9f6549d067af7e16fb7484da6928efae476310269832817e10c13dcb3193ec39411f1ac31f111fb6586037c5c2a4cc5443e68dd7f59b6d1cfb4fbc5d5781aca06", 0xea}, {&(0x7f0000000140)="7ba0e3ddb1d27b63956c3b7e074ca997494d929a271a214128f077ab66334b", 0x1f}, {&(0x7f0000000180)="dfe2f20e43460facc189a19a9e2b4606857cc4b5ceda5b3c00a8088b0e4caacfceab96a4ab863a2c5036d68b9e9221b6e5abb62dfc7df1292ecfe21221dd00b927310de66d44c7fdc677888855cc0346564291644312d1b08e8bf3a572b965d9798e227f94b009ad0e33fa263cb631a55f92e8aebb8d9e1cf76e599e8fa1e36ba3cf75407d0ce97a7a32fe913c6eb742b1412e46beb4566b104c1a15439ffecdfbe7d7e428fb79b7662324006cc21808f8808b37dd23b10e", 0xb8}, {&(0x7f0000000240)="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", 0x1000}, {&(0x7f0000001240)="54b5ebaa6b58bb5d579704c334d8a19fa3e824f7331f3b94f4b09ef510e626d6a26d3264b922ac4ce2a3e178f1cc8958ad64567fdc5a0616796e95ad82c7d8ceda133fb7b554cb84085bd1cb244de6bb6ac78a11ab0ea4a0f42cfdcde6fad876bfb95874d7f424fb7b3c1dc0e654385ff8a36aacd8a624b8ddd659579257c9ee14db0ef0b2bef1cf2828434ee428b63dde9d80be2197ac39e1f491e291a8a6e701014c2f", 0xa4}, {&(0x7f0000001300)="b1f52ff2914631c65b99fabd511a0a6cab06569ce14bc9ed158f0fdb9c0690de1114c6db2c740212ab130bcb21ae99baa7a645b82f19bf51b3749c6f7450bb4e120c37a7b85a3a974cbb5a6aa0f2d7e14f1bab09e87324279b7044b88ceab956cd6cbdd23e3b3edd82817117ca065e53f0aad58870c183f23f0a1f23adb7c1c8560a9482ad528d783e1828ac5e464447091211c9f5fffb24e129f7e0c8db521e971540c21f4e1e163d50d7a04858f3033ff0ad44", 0xb4}, {&(0x7f00000013c0)="57300903851e525ff943a183d1ab5e3def7065ee043f62cba46a701df0bd83669a8337e025d8dcc3251624774b74b1bfa99d69eda287065197a2024b2e6fae5a7fa78e5e4e84155a6ea187189057222f61d0de726cb5b9ec1e0f12d378088036250824f64fadef837c8e78284f4a670dd8400d66578a95591fa1ff02bc31c77db4f90befd8f49d04bcaf821920", 0x8d}], 0x7}}], 0x1, 0x0) [ 2647.864749][ T1500] device bond_slave_1 entered promiscuous mode [ 2647.875250][ T1507] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:42 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:42 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x5) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:42 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x400, 0x7}, 0x0) clone3(&(0x7f0000000300)={0xad1d6b1c1e6843e3, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), 0xa, 0x0, &(0x7f00000001c0)=""/250, 0xfa, &(0x7f00000000c0)=""/46, &(0x7f00000002c0)=[r1], 0x1}, 0x50) 04:32:42 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2648.250727][ T1537] device bond0 left promiscuous mode [ 2648.275119][ T1537] device bond_slave_0 left promiscuous mode [ 2648.285758][ T1537] device bond_slave_1 left promiscuous mode [ 2648.299350][ T1537] bridge400: port 1(bond0) entered disabled state [ 2648.352736][ T1537] bridge401: port 1(bond0) entered blocking state [ 2648.362428][ T1537] bridge401: port 1(bond0) entered disabled state [ 2648.369835][ T1537] device bond0 entered promiscuous mode [ 2648.384018][ T1537] device bond_slave_0 entered promiscuous mode [ 2648.390546][ T1537] device bond_slave_1 entered promiscuous mode [ 2648.424082][ T1558] device bond0 left promiscuous mode [ 2648.429451][ T1558] device bond_slave_0 left promiscuous mode [ 2648.435657][ T1558] device bond_slave_1 left promiscuous mode [ 2648.441833][ T1558] bridge401: port 1(bond0) entered disabled state 04:32:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x600, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x440040, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = fcntl$dupfd(r5, 0x0, r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KDDELIO(r6, 0x4b35, 0x6) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r7}]]}}}]}, 0x40}}, 0x0) sendto$packet(r2, &(0x7f00000000c0)="1c013cb4536f4fa00c4df352cf73225593d503d934e6f0d33dffc8", 0x1b, 0x0, &(0x7f00000001c0)={0x11, 0xc6d9a043618b7f2f, r7, 0x1, 0x7}, 0x14) r8 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$VIDIOC_QUERYCAP(r8, 0x80685600, &(0x7f0000000000)) 04:32:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2648.610177][ T1568] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 2648.637843][ T1567] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2648.659426][ T1571] netlink: 'syz-executor.2': attribute type 16 has an invalid length. [ 2648.668340][ T1572] bridge402: port 1(bond0) entered blocking state [ 2648.684536][ T1572] bridge402: port 1(bond0) entered disabled state [ 2648.703589][ T1572] device bond0 entered promiscuous mode 04:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xa00, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2648.716831][ T1572] device bond_slave_0 entered promiscuous mode [ 2648.724292][ T1572] device bond_slave_1 entered promiscuous mode [ 2648.740417][ T1578] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r3, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r3, &(0x7f0000000000)=@name, 0x10) close(r3) r4 = fcntl$dupfd(r2, 0x406, r3) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$dupfd(r5, 0x0, r5) accept4(r5, &(0x7f0000000200)=@x25, &(0x7f0000000040)=0x80, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r0, r4}) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000000)=0x0) r7 = getpid() r8 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000280)='/dev/bsg\x00', 0x15000, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r8, 0x114, 0x1, &(0x7f00000002c0)={0x2, 0x4e20, @multicast2}, 0x10) sched_setattr(r7, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x8, 0x0, 0x400, 0x7}, 0x0) kcmp(r6, r7, 0x0, r0, r0) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:43 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f734", 0xa8) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = add_key(&(0x7f0000000000)='pkcs7_test\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="f8acb3f7760b3c503c4167286b6b49db3f7a98979d0913aa0fe712c27a111a69dce8125c9be19720b8eca631decb7aa7e274578c43d15ff70607d13abe580a46abc586ae2a463fe6", 0x48, 0xfffffffffffffffe) keyctl$clear(0x7, r1) socket$packet(0x11, 0x2, 0x300) 04:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xc00, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2649.147885][ T1613] device bond0 left promiscuous mode [ 2649.157384][ T1613] device bond_slave_0 left promiscuous mode [ 2649.163855][ T1613] device bond_slave_1 left promiscuous mode [ 2649.185524][ T1613] bridge402: port 1(bond0) entered disabled state [ 2649.242122][ T1613] bridge403: port 1(bond0) entered blocking state [ 2649.248664][ T1613] bridge403: port 1(bond0) entered disabled state [ 2649.256310][ T1613] device bond0 entered promiscuous mode [ 2649.261920][ T1613] device bond_slave_0 entered promiscuous mode [ 2649.268158][ T1613] device bond_slave_1 entered promiscuous mode [ 2649.312832][ T1625] device bond0 left promiscuous mode [ 2649.318264][ T1625] device bond_slave_0 left promiscuous mode [ 2649.328456][ T1625] device bond_slave_1 left promiscuous mode [ 2649.334794][ T1625] bridge403: port 1(bond0) entered disabled state 04:32:43 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:43 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xa) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:43 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0xda280, 0x0) setsockopt$inet6_buf(r1, 0x29, 0x1c, &(0x7f00000001c0)="71e4f3ea856cdbdedf2f64c40f9ca44882a2525a9c9a90bb80f965aabfb1fa0aa76523c050f67d006c8633c4cbdf4e4a62a5e9771e4ba2a4ce71becfc7382b8a85adaa495e57ce7402aaa59f8f5a12dc4aea267484d1ddb24f47eb8e25fe8b5ba4721bd9da3971f60961ae5c7f9562644fc3ea4162b9e7cee540993dfe4dab0e6925ae35f72a2e73690cee31719c44276f6385f014a70d9200689edc21eb615c9352b1767f6701cda01b49d757b16a1569c9960c775cc8117faf086498c25ecee49b1218115ef0436e7617", 0xcb) setsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f0000000080)=0x80000fff, 0x2ad) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1, 0x0, 0x108}}], 0x1, 0x0) 04:32:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xe00, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:43 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:44 executing program 2: futex(&(0x7f0000000080)=0x1, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, &(0x7f00000001c0), 0x2) r0 = socket$inet6(0xa, 0x3, 0xff) r1 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(r1, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r1, &(0x7f0000000000)=@name, 0x10) close(r1) r2 = accept$inet6(r1, 0x0, &(0x7f0000000000)) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xf00, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2649.559972][ T1634] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2649.582687][ T1637] bridge404: port 1(bond0) entered blocking state [ 2649.627172][ T1637] bridge404: port 1(bond0) entered disabled state [ 2649.658953][ T1637] device bond0 entered promiscuous mode [ 2649.664898][ T1637] device bond_slave_0 entered promiscuous mode [ 2649.672767][ T1637] device bond_slave_1 entered promiscuous mode [ 2649.684805][ T1644] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0xffffffc0, @local, 0xffff}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) r3 = socket$l2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SOUND_MIXER_READ_STEREODEVS(r2, 0x80044dfb, &(0x7f0000000000)) 04:32:44 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xc) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x5865, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2650.101906][ T1677] device bond0 left promiscuous mode [ 2650.107300][ T1677] device bond_slave_0 left promiscuous mode [ 2650.113791][ T1677] device bond_slave_1 left promiscuous mode [ 2650.123325][ T1677] bridge404: port 1(bond0) entered disabled state [ 2650.162847][ T1677] bridge405: port 1(bond0) entered blocking state [ 2650.173145][ T1677] bridge405: port 1(bond0) entered disabled state [ 2650.181681][ T1677] device bond0 entered promiscuous mode [ 2650.187278][ T1677] device bond_slave_0 entered promiscuous mode [ 2650.193788][ T1677] device bond_slave_1 entered promiscuous mode 04:32:44 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:44 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f00000001c0)=""/222, &(0x7f0000000040)=0xde) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f0000000000)={'bcsh0\x00', {0x2, 0x4e23, @broadcast}}) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) 04:32:44 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x6000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:44 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xe) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:44 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xe000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendfile(r0, r0, &(0x7f0000000000)=0x7fffffff, 0xff60000000000000) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2650.466647][ T1704] device bond0 left promiscuous mode [ 2650.472291][ T1704] device bond_slave_0 left promiscuous mode [ 2650.478507][ T1704] device bond_slave_1 left promiscuous mode [ 2650.500667][ T1704] bridge405: port 1(bond0) entered disabled state 04:32:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x6558, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2650.575700][ T1704] bridge406: port 1(bond0) entered blocking state 04:32:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') r2 = socket$inet_dccp(0x2, 0x6, 0x0) fsconfig$FSCONFIG_SET_FD(r1, 0x5, &(0x7f0000000040)='}usermime_type@GPL[em0\x00', 0x0, r2) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2650.617380][ T1704] bridge406: port 1(bond0) entered disabled state [ 2650.646077][ T1704] device bond0 entered promiscuous mode [ 2650.658535][ T1704] device bond_slave_0 