00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xfffffffe}, 0x0) 10:31:08 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:08 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8002) 10:31:08 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@mpls_getnetconf={0x34, 0x52, 0x200, 0x70bd29, 0x25dfdbff, {}, [@NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x400}, @NETCONFA_IFINDEX={0x8}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x400}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x20) 10:31:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2855.284732][T29917] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:09 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8089) [ 2855.571995][T29919] bond463: (slave bridge2777): Enslaving as a backup interface with an up link [ 2855.648461][T29943] bond463: (slave bridge2778): Enslaving as a backup interface with a down link [ 2855.662052][T29917] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x10000000000}, 0x0) 10:31:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2855.832249][T29974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2855.920827][ T37] kauditd_printk_skb: 95 callbacks suppressed [ 2855.920844][ T37] audit: type=1804 audit(1625221869.653:2530): pid=29909 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9152/memory.events" dev="sda1" ino=14003 res=1 errno=0 [ 2856.049354][ T37] audit: type=1804 audit(1625221869.703:2531): pid=30002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9152/memory.events" dev="sda1" ino=14003 res=1 errno=0 [ 2856.069445][T29979] bond464: (slave bridge2779): Enslaving as a backup interface with an up link 10:31:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:09 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) getsockname$packet(r0, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000300)=0x14) pipe(&(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.swap.current\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x4, &(0x7f0000000000)=@raw=[@map={0x18, 0x5, 0x1, 0x0, r4}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff9, 0x0, 0x0, 0x0, 0x5}], &(0x7f0000000100)='GPL\x00', 0x4, 0x2b, &(0x7f0000000180)=""/43, 0x41100, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x2, 0x10, 0x1ff, 0x80000000}, 0x10, 0xffffffffffffffff}, 0x78) sendfile(r5, r7, 0x0, 0xffffffffffffff01) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:09 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8100) [ 2856.128779][T30001] bond464: (slave bridge2780): Enslaving as a backup interface with a down link [ 2856.162263][T29974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2856.184412][ T37] audit: type=1804 audit(1625221869.913:2532): pid=29944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7332/memory.events" dev="sda1" ino=14145 res=1 errno=0 10:31:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x1000000000000}, 0x0) 10:31:10 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x1, 0x1010, 0xffffffffffffffff, 0xee62f000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000100)=0x40) [ 2856.272850][ T37] audit: type=1804 audit(1625221869.913:2533): pid=29958 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7332/memory.events" dev="sda1" ino=14145 res=1 errno=0 10:31:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8803) [ 2856.300665][ T37] audit: type=1804 audit(1625221869.923:2534): pid=29944 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7332/memory.events" dev="sda1" ino=14145 res=1 errno=0 [ 2856.340964][ T37] audit: type=1804 audit(1625221870.073:2535): pid=30029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9153/memory.events" dev="sda1" ino=13967 res=1 errno=0 [ 2856.368124][ T37] audit: type=1800 audit(1625221870.073:2536): pid=30029 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=13967 res=0 errno=0 10:31:10 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000580)={0x0, 0x9}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2856.398224][ T37] audit: type=1804 audit(1625221870.133:2537): pid=30038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7333/memory.events" dev="sda1" ino=14129 res=1 errno=0 [ 2856.427532][ T37] audit: type=1800 audit(1625221870.153:2538): pid=30038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14129 res=0 errno=0 [ 2856.438998][T30039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2856.510748][ T37] audit: type=1804 audit(1625221870.153:2539): pid=30038 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7333/memory.events" dev="sda1" ino=14129 res=1 errno=0 [ 2856.648901][T30043] bond465: (slave bridge2781): Enslaving as a backup interface with an up link [ 2856.775492][T30046] bond465: (slave bridge2782): Enslaving as a backup interface with a down link 10:31:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8a01) [ 2856.824106][T30039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:10 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x4000000000000}, 0x0) 10:31:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8c02) 10:31:10 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0xb, &(0x7f0000000180)="8703f5acb552fd8b11594bcfac255206a4a7b46a206e26325d4986ff948982ed6c3511dd9246effee5db34627ad8bd95f61f24051a641480f33c4b2c200a773e0329cc8b0b5ceed43c33f73a2fecdc7f35", 0x51) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140)=0x10000, 0x12) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x24, r6, 0x400, 0x0, 0x8000, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) mmap(&(0x7f0000c2f000/0x2000)=nil, 0x2000, 0x2000000, 0x12, r5, 0xfaadd000) [ 2857.038406][T30096] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:10 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2857.322609][T30099] bond466: (slave bridge2783): Enslaving as a backup interface with an up link 10:31:11 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000000), &(0x7f0000000100)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000415000/0x1000)=nil, 0x1000, 0x0, 0x840000000000a132, 0xffffffffffffffff, 0x95c3c000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) writev(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000000)="daa9183a6c9394bbc0074989c4924c4d1d94965de65743ccbc8fe3305b9b648d670839c103764b0e62c5c3", 0x2b}, {&(0x7f0000000180)="32d7c8ba863a44037557b857ef9c8dd36b7445a7d47dad95b2344df3b80d42c3d3994db0d4817b3aacf8c0bf7e81678e894204efd3e077f2142454afc19431da477a36de46216d3e0111f7a51abfb1466e8f348fcceb38f73f77498192de3ef3f5d2766c212af31f963bfc02e75dc65cc997892b2c04086b5b74c4b685e510ac73df0c32a457a7bcc799a2ab6f121551606a1d64f69a86e399cf9c2c813a84bde39a26aad33cf18ccf38af176b", 0xad}, {&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000240)="e878317b0a1a6b582e69a96d6746b4aff50cc229147a64dea204c3ec125e1b8a9eb4a51435b7cb70be08c11901426db914397aefe142822fc995306e5a9b78a897415b30de7558a3319138ad3d0cef57fb5812b17bf2112bcc954e97bf5d78cdf3855b4d90a2a2c6818bb33ea95d8a1bf3b5331d31c1633b8a0923c91578379db9f31b1cc86ccc3dc6f42710cf837d1d0c37efa0392eb9355df9f0d307dec373e79c816318f157b3c836072d2bff", 0xae}], 0x4) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x7, 0x10}, &(0x7f0000000340)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000380)={r4, 0xc000}, &(0x7f00000003c0)=0x8) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r2, 0x80489439, &(0x7f0000000400)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2857.432537][T30125] bond466: (slave bridge2784): Enslaving as a backup interface with a down link [ 2857.490100][T30096] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9203) 10:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x8000000000000}, 0x0) 10:31:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9401) [ 2857.724035][T30167] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:11 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280)=ANY=[@ANYBLOB="2321202e2f66696c653020290a9866d2f4db66e9825280dc38dd981e5db4709c0886ffff599ca21ce915bb6085cd5d01d54f4d3c7a46cd639a63bbe322d4b722f9e982c94330dcfea83e7999140a92d06c7fe5342aece576f6559ee659a784b8845ec10a887b32ebc6da3c0580a0fdf551120234a726e1d4be2a687bde0cbb9bdc6058d6d92db83cc134553919dcbd5781ea19742f1a2d11a521b06ba21ea58e1da