entered promiscuous mode [ 2650.677646][ T1704] device bond_slave_1 entered promiscuous mode 04:32:45 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xf) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r2, 0xc008551c, &(0x7f0000000000)={0xfffffff8, 0x10, [0x1, 0xffffffff, 0x6, 0x4ac]}) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x100000000000036d}}], 0x1, 0x0) 04:32:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2650.939720][ T1737] device bond0 left promiscuous mode [ 2650.947568][ T1737] device bond_slave_0 left promiscuous mode [ 2650.965118][ T1737] device bond_slave_1 left promiscuous mode [ 2650.980870][ T1737] bridge406: port 1(bond0) entered disabled state [ 2651.012686][ T1737] bridge407: port 1(bond0) entered blocking state [ 2651.019155][ T1737] bridge407: port 1(bond0) entered disabled state [ 2651.026861][ T1737] device bond0 entered promiscuous mode [ 2651.032713][ T1737] device bond_slave_0 entered promiscuous mode [ 2651.040700][ T1737] device bond_slave_1 entered promiscuous mode 04:32:45 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(0x0, &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x8100, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) sync_file_range(r0, 0x2, 0x5, 0x5) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)}}], 0x1, 0x0) 04:32:45 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x10) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:45 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x20000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:45 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x34000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:45 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x5}, 0x1c) shutdown(r0, 0x1) sendmmsg(r0, &(0x7f0000004980)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x1}}], 0x1, 0x0) [ 2651.334245][ T1763] device bond0 left promiscuous mode [ 2651.343036][ T1763] device bond_slave_0 left promiscuous mode [ 2651.355752][ T1763] device bond_slave_1 left promiscuous mode [ 2651.373433][ T1763] bridge407: port 1(bond0) entered disabled state [ 2651.427184][ T1763] bridge408: port 1(bond0) entered blocking state [ 2651.459863][ T1763] bridge408: port 1(bond0) entered disabled state [ 2651.477157][ T1763] device bond0 entered promiscuous mode [ 2651.485960][ T1763] device bond_slave_0 entered promiscuous mode [ 2651.493454][ T1763] device bond_slave_1 entered promiscuous mode 04:32:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x48) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:46 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666", 0xb4) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:46 executing program 2: r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) shutdown(r0, 0x1) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/schedule_icmp\x00', 0x2, 0x0) ioctl$VIDIOC_S_INPUT(r1, 0xc0045627, &(0x7f0000000080)=0x5) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x243e0b426feec888, 0x1) sendmmsg(r2, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000140)="54fbdc8d1cd63b1cf2f6ef45958f8a4bc8d8a65dbe4ebfc0185a95d476c245a4d558706640a6bca0", 0x28}], 0x139}}], 0x1e9, 0x24002090) 04:32:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3c000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x400300, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2651.860120][ T1829] device bond0 left promiscuous mode [ 2651.865716][ T1829] device bond_slave_0 left promiscuous mode [ 2651.873156][ T1829] device bond_slave_1 left promiscuous mode [ 2651.879525][ T1829] bridge408: port 1(bond0) entered disabled state [ 2651.922338][ T1829] bridge409: port 1(bond0) entered blocking state [ 2651.928939][ T1829] bridge409: port 1(bond0) entered disabled state [ 2651.944333][ T1829] device bond0 entered promiscuous mode [ 2651.951154][ T1829] device bond_slave_0 entered promiscuous mode [ 2651.957518][ T1829] device bond_slave_1 entered promiscuous mode 04:32:46 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4c) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x1000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/37, 0x25}, {0x0}], 0x2}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) poll(&(0x7f00000001c0)=[{r4}, {}, {}, {0xffffffffffffff9c}], 0x4, 0x1fe) shutdown(r4, 0x0) shutdown(r2, 0x0) 04:32:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3f000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2652.264111][ T1843] device bond0 left promiscuous mode [ 2652.270251][ T1843] device bond_slave_0 left promiscuous mode [ 2652.280211][ T1843] device bond_slave_1 left promiscuous mode [ 2652.286558][ T1843] bridge409: port 1(bond0) entered disabled state [ 2652.355070][ T1843] bridge410: port 1(bond0) entered blocking state [ 2652.361644][ T1843] bridge410: port 1(bond0) entered disabled state [ 2652.368809][ T1843] device bond0 entered promiscuous mode [ 2652.374448][ T1843] device bond_slave_0 entered promiscuous mode [ 2652.380766][ T1843] device bond_slave_1 entered promiscuous mode [ 2652.388722][ T1848] validate_nla: 8 callbacks suppressed [ 2652.388753][ T1848] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:46 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x60) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:46 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x2000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2652.414623][ T1856] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:46 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x40000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2652.570021][ T1873] device bond0 left promiscuous mode [ 2652.576977][ T1873] device bond_slave_0 left promiscuous mode [ 2652.589719][ T1873] device bond_slave_1 left promiscuous mode [ 2652.602517][ T1873] bridge410: port 1(bond0) entered disabled state [ 2652.662443][ T1873] bridge411: port 1(bond0) entered blocking state [ 2652.669008][ T1873] bridge411: port 1(bond0) entered disabled state [ 2652.676737][ T1873] device bond0 entered promiscuous mode [ 2652.688372][ T1873] device bond_slave_0 entered promiscuous mode [ 2652.694788][ T1873] device bond_slave_1 entered promiscuous mode [ 2652.703877][ T1878] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:47 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x3000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2652.720871][ T1878] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x68) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x48000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2652.894460][ T1893] device bond0 left promiscuous mode [ 2652.903273][ T1893] device bond_slave_0 left promiscuous mode [ 2652.909570][ T1893] device bond_slave_1 left promiscuous mode [ 2652.917330][ T1893] bridge411: port 1(bond0) entered disabled state [ 2652.972367][ T1893] bridge412: port 1(bond0) entered blocking state [ 2652.983638][ T1893] bridge412: port 1(bond0) entered disabled state [ 2652.991783][ T1893] device bond0 entered promiscuous mode [ 2652.998200][ T1893] device bond_slave_0 entered promiscuous mode [ 2653.007758][ T1893] device bond_slave_1 entered promiscuous mode [ 2653.016480][ T1896] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2653.032616][ T1901] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:47 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x4000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:47 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000180)={0x0, 0x7530}, 0x10) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) clone(0x3102001fff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast2}, 0x18) dup(r0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCADDDLCI(r2, 0x8980, 0x0) 04:32:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6c) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:47 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4c000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:47 executing program 2: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x42, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndtimer(&(0x7f0000000200)='/dev/snd/timer\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000100)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_INFO(r0, 0x80e85411, &(0x7f0000001540)=""/160) 04:32:47 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x6000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2653.260623][ T1921] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2653.308149][ T1930] device bond0 left promiscuous mode [ 2653.317544][ T1930] device bond_slave_0 left promiscuous mode [ 2653.326810][ T1930] device bond_slave_1 left promiscuous mode [ 2653.333321][ T1930] bridge412: port 1(bond0) entered disabled state [ 2653.382173][ T1930] bridge413: port 1(bond0) entered blocking state [ 2653.394562][ T1930] bridge413: port 1(bond0) entered disabled state [ 2653.411718][ T1930] device bond0 entered promiscuous mode [ 2653.417395][ T1930] device bond_slave_0 entered promiscuous mode [ 2653.423805][ T1930] device bond_slave_1 entered promiscuous mode 04:32:47 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x74) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2653.433187][ T1937] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2653.455039][ T1947] device bond0 left promiscuous mode [ 2653.460489][ T1947] device bond_slave_0 left promiscuous mode [ 2653.466465][ T1947] device bond_slave_1 left promiscuous mode [ 2653.477272][ T1947] bridge413: port 1(bond0) entered disabled state [ 2653.575628][ T1951] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2653.661937][ T1959] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:48 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xa000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:48 executing program 2: r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc}, 0x10) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000265000)=@req={0x3fc, 0x0, 0x2}, 0x10) sendmmsg(r2, &(0x7f0000000a40), 0x8000000000000b0, 0x0) 04:32:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2653.822117][ T1966] bridge414: port 1(bond0) entered blocking state [ 2653.828673][ T1966] bridge414: port 1(bond0) entered disabled state [ 2653.836281][ T1966] device bond0 entered promiscuous mode [ 2653.842011][ T1966] device bond_slave_0 entered promiscuous mode [ 2653.848324][ T1966] device bond_slave_1 entered promiscuous mode 04:32:48 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', 0x0, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7a) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xc000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x65580000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xe000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2654.095256][ T1983] device bond0 left promiscuous mode [ 2654.110585][ T1983] device bond_slave_0 left promiscuous mode [ 2654.116872][ T1983] device bond_slave_1 left promiscuous mode [ 2654.126017][ T1983] bridge414: port 1(bond0) entered disabled state [ 2654.162830][ T1983] bridge415: port 1(bond0) entered blocking state [ 2654.173741][ T1983] bridge415: port 1(bond0) entered disabled state [ 2654.181491][ T1983] device bond0 entered promiscuous mode [ 2654.187179][ T1983] device bond_slave_0 entered promiscuous mode [ 2654.201954][ T1983] device bond_slave_1 entered promiscuous mode 04:32:48 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x300) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:48 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x68000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:48 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xf000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2654.446070][ T2016] device bond0 left promiscuous mode [ 2654.451929][ T2016] device bond_slave_0 left promiscuous mode [ 2654.458031][ T2016] device bond_slave_1 left promiscuous mode [ 2654.469064][ T2016] bridge415: port 1(bond0) entered disabled state [ 2654.520812][ T2016] bridge416: port 1(bond0) entered blocking state [ 2654.527593][ T2016] bridge416: port 1(bond0) entered disabled state [ 2654.535774][ T2016] device bond0 entered promiscuous mode [ 2654.541863][ T2016] device bond_slave_0 entered promiscuous mode [ 2654.548266][ T2016] device bond_slave_1 entered promiscuous mode 04:32:49 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000", 0xba) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x47e) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:49 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x2000, &(0x7f0000ffc000/0x2000)=nil}) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) close(r0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x910) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x200004) sendfile(r0, r2, 0x0, 0x80001d00c0d0) 04:32:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x10000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:49 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000200)="3081a3", 0x3, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:49 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6c000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x4aaff1db, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x500) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:49 executing program 2: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000000300)) pipe(&(0x7f0000001280)) r1 = socket$inet6(0xa, 0x6, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) listen(r1, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, &(0x7f0000000200)={0x0, r2+30000000}, 0x0) 04:32:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x60000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2655.107660][ T2065] device bond0 left promiscuous mode [ 2655.124862][ T2065] device bond_slave_0 left promiscuous mode [ 2655.136909][ T2065] device bond_slave_1 left promiscuous mode [ 2655.148433][ T2065] bridge416: port 1(bond0) entered disabled state [ 2655.202219][ T2065] bridge417: port 1(bond0) entered blocking state [ 2655.218867][ T2065] bridge417: port 1(bond0) entered disabled state 04:32:49 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x600) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2655.260506][ T2065] device bond0 entered promiscuous mode [ 2655.268283][ T2065] device bond_slave_0 entered promiscuous mode [ 2655.283741][ T2065] device bond_slave_1 entered promiscuous mode 04:32:49 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x65580000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:50 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x74000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x700) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2655.620221][ T2097] device bond0 left promiscuous mode 04:32:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x81000000, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2655.643840][ T2097] device bond_slave_0 left promiscuous mode [ 2655.655576][ T2097] device bond_slave_1 left promiscuous mode [ 2655.663215][ T2097] bridge417: port 1(bond0) entered disabled state [ 2655.700596][ T2097] bridge418: port 1(bond0) entered blocking state [ 2655.713613][ T2097] bridge418: port 1(bond0) entered disabled state [ 2655.721931][ T2097] device bond0 entered promiscuous mode [ 2655.727808][ T2097] device bond_slave_0 entered promiscuous mode [ 2655.736775][ T2097] device bond_slave_1 entered promiscuous mode 04:32:50 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000200)="3081a3", 0x3, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xa00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:50 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x2000002) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000001c0)=""/5) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000001c0)=""/5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x1) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000001c0)=""/5) fadvise64(0xffffffffffffffff, 0x0, 0x4, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3040}, 0x75f54ca9dc072b7c) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x806) 04:32:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x88a8ffff, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x7a000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2655.998147][ T26] audit: type=1800 audit(1575865970.474:188): pid=2129 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17205 res=0 [ 2656.056453][ T2133] device bond0 left promiscuous mode [ 2656.072442][ T2133] device bond_slave_0 left promiscuous mode 04:32:50 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x9effffff, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2656.096642][ T2133] device bond_slave_1 left promiscuous mode [ 2656.105722][ T2133] bridge418: port 1(bond0) entered disabled state [ 2656.151152][ T2133] bridge419: port 1(bond0) entered blocking state [ 2656.158486][ T2133] bridge419: port 1(bond0) entered disabled state [ 2656.170084][ T2133] device bond0 entered promiscuous mode [ 2656.176283][ T2133] device bond_slave_0 entered promiscuous mode [ 2656.185384][ T2133] device bond_slave_1 entered promiscuous mode 04:32:50 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xc00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:50 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x81000000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2656.453670][ T26] audit: type=1800 audit(1575865970.934:189): pid=2139 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17205 res=0 04:32:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xdbf1af4a, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xe00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2656.516932][ T2165] device bond0 left promiscuous mode [ 2656.524803][ T2165] device bond_slave_0 left promiscuous mode [ 2656.531023][ T2165] device bond_slave_1 left promiscuous mode [ 2656.537256][ T2165] bridge419: port 1(bond0) entered disabled state [ 2656.592353][ T2165] bridge420: port 1(bond0) entered blocking state [ 2656.612256][ T2165] bridge420: port 1(bond0) entered disabled state [ 2656.631386][ T2165] device bond0 entered promiscuous mode [ 2656.638160][ T2165] device bond_slave_0 entered promiscuous mode [ 2656.648300][ T2165] device bond_slave_1 entered promiscuous mode 04:32:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x865a1ff6}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:51 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(0x0, 0x0, &(0x7f0000000200)="3081a3", 0x3, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xf00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xf0ffffff, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:51 executing program 2: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x8) fallocate(r0, 0x0, 0x0, 0x2000002) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f00000001c0)=""/5) r3 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r3, 0x80404532, &(0x7f00000001c0)=""/5) lsetxattr$security_selinux(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='security.selinux\x00', &(0x7f00000006c0)='system_u:object_r:auth_cache_t:s0\x00', 0x22, 0x1) syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) r4 = syz_open_dev$evdev(&(0x7f0000000180)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCGBITSND(r4, 0x80404532, &(0x7f00000001c0)=""/5) fadvise64(0xffffffffffffffff, 0x0, 0x4, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) perf_event_open(&(0x7f0000000140)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendfile(r1, r1, 0x0, 0x8800000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000800}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x14, r5, 0x400, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x3040}, 0x75f54ca9dc072b7c) sendmsg$TIPC_NL_MEDIA_SET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x1040}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x806) [ 2656.832754][ T2191] bridge420: port 1(bond0) entered disabled state [ 2656.902222][ T2191] bridge421: port 1(bond0) entered blocking state [ 2656.936244][ T2191] bridge421: port 1(bond0) entered disabled state [ 2656.991467][ T26] audit: type=1800 audit(1575865971.474:190): pid=2201 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17209 res=0 [ 2657.032085][ T2210] bridge421: port 1(bond0) entered disabled state 04:32:51 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x2000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xffffa888, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:51 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x88a8ffff}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:51 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xffffff7f, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2657.321189][ T2223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2657.337044][ T2223] bridge422: port 1(bond0) entered blocking state [ 2657.384759][ T2223] bridge422: port 1(bond0) entered disabled state [ 2657.409809][ T2226] validate_nla: 20 callbacks suppressed [ 2657.409909][ T2226] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:51 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000", 0xbd) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:51 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000440)={0x28, r1, 0x1, 0x0, 0x0, {0x2}, [@TIPC_NLA_BEARER={0x14, 0x1, [@TIPC_NLA_BEARER_NAME={0x4, 0x1, @udp='udp:syz0\x00'}]}]}, 0x28}}, 0x0) [ 2657.435975][ T2226] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xffffff9e, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2657.586462][ T2247] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2657.666193][ T2252] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:52 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x9effffff}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:52 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) tkill(0x0, 0x0) setxattr$security_selinux(&(0x7f0000000140)='./file0/file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000001240)='system_u:object_r:chfn_exec_t:s0\x00', 0x21, 0x3) 04:32:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4800) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0xfffffff0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2657.930191][ T2269] bridge422: port 1(bond0) entered disabled state [ 2658.022390][ T2269] bridge423: port 1(bond0) entered blocking state [ 2658.041058][ T2269] bridge423: port 1(bond0) entered disabled state [ 2658.080738][ T2270] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:52 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x6, 0x0, 0x0, 0x50000}]}) wait4(0x0, 0x0, 0x0, &(0x7f0000000180)) 04:32:52 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc3ffffff}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2658.205751][ T2289] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:52 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:52 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:52 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4c00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:52 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) [ 2658.400160][ T2295] bridge423: port 1(bond0) entered disabled state [ 2658.472655][ T2295] bridge424: port 1(bond0) entered blocking state [ 2658.503544][ T2295] bridge424: port 1(bond0) entered disabled state 04:32:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x2, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2658.572823][ T2306] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2658.626499][ T2316] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:53 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf0ffffff}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x5865) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:53 executing program 2: prlimit64(0x0, 0x7, &(0x7f0000000280), 0x0) 04:32:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x3, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2658.922176][ T2333] bridge424: port 1(bond0) entered disabled state 04:32:53 executing program 2: dup2(0xffffffffffffffff, 0xffffffffffffffff) fstatfs(0xffffffffffffffff, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6, 0x0, 0x0, 0x50000}]}) gettid() r0 = getpgid(0x0) setpriority(0x0, r0, 0x0) [ 2658.995737][ T2333] bridge425: port 1(bond0) entered blocking state [ 2659.002354][ T2333] bridge425: port 1(bond0) entered disabled state 04:32:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:53 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf61f5a86}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2659.219916][ T2358] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:53 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:53 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x4, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2659.345445][ T2364] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:53 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6558) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:53 executing program 2: [ 2659.474735][ T2363] device bond0 left promiscuous mode [ 2659.480125][ T2363] device bond_slave_0 left promiscuous mode [ 2659.488859][ T2363] device bond_slave_1 left promiscuous mode [ 2659.495201][ T2363] bridge425: port 1(bond0) entered disabled state [ 2659.592311][ T2363] bridge426: port 1(bond0) entered blocking state [ 2659.598908][ T2363] bridge426: port 1(bond0) entered disabled state [ 2659.606907][ T2363] device bond0 entered promiscuous mode [ 2659.612765][ T2363] device bond_slave_0 entered promiscuous mode [ 2659.620151][ T2363] device bond_slave_1 entered promiscuous mode 04:32:54 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, 0x0, 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:54 executing program 2: 04:32:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6800) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x6, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xfeffffff}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:54 executing program 2: [ 2659.946954][ T2408] 8021q: adding VLAN 0 to HW filter on device bond0 04:32:54 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0xa, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2660.047518][ T2408] bridge426: port 1(bond0) entered disabled state 04:32:54 executing program 2: [ 2660.112216][ T2408] bridge427: port 1(bond0) entered blocking state [ 2660.123966][ T2408] bridge427: port 1(bond0) entered disabled state 04:32:54 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae226666493378500000000000000", 0xbf) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:54 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6c00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:54 executing program 2: 04:32:54 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xffffa888}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2660.506564][ T2436] device bond0 left promiscuous mode [ 2660.514623][ T2436] device bond_slave_0 left promiscuous mode [ 2660.521043][ T2436] device bond_slave_1 left promiscuous mode [ 2660.527265][ T2436] bridge427: port 1(bond0) entered disabled state [ 2660.582039][ T2436] bridge428: port 1(bond0) entered blocking state [ 2660.588520][ T2436] bridge428: port 1(bond0) entered disabled state [ 2660.596196][ T2436] device bond0 entered promiscuous mode [ 2660.601795][ T2436] device bond_slave_0 entered promiscuous mode [ 2660.608030][ T2436] device bond_slave_1 entered promiscuous mode 04:32:55 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0xc, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:55 executing program 2: 04:32:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7400) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xffffff7f}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:55 executing program 2: 04:32:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0xe, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2660.880559][ T2464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2660.907851][ T2464] bridge428: port 1(bond0) entered disabled state [ 2660.972034][ T2464] bridge429: port 1(bond0) entered blocking state [ 2660.978540][ T2464] bridge429: port 1(bond0) entered disabled state 04:32:55 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7a00) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:55 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(0x0, &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:55 executing program 2: 04:32:55 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0xf, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xffffff9e}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2661.478741][ T2498] bridge429: port 1(bond0) entered disabled state [ 2661.542162][ T2498] bridge430: port 1(bond0) entered blocking state [ 2661.548629][ T2498] bridge430: port 1(bond0) entered disabled state [ 2661.602249][ T2511] bridge430: port 1(bond0) entered disabled state 04:32:56 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7e04) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x10, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:56 executing program 2: 04:32:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xffffffc3}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:56 executing program 2: [ 2661.852918][ T2520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2661.872050][ T2520] bridge431: port 1(bond0) entered blocking state 04:32:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x60, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2661.897350][ T2520] bridge431: port 1(bond0) entered disabled state 04:32:56 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x8100) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:56 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(0x0, &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:56 executing program 2: 04:32:56 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xfffffff0}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:56 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2662.452691][ T2554] bridge431: port 1(bond0) entered disabled state [ 2662.502196][ T2554] bridge432: port 1(bond0) entered blocking state [ 2662.508728][ T2554] bridge432: port 1(bond0) entered disabled state [ 2662.552639][ T2576] bridge432: port 1(bond0) entered disabled state 04:32:57 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200), 0x0, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:57 executing program 2: 04:32:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xfeff) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x2, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xfffffffe}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:57 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) eventfd2(0x0, 0x0) pipe(&(0x7f00000006c0)) socket(0x11, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 04:32:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x3, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2662.826767][ T2590] bridge433: port 1(bond0) entered blocking state [ 2662.848514][ T2590] bridge433: port 1(bond0) entered disabled state 04:32:57 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xff0f) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:57 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(0x0, &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:57 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:57 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x4, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:57 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x6) openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$EVIOCGNAME(0xffffffffffffffff, 0x80404506, &(0x7f0000000300)=""/4096) r0 = gettid() clock_gettime(0x2, &(0x7f0000000280)) rt_sigtimedwait(&(0x7f0000000000), 0x0, &(0x7f00000002c0), 0x8) ptrace$setopts(0x4206, r0, 0x0, 0x6e) wait4(0x0, 0x0, 0x0, 0x0) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getpid() bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x35) tkill(0x0, 0x9) tkill(0x0, 0x1f) [ 2663.273161][ T2622] bridge433: port 1(bond0) entered disabled state [ 2663.342153][ T2622] bridge434: port 1(bond0) entered blocking state [ 2663.348683][ T2622] bridge434: port 1(bond0) entered disabled state 04:32:58 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xfffe) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) readv(r0, &(0x7f00000004c0)=[{&(0x7f0000000280)=""/176, 0xb0}], 0x1) r1 = dup(r0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r2, 0x0, 0x73a0b1b, 0x0, 0x0, 0x800e00549) shutdown(r1, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000180)=""/37, 0x25}, {0x0, 0x19}], 0x10000000000001c5}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r4, 0x0, 0xbf9d, 0x0, 0x0, 0x800e0053e) shutdown(r3, 0x0) r5 = socket$inet6_sctp(0x1c, 0x5, 0x84) poll(&(0x7f00000001c0)=[{r4}, {r5}], 0x2, 0x1fe) shutdown(r4, 0x0) shutdown(r2, 0x0) 04:32:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x6, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0xa, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2663.683560][ T2650] validate_nla: 14 callbacks suppressed [ 2663.683587][ T2650] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2663.709853][ T2655] bridge434: port 1(bond0) entered disabled state [ 2663.756606][ T2655] bridge435: port 1(bond0) entered blocking state [ 2663.816843][ T2655] bridge435: port 1(bond0) entered disabled state 04:32:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x34000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2663.913059][ T2661] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2664.035068][ T2677] bridge435: port 1(bond0) entered disabled state 04:32:58 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0xc, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2664.092364][ T2677] bridge436: port 1(bond0) entered blocking state [ 2664.118961][ T2677] bridge436: port 1(bond0) entered disabled state 04:32:58 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x400300) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2664.148523][ T2681] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2664.173805][ T2684] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:58 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0xe, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2664.277014][ T2703] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2664.334191][ T2703] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:32:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x1000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0xf, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:59 executing program 2: r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) r2 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x100082) r3 = memfd_create(&(0x7f0000000380)='\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x01\x00\x00\x00v\x8e\x05\xf7\xc1U\xad}\xc6\x94|W>Zi$Nv8,\n\xa6=W^\xa3Y\x7f\x8b\x17(\'~\xf7k0TM{\xa9-\xcf\x97\x8f\x1f\x81\xdc\x1b\x7f\x8f{4Q\xda\xda\x02\xec\xb4\xf1\xdd\xcc\x8bRA\xda\x89Efn\x00s\xc2Zb\x01\x00M\xbe\xa3z\xab\xd3\xeb\x98\x88\xc4\xc6)A\x9fP\x93zhH\xe0\xd2\x81\xdb\xeeV\x8cM\xe9\xa06\xc2o\x19\"\xf6Iq\xd4\xdf\x97\xfb\xab\x04\xe8\xceI8\xb3\x1d\xcf%\x9bK\xc6\t\x01\xe1\x86a\xfa\xb8\xfb)\x88\xcd+\xc2`\xc2\xf5r5>k\xb0\xa0\x02\xfc\x16MO\x18\x9b\x06\x80b\xd1\x01\x00\x00\x00\x00\x00\x00\x00@\f\fL\xa5{Tk\x940\x17.\xa56.\xe0\x14\x1b=\xf0j\xd25\xe8\x15\xd8\x9e\xea\xd3\xd9G4\t\xc0\x9c.\'\xa9R3z$\xf2\x01\x88\xc0\x13\x12<\xc01j3\xd8\xb4CE7s\xe4\xa0\x9e\xdd\x801\x12M\xee\x13\xce\x9cu(\x8f.\xc83\xc7\xe6j\xf5\xb1\x9a\x00\x00\x00\x00\x00\x00\x00', 0x0) pwritev(r3, &(0x7f0000000340)=[{&(0x7f0000000180)='\'', 0x1}], 0x1, 0x8180a) sendfile(r2, r3, 0x0, 0x20000102000007) close(r1) [ 2664.636368][ T2732] bridge436: port 1(bond0) entered disabled state 04:32:59 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, &(0x7f0000000000)) 04:32:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x10, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2664.722241][ T2732] bridge437: port 1(bond0) entered blocking state [ 2664.734519][ T2732] bridge437: port 1(bond0) entered disabled state 04:32:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x2000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2664.880192][ T2746] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:59 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x5}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2665.047238][ T2764] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:32:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x60, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:59 executing program 2: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x80000000}) [ 2665.178803][ T2775] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2665.210656][ T2774] bridge437: port 1(bond0) entered disabled state [ 2665.258753][ T2774] bridge438: port 1(bond0) entered blocking state [ 2665.266728][ T2774] bridge438: port 1(bond0) entered disabled state [ 2665.309220][ T2791] bridge438: port 1(bond0) entered disabled state 04:32:59 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081", 0x2, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:32:59 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x3000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:32:59 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000840)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xfffffee7}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x3}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@vti_common_policy=[@IFLA_VTI_LINK={0x8, 0x1, r4}]]}}}]}, 0x38}}, 0x0) 04:32:59 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:32:59 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2665.531065][ T2801] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2665.554907][ T2799] IPv6: ADDRCONF(NETDEV_CHANGE): vti0: link becomes ready [ 2665.592116][ T2804] bridge439: port 1(bond0) entered blocking state [ 2665.599651][ T2804] bridge439: port 1(bond0) entered disabled state 04:33:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x2, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:00 executing program 2: mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x2000107, 0x6031, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, 0x0, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x0, 0x0, 0x0, 0x2000000000002) 04:33:00 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x7}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x5000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x3, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2666.115085][ T2850] bridge439: port 1(bond0) entered disabled state [ 2666.172334][ T2850] bridge440: port 1(bond0) entered blocking state [ 2666.179021][ T2850] bridge440: port 1(bond0) entered disabled state 04:33:00 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x3, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:00 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:00 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x4, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:00 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xa}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2666.508872][ T2871] bridge440: port 1(bond0) entered disabled state 04:33:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x6, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2666.564924][ T2871] bridge441: port 1(bond0) entered blocking state [ 2666.571656][ T2871] bridge441: port 1(bond0) entered disabled state 04:33:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x11, &(0x7f0000000200)={@random="a7aa2df34508", @empty, [], {@llc_tr={0x11, {@llc={0x0, 0x0, ']'}}}}}, 0x0) socket(0x1, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000300), 0x0) 04:33:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:01 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:01 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000280)={0x4000201f, 0x3f000002}) 04:33:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xa, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xa000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2667.053761][ T2905] bridge441: port 1(bond0) entered disabled state [ 2667.120395][ T2905] bridge442: port 1(bond0) entered blocking state [ 2667.126907][ T2905] bridge442: port 1(bond0) entered disabled state 04:33:01 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x3, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xc, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:01 executing program 2: signalfd(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, &(0x7f0000000000)) 04:33:01 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xe}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:01 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xc000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2667.453631][ T2948] bridge442: port 1(bond0) entered disabled state 04:33:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xe, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2667.495603][ T2948] bridge443: port 1(bond0) entered blocking state [ 2667.507757][ T2948] bridge443: port 1(bond0) entered disabled state 04:33:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x10}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xe000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2667.762052][ T2970] bridge443: port 1(bond0) entered disabled state [ 2667.822170][ T2970] bridge444: port 1(bond0) entered blocking state [ 2667.832176][ T2970] bridge444: port 1(bond0) entered disabled state 04:33:02 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xf, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:02 executing program 2: perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0xb8, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCSREP(r0, 0x80084504, &(0x7f0000000000)) 04:33:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xf000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:02 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x3, 0x0) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:02 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x10, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:02 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x10000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:02 executing program 2: mkdir(&(0x7f0000000240)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./bus\x00', 0x0) mkdir(&(0x7f0000000080)='./bus/file0\x00', 0x0) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mount$overlay(0x400000, &(0x7f0000000000)='./bus\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './bus'}}, {@workdir={'workdir', 0x3d, './file1'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) setxattr$system_posix_acl(&(0x7f00000000c0)='./bus/file0\x00', &(0x7f0000000140)='%ystem.posix_acl_default\x00', 0x0, 0x0, 0x0) 04:33:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x60, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2668.343377][ T3016] bridge444: port 1(bond0) entered disabled state [ 2668.402545][ T3016] bridge445: port 1(bond0) entered blocking state [ 2668.409223][ T3016] bridge445: port 1(bond0) entered disabled state [ 2668.420487][ T3017] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. 04:33:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/70, 0x46}, {0x0}, {0x0}], 0x3}, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$inet(r1, 0x0, 0xfe72, 0x0, 0x0, 0x800e00516) shutdown(r0, 0x0) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup2(r2, r3) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, 0xffffffffffffffff, 0x0) recvfrom$inet(r4, 0x0, 0xffffff27, 0x0, 0x0, 0x800e00512) shutdown(r3, 0x0) 04:33:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x300, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:03 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x48}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2668.839532][ T3051] bridge445: port 1(bond0) entered disabled state 04:33:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x600, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2668.882301][ T3051] bridge446: port 1(bond0) entered blocking state [ 2668.890446][ T3051] bridge446: port 1(bond0) entered disabled state [ 2668.942924][ T3053] validate_nla: 19 callbacks suppressed [ 2668.942950][ T3053] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2668.998136][ T3059] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:03 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:03 executing program 2: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x8}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)="d800000018008100e00f80ecdb4cb9040a1d65ef0b007c0be87c55a1bc000900b800069903000000050005000a00812fa8000b000f0063e3e558f030035c3b61c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683e4f6d0200003f5aeb4edbb57a5025ccca9e00360db798262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9703", 0xd8}], 0x1}, 0x0) 04:33:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x40000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:03 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xa00, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:03 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xc00, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2669.271165][ T3088] IPv6: NLM_F_CREATE should be specified when creating new route [ 2669.283631][ T3088] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 2669.290944][ T3088] IPv6: NLM_F_CREATE should be set when creating new route [ 2669.298245][ T3088] IPv6: NLM_F_CREATE should be set when creating new route [ 2669.305503][ T3088] IPv6: NLM_F_CREATE should be set when creating new route [ 2669.313405][ T3081] bridge446: port 1(bond0) entered disabled state [ 2669.362521][ T3081] bridge447: port 1(bond0) entered blocking state [ 2669.373454][ T3081] bridge447: port 1(bond0) entered disabled state [ 2669.382280][ T3082] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2669.401371][ T3092] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE 04:33:03 executing program 2: r0 = semget$private(0x0, 0xd, 0x0) semctl$SETALL(r0, 0x0, 0x11, &(0x7f0000000080)=[0x200]) [ 2669.411252][ T3094] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:03 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x48000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2669.641544][ T3117] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2669.681790][ T3120] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:04 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000700)=""/240, 0xf0, 0x0) 04:33:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x60}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e93000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000048c1f"], 0x0, 0xa}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) 04:33:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xe00, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2669.802572][ T3132] bridge447: port 1(bond0) entered disabled state [ 2669.864342][ T3132] bridge448: port 1(bond0) entered blocking state [ 2669.880166][ T3132] bridge448: port 1(bond0) entered disabled state 04:33:04 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x4c000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0xf00, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x68}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:04 executing program 2: r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f00000001c0)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000e93000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000048c1f"], 0x0, 0xa}, 0x20) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff], 0x1f000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x31, 0xffffffffffffffff, 0x0) [ 2670.160925][ T3158] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2670.184820][ T3166] bridge448: port 1(bond0) entered disabled state 04:33:04 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x5865, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2670.252278][ T3166] bridge449: port 1(bond0) entered blocking state [ 2670.260574][ T3166] bridge449: port 1(bond0) entered disabled state [ 2670.277256][ T3174] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:04 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x60000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2670.303592][ T3188] bridge449: port 1(bond0) entered disabled state 04:33:04 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6c}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2670.422814][ T3192] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2670.539607][ T3204] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2670.549868][ T3203] bridge450: port 1(bond0) entered blocking state [ 2670.574639][ T3203] bridge450: port 1(bond0) entered disabled state 04:33:05 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000700)=""/240, 0xf0, 0x0) 04:33:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x6000, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:05 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(0x0, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0) socket$inet6(0xa, 0x400000000001, 0x0) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getresuid(&(0x7f00000004c0), 0x0, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x0) 04:33:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x65580000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:05 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(0x0, &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x74}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:05 executing program 2: prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000200)=[{0x6}]}) r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x40000, 0x0) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000080)) 04:33:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x6558, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x68000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:05 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x8100, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2671.085276][ T26] audit: type=1326 audit(1575865985.564:191): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3252 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 [ 2671.106871][ T3264] bridge450: port 1(bond0) entered disabled state [ 2671.153657][ T3264] bridge451: port 1(bond0) entered blocking state [ 2671.162847][ T3264] bridge451: port 1(bond0) entered disabled state 04:33:05 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x6c000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:05 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x7a}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2671.427096][ T3302] bridge451: port 1(bond0) entered disabled state [ 2671.481804][ T3302] bridge452: port 1(bond0) entered blocking state [ 2671.488359][ T3302] bridge452: port 1(bond0) entered disabled state 04:33:06 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, 0x0, &(0x7f0000000700)=""/240, 0xf0, 0x0) 04:33:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x74000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2671.531729][ T3305] bridge452: port 1(bond0) entered disabled state 04:33:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x300}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2671.755026][ T3332] device bond0 left promiscuous mode [ 2671.768527][ T3332] device bond_slave_0 left promiscuous mode [ 2671.776531][ T3332] device bond_slave_1 left promiscuous mode [ 2671.786010][ T3332] bridge453: port 1(bond0) entered blocking state [ 2671.794208][ T3332] bridge453: port 1(bond0) entered disabled state [ 2671.811290][ T3332] device bond0 entered promiscuous mode [ 2671.817164][ T3332] device bond_slave_0 entered promiscuous mode [ 2671.823822][ T3332] device bond_slave_1 entered promiscuous mode [ 2671.845311][ T26] audit: type=1326 audit(1575865986.324:192): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=3252 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45d53a code=0x0 04:33:06 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7a000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x2}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:06 executing program 2: socket$kcm(0x2, 0x5, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, 0x0) socketpair(0x0, 0x0, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x2, 0x3, 0x2) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000940)='cpu.stat\x00', 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x4000, &(0x7f0000000000)=[{&(0x7f00000002c0)="2e00000014008505f00f80ecdb4cb92e0a6800e213000000160001008eb3d81fc77948f328995a017c7b585106ff", 0x2e}], 0x1, 0x0, 0x0, 0xa00}, 0x0) r3 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000002c0)}], 0x1, 0x0, 0x0, 0xa00}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) r4 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x3e, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000380)='memory.swap.current\x00', 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000700)={'team0\x00\x00\x00\x00\x00\x00\x00\xf7\x00', @broadcast}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={0x0, &(0x7f00000001c0)=""/206, 0x0, 0xce, 0x1}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x3e, &(0x7f00000002c0)=r5, 0x161) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.stat\x00', 0x0, 0x0) 04:33:06 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x500}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:06 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x3}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:06 executing program 2: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3, 0x0) ioctl$EVIOCGKEYCODE_V2(r0, 0x80284504, &(0x7f0000000080)=""/246) 04:33:06 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x7e040000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2672.143531][ T3370] device bond0 left promiscuous mode [ 2672.155889][ T3370] device bond_slave_0 left promiscuous mode [ 2672.172500][ T3370] device bond_slave_1 left promiscuous mode [ 2672.181384][ T3370] bridge453: port 1(bond0) entered disabled state [ 2672.222994][ T3370] bridge454: port 1(bond0) entered blocking state [ 2672.249387][ T3370] bridge454: port 1(bond0) entered disabled state [ 2672.276424][ T3370] device bond0 entered promiscuous mode [ 2672.292613][ T3370] device bond_slave_0 entered promiscuous mode [ 2672.299037][ T3370] device bond_slave_1 entered promiscuous mode [ 2672.309647][ T3380] 8021q: adding VLAN 0 to HW filter on device bond0 04:33:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000200)={'tunl0\x00', &(0x7f0000000100)=@ethtool_link_settings={0x23}}) 04:33:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x600}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x4}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2672.587181][ T3401] device bond0 left promiscuous mode [ 2672.601945][ T3401] device bond_slave_0 left promiscuous mode [ 2672.610599][ T3401] device bond_slave_1 left promiscuous mode [ 2672.616852][ T3401] bridge454: port 1(bond0) entered disabled state [ 2672.662339][ T3401] bridge455: port 1(bond0) entered blocking state [ 2672.668820][ T3401] bridge455: port 1(bond0) entered disabled state [ 2672.676497][ T3401] device bond0 entered promiscuous mode [ 2672.682242][ T3401] device bond_slave_0 entered promiscuous mode [ 2672.688756][ T3401] device bond_slave_1 entered promiscuous mode [ 2672.711473][ T3401] device bond0 left promiscuous mode [ 2672.716918][ T3401] device bond_slave_0 left promiscuous mode [ 2672.730588][ T3401] device bond_slave_1 left promiscuous mode [ 2672.737915][ T3401] bridge455: port 1(bond0) entered disabled state 04:33:07 executing program 2: syz_open_dev$tty1(0xc, 0x4, 0x1) perf_event_open(&(0x7f0000000440)={0x2, 0x70, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) eventfd2(0x0, 0x0) pipe(&(0x7f00000006c0)) socket(0x11, 0x80002, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000000280)=ANY=[@ANYRES32=r0]}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'syz_tun\x00', 0x0}) 04:33:07 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x81000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x700}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2672.991336][ T3419] bridge456: port 1(bond0) entered blocking state [ 2672.999072][ T3419] bridge456: port 1(bond0) entered disabled state [ 2673.008172][ T3419] device bond0 entered promiscuous mode [ 2673.020087][ T3419] device bond_slave_0 entered promiscuous mode [ 2673.039760][ T3419] device bond_slave_1 entered promiscuous mode 04:33:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x88a8ffff) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2673.070459][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2673.076266][ C1] protocol 88fb is buggy, dev hsr_slave_1 04:33:07 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xa00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2673.334116][ T3452] device bond0 left promiscuous mode [ 2673.343790][ T3452] device bond_slave_0 left promiscuous mode [ 2673.354039][ T3452] device bond_slave_1 left promiscuous mode [ 2673.364967][ T3452] bridge456: port 1(bond0) entered disabled state 04:33:07 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:07 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:07 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 04:33:07 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x9effffff) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2673.422501][ T3452] bridge457: port 1(bond0) entered blocking state [ 2673.428991][ T3452] bridge457: port 1(bond0) entered disabled state [ 2673.436348][ T3452] device bond0 entered promiscuous mode [ 2673.459390][ T3452] device bond_slave_0 entered promiscuous mode [ 2673.472663][ T3452] device bond_slave_1 entered promiscuous mode 04:33:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xf0ffffff) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:08 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', 0x0, &(0x7f0000000240)="e36001ca87bc2ab28c06fbc3b803cac80b5a9bd8350be7094d12d4dcdabe18022ae5badfb1decd1861fd0848b8cd359ae5dbb9d91ace6a975d507ea041f26c08f7a7ee149f8b1f29b21ef8c863b1d35c43f882418a512f980b8088cdc424f327f03f974756ca", 0x66, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xc00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xe}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xfeff0000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2673.854882][ T3491] device bond0 left promiscuous mode [ 2673.866820][ T3491] device bond_slave_0 left promiscuous mode [ 2673.878872][ T3491] device bond_slave_1 left promiscuous mode 04:33:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2673.900055][ T3491] bridge457: port 1(bond0) entered disabled state [ 2673.944372][ T3491] bridge458: port 1(bond0) entered blocking state [ 2673.973899][ T3491] bridge458: port 1(bond0) entered disabled state [ 2673.981588][ T3491] device bond0 entered promiscuous mode [ 2673.987199][ T3491] device bond_slave_0 entered promiscuous mode 04:33:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xff0f0000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2673.993599][ T3491] device bond_slave_1 entered promiscuous mode [ 2674.006641][ T3509] 8021q: adding VLAN 0 to HW filter on device bond0 04:33:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0xe00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2674.199770][ T3525] device bond0 left promiscuous mode [ 2674.208172][ T3525] device bond_slave_0 left promiscuous mode [ 2674.219338][ T3525] device bond_slave_1 left promiscuous mode [ 2674.230109][ T3525] bridge458: port 1(bond0) entered disabled state 04:33:08 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={0x0, r2, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:08 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xffffa888) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2674.272029][ T3525] bridge459: port 1(bond0) entered blocking state [ 2674.278493][ T3525] bridge459: port 1(bond0) entered disabled state [ 2674.286230][ T3525] device bond0 entered promiscuous mode [ 2674.291857][ T3525] device bond_slave_0 entered promiscuous mode [ 2674.298289][ T3525] device bond_slave_1 entered promiscuous mode 04:33:08 executing program 2: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x2, 0x0) shutdown(r0, 0x0) 04:33:08 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x10}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:08 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x2000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2674.593842][ T3553] device bond0 left promiscuous mode [ 2674.599258][ T3553] device bond_slave_0 left promiscuous mode [ 2674.610636][ T3553] device bond_slave_1 left promiscuous mode [ 2674.616926][ T3553] bridge459: port 1(bond0) entered disabled state 04:33:09 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xffffff7f) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x60}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2674.662416][ T3553] bridge460: port 1(bond0) entered blocking state [ 2674.680509][ T3553] bridge460: port 1(bond0) entered disabled state [ 2674.687903][ T3553] device bond0 entered promiscuous mode [ 2674.705955][ T3553] device bond_slave_0 entered promiscuous mode 04:33:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000640)=""/171) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x910) getresuid(&(0x7f00000004c0), 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) [ 2674.716948][ T3553] device bond_slave_1 entered promiscuous mode 04:33:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3c00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x300}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xffffff9e) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2674.983969][ T3583] device bond0 entered promiscuous mode [ 2674.996317][ T3583] device bond_slave_0 entered promiscuous mode [ 2675.021691][ T3583] device bond_slave_1 entered promiscuous mode [ 2675.029584][ T26] audit: type=1800 audit(1575865989.504:193): pid=3579 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.2" name="bus" dev="sda1" ino=17345 res=0 [ 2675.069891][ T3589] device bond0 left promiscuous mode [ 2675.079630][ T3589] device bond_slave_0 left promiscuous mode [ 2675.085935][ T3589] device bond_slave_1 left promiscuous mode [ 2675.098640][ T3589] bridge460: port 1(bond0) entered disabled state 04:33:09 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, 0x0, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:09 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000140)='/dev/dmmidi#\x00', 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc028aa03, 0x0) r0 = socket$inet6(0xa, 0x400000000001, 0x0) semctl$GETVAL(0x0, 0x0, 0xc, &(0x7f0000000640)=""/171) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) fsetxattr$system_posix_acl(r1, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000200)) fsetxattr$system_posix_acl(0xffffffffffffffff, &(0x7f0000000240)='system.posix_acl_access\x00', 0x0, 0x0, 0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000000c0), 0x4) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000040), 0x0) close(r0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000cf6fe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x910) getresuid(&(0x7f00000004c0), 0x0, 0x0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000100)={0x0, 0x0, 0x20}, 0xc) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) ftruncate(r3, 0x200004) sendfile(r0, r3, 0x0, 0x80001d00c0d0) 04:33:09 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x600}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2675.165406][ T3589] bridge461: port 1(bond0) entered blocking state [ 2675.172234][ T3589] bridge461: port 1(bond0) entered disabled state [ 2675.179840][ T3589] device bond0 entered promiscuous mode [ 2675.195194][ T3589] device bond_slave_0 entered promiscuous mode [ 2675.201639][ T3589] device bond_slave_1 entered promiscuous mode 04:33:09 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0xfffffff0) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2675.275562][ T3603] device bond0 left promiscuous mode [ 2675.282486][ T3603] device bond_slave_0 left promiscuous mode [ 2675.308271][ T3603] device bond_slave_1 left promiscuous mode [ 2675.334798][ T3603] bridge461: port 1(bond0) entered disabled state 04:33:09 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x3f00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) [ 2675.383202][ T3604] device bond0 left promiscuous mode [ 2675.388633][ T3604] device bond_slave_0 left promiscuous mode [ 2675.408215][ T3604] device bond_slave_1 left promiscuous mode 04:33:10 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 04:33:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x40030000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xa00}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2675.587561][ T3626] bridge462: port 1(bond0) entered blocking state [ 2675.618971][ T3626] bridge462: port 1(bond0) entered disabled state [ 2675.681506][ T3626] device bond0 entered promiscuous mode [ 2675.704845][ T3626] device bond_slave_0 entered promiscuous mode [ 2675.711634][ T3626] device bond_slave_1 entered promiscuous mode [ 2675.723314][ T3632] validate_nla: 12 callbacks suppressed [ 2675.723356][ T3632] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2675.764956][ T3641] device bond0 left promiscuous mode [ 2675.775882][ T3641] device bond_slave_0 left promiscuous mode 04:33:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xc00}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2675.782510][ T3641] device bond_slave_1 left promiscuous mode [ 2675.791565][ T3641] bridge462: port 1(bond0) entered disabled state 04:33:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) [ 2675.853861][ T3645] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x100000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2676.044127][ T3662] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:10 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, 0x0, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:10 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:10 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 04:33:10 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xe00}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:10 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x200000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2676.271061][ T3680] bridge463: port 1(bond0) entered blocking state [ 2676.277730][ T3680] bridge463: port 1(bond0) entered disabled state [ 2676.291139][ T3680] device bond0 entered promiscuous mode [ 2676.300416][ T3680] device bond_slave_0 entered promiscuous mode [ 2676.306876][ T3680] device bond_slave_1 entered promiscuous mode [ 2676.322263][ T3683] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2676.362061][ T3693] device bond0 left promiscuous mode [ 2676.367528][ T3693] device bond_slave_0 left promiscuous mode [ 2676.381352][ T3693] device bond_slave_1 left promiscuous mode [ 2676.387521][ T3693] bridge463: port 1(bond0) entered disabled state [ 2676.436163][ T3689] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, 0x0, 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0xf00}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 04:33:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4800}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x300000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2676.659782][ T3709] device bond0 entered promiscuous mode [ 2676.673258][ T3709] device bond_slave_0 entered promiscuous mode [ 2676.685715][ T3709] device bond_slave_1 entered promiscuous mode [ 2676.694625][ T3717] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2676.703767][ T3710] bridge464: port 1(bond0) entered blocking state 04:33:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1000, &(0x7f00000000c0)) [ 2676.710287][ T3710] bridge464: port 1(bond0) entered disabled state [ 2676.721646][ T3710] device bond0 entered promiscuous mode [ 2676.727293][ T3710] device bond_slave_0 entered promiscuous mode [ 2676.739180][ T3710] device bond_slave_1 entered promiscuous mode [ 2676.764045][ T3720] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x5865}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2676.968503][ T3740] device bond0 left promiscuous mode [ 2676.974064][ T3740] device bond_slave_0 left promiscuous mode [ 2676.980848][ T3740] device bond_slave_1 left promiscuous mode [ 2676.988573][ T3740] 8021q: adding VLAN 0 to HW filter on device bond0 04:33:11 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, 0x0, r3}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x4c00}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x400000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1000, &(0x7f00000000c0)) 04:33:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6000}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2677.142402][ T3745] device bond0 left promiscuous mode [ 2677.168183][ T3745] device bond_slave_0 left promiscuous mode [ 2677.180828][ T3745] device bond_slave_1 left promiscuous mode [ 2677.196315][ T3745] bridge464: port 1(bond0) entered disabled state [ 2677.242562][ T3745] bridge465: port 1(bond0) entered blocking state [ 2677.249031][ T3745] bridge465: port 1(bond0) entered disabled state [ 2677.256338][ T3745] device bond0 entered promiscuous mode [ 2677.261974][ T3745] device bond_slave_0 entered promiscuous mode [ 2677.268222][ T3745] device bond_slave_1 entered promiscuous mode [ 2677.276083][ T3748] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 2677.292277][ T3758] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:11 executing program 4: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) r0 = getpid() sched_setattr(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r1, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) fcntl$setpipe(0xffffffffffffffff, 0x407, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000500), 0x3528a9c0}], 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000080)='pkcs7_test\x00', 0x0, &(0x7f0000000200)="3081a3", 0x1001, r3) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz', 0x1}, &(0x7f0000000240), 0x0, r3) keyctl$dh_compute(0x17, &(0x7f0000000080)={r4, r2, r4}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:11 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x500000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x5865}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:11 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup3(r0, r1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) io_setup(0x1000, &(0x7f00000000c0)) 04:33:11 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x6558}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x8100}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) [ 2677.593581][ T3779] device bond0 entered promiscuous mode [ 2677.600664][ T3779] device bond_slave_0 entered promiscuous mode [ 2677.609008][ T3779] device bond_slave_1 entered promiscuous mode [ 2677.616366][ T3778] device bond0 left promiscuous mode [ 2677.623643][ T3778] device bond_slave_0 left promiscuous mode [ 2677.629785][ T3778] device bond_slave_1 left promiscuous mode [ 2677.636128][ T3778] bridge465: port 1(bond0) entered disabled state [ 2677.702719][ T3778] bridge466: port 1(bond0) entered blocking state [ 2677.709546][ T3778] bridge466: port 1(bond0) entered disabled state [ 2677.717890][ T3778] device bond0 entered promiscuous mode [ 2677.723976][ T3778] device bond_slave_0 entered promiscuous mode [ 2677.730630][ T3778] device bond_slave_1 entered promiscuous mode [ 2677.738589][ T3781] netlink: 'syz-executor.3': attribute type 16 has an invalid length. 04:33:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x600000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) 04:33:12 executing program 0: prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x9, 0x8000000000008d}, 0x0) getpid() r0 = socket$inet6(0xa, 0x2, 0x0) recvmmsg(r0, &(0x7f0000004c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) fcntl$setpipe(r1, 0x407, 0x0) write(r1, &(0x7f0000000340), 0x41395527) sched_setattr(0x0, &(0x7f0000000080)={0x30, 0x2, 0x0, 0x0, 0x3}, 0x0) r2 = add_key$user(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000380)='X', 0x1, 0xfffffffffffffffe) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x60800, 0x80) keyctl$update(0x2, r2, &(0x7f0000000440)="c0ca1cdbaa1aedbbed80dddaa28e15b9449e2e82cca4244c40ecf9f1b7793abbec38ef06b17affd0ed4e6631c7d3d86e1339de17344340b02dd527f2d8b3ae6c1db3594e657da33c5dc668f143974a65753472df5319a6b83e1e86b8f2666c61a2e700d1c1e0ae1fc52494bd4885a5c64e9007d39fa11313805290dd6342f9775f01a02ec88f6bee22f25a377a9b143abba1264586d2779088006d5f9be82b00f10287031623f73470264cc5b3883da88ae22666649337850000000000000000", 0xc0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f00000000c0), 0x9a, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000080)={r3, r2}, &(0x7f0000000700)=""/240, 0xffffffff000000c0, 0x0) 04:33:12 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) dup3(r0, r1, 0x0) setrlimit(0x100000009, &(0x7f0000000000)) io_setup(0x1000, &(0x7f00000000c0)) 04:33:12 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x445, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x34000}, [@IFLA_MASTER={0x8, 0xa, r4}]}, 0x28}}, 0x0) 04:33:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x1a4, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x11) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x14, 0x12, @bridge={{0xc, 0x1, 'bridge\x00'}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x6000}, [@IFLA_MASTER={0x8, 0xa, r5}]}, 0x28}}, 0x0) 04:33:12 executing program 3: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bpf(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, 0x0) r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000180)='/proc/capi/capi20ncci\x00', 0x1, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x42000) r2 = socket(0x1e, 0x5, 0x0) setsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, &(0x7f0000000040), 0x4) connect$tipc(r2, &(0x7f0000000000)=@name, 0x10) close(r2) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x40, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_OPERSTATE={0x8}, @IFLA_LINKINFO={0x18, 0x12, @sit={{0x8, 0x1, 'sit\x00'}, {0xc, 0x2, [@tunl_policy=[@IFLA_IPTUN_LINK={0x8, 0x3, r5}]]}}}]}, 0x40}}, 0x700000000000000) sendmsg$nl_route_sched(r2, &(0x7f0000000700)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000400)=@newqdisc={0xe0, 0x24, 0x2, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0x5, 0x2}, {0x1, 0xffff}, {0x3, 0xfffa}}, [@TCA_STAB={0x68, 0x8, [{{0x1c, 0x1, {0x4, 0x5, 0x52e8, 0xffff8001, 0x0, 0x0, 0x7fffffff, 0x7}}, {0x14, 0x2, [0x69, 0x0, 0x3f, 0x5, 0x0, 0x3, 0x1000]}}, {{0x1c, 0x1, {0x4, 0x6, 0x80, 0x3f, 0x6, 0x1000, 0x9, 0x9}}, {0x18, 0x2, [0x7, 0x8, 0x5, 0xc6e7, 0xde, 0x1, 0x6, 0x5a, 0x3]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x26}, @TCA_RATE={0x8, 0x5, {0x2}}, @qdisc_kind_options=@q_codel={{0xc, 0x1, 'codel\x00'}, {0x24, 0x2, [@TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x1}, @TCA_CODEL_TARGET={0x8, 0x1, 0x31}, @TCA_CODEL_ECN={0x8}]}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x3}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x2}]}, 0xe0}, 0x1, 0x0, 0x0, 0x80}, 0x4008000) r6 = perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x9858c19d28cd19be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={&(0x7f00000001c0)}, 0x0, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, r1, 0x0) r7 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x5100, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r7, 0x4008ae48, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r8 = socket(0x0, 0x2, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setfsuid(r9) ioctl$VIDIOC_G_CROP(0xffffffffffffffff, 0xc014563b, &(0x7f0000000340)={0x3, {0xf832, 0x0, 0x2, 0x4}}) pivot_root(&(0x7f0000000140)='./file0\x00', &(0x7f0000000100)='./file0\x00') write$capi20_data(r6, &(0x7f0000000380)={{0x10, 0xfff, 0x83, 0x82, 0x8a, 0x200}, 0x3e, "949d8e5790194ab4f4b0c94bfdd381864b5b2b7844974873d723ff53701f518a33891e216a500324c016235610ca3ddc3206522a610b8edd84f4702d84a1"}, 0x50) accept4$ax25(r0, &(0x7f0000000200)={{0x3, @rose}, [@netrom, @bcast, @default, @remote, @null, @null, @null, @default]}, &(0x7f0000000280)=0xfffffffffffffec4, 0x0) socket(0x10, 0x0, 0x8) [ 2678.120050][ T3822] device bond0 left promiscuous mode [ 2678.128710][ T3822] device bond_slave_0 left promiscuous mode [ 2678.138895][ T3822] device bond_slave_1 left promiscuous mode [ 2678.148342][ T3822] bridge466: port 1(bond0) entered disabled state [ 2678.212219][ T3822] bridge467: port 1(bond0) entered blocking state [ 2678.218721][ T3822] bridge467: port 1(bond0) entered disabled state [ 2678.226093][ T3822] device bond0 entered promiscuous mode [ 2678.231778][ T3822] device bond_slave_0 entered promiscuous mode [ 2678.238032][ T3822] device bond_slave_1 entered promiscuous mode [ 2678.245620][ T3823] device bond0 left promiscuous mode [ 2678.252732][ T3823] device bond_slave_0 left promiscuous mode [ 2678.258805][ T3823] device bond_slave_1 left promiscuous mode [ 2678.266734][ T3833] ================================================================== [ 2678.274851][ T3833] BUG: KCSAN: data-race in netlink_getname / netlink_insert [ 2678.282224][ T3833] [ 2678.284559][ T3833] write to 0xffff8880619142f8 of 4 bytes by task 3822 on cpu 0: [ 2678.292190][ T3833] netlink_insert+0x12a/0x930 [ 2678.296891][ T3833] netlink_autobind.isra.0+0xf8/0x170 [ 2678.302263][ T3833] netlink_sendmsg+0x5eb/0x770 [ 2678.307297][ T3833] sock_sendmsg+0x9f/0xc0 [ 2678.311637][ T3833] ___sys_sendmsg+0x59d/0x5d0 [ 2678.316329][ T3833] __sys_sendmsg+0xa0/0x160 [ 2678.320836][ T3833] __x64_sys_sendmsg+0x51/0x70 [ 2678.325606][ T3833] do_syscall_64+0xcc/0x370 [ 2678.330108][ T3833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2678.335987][ T3833] [ 2678.338313][ T3833] read to 0xffff8880619142f8 of 4 bytes by task 3833 on cpu 1: [ 2678.345860][ T3833] netlink_getname+0xfb/0x1b0 [ 2678.350544][ T3833] __sys_getsockname+0xbd/0x1a0 [ 2678.355398][ T3833] __x64_sys_getsockname+0x4c/0x60 [ 2678.360520][ T3833] do_syscall_64+0xcc/0x370 [ 2678.365028][ T3833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2678.370912][ T3833] [ 2678.373238][ T3833] Reported by Kernel Concurrency Sanitizer on: [ 2678.379476][ T3833] CPU: 1 PID: 3833 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 2678.387693][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.397732][ T3833] ================================================================== [ 2678.405785][ T3833] Kernel panic - not syncing: panic_on_warn set ... [ 2678.412476][ T3833] CPU: 1 PID: 3833 Comm: syz-executor.1 Not tainted 5.4.0-syzkaller #0 [ 2678.420703][ T3833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2678.430741][ T3833] Call Trace: [ 2678.434016][ T3833] dump_stack+0x11d/0x181 [ 2678.438331][ T3833] panic+0x210/0x640 [ 2678.442229][ T3833] ? vprintk_func+0x8d/0x140 [ 2678.446815][ T3833] kcsan_report.cold+0xc/0xd [ 2678.451403][ T3833] kcsan_setup_watchpoint+0x3fe/0x460 [ 2678.456775][ T3833] __tsan_read4+0xc6/0x100 [ 2678.461188][ T3833] netlink_getname+0xfb/0x1b0 [ 2678.465851][ T3833] __sys_getsockname+0xbd/0x1a0 [ 2678.470683][ T3833] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2678.476397][ T3833] ? _copy_to_user+0x84/0xb0 [ 2678.480971][ T3833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2678.487198][ T3833] ? put_timespec64+0x94/0xc0 [ 2678.491873][ T3833] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2678.498153][ T3833] ? debug_smp_processor_id+0x4c/0x172 [ 2678.503631][ T3833] __x64_sys_getsockname+0x4c/0x60 [ 2678.508732][ T3833] do_syscall_64+0xcc/0x370 [ 2678.513226][ T3833] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 2678.519097][ T3833] RIP: 0033:0x45a6f9 [ 2678.522986][ T3833] Code: ad b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2678.542583][ T3833] RSP: 002b:00007f116e6c6c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000033 [ 2678.551868][ T3833] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 000000000045a6f9 [ 2678.560105][ T3833] RDX: 0000000020000200 RSI: 0000000020000040 RDI: 0000000000000006 [ 2678.568167][ T3833] RBP: 000000000075bfc8 R08: 0000000000000000 R09: 0000000000000000 [ 2678.576127][ T3833] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f116e6c76d4 [ 2678.584082][ T3833] R13: 00000000004c15c8 R14: 00000000004d58f8 R15: 00000000ffffffff [ 2678.593422][ T3833] Kernel Offset: disabled [ 2678.598234][ T3833] Rebooting in 86400 seconds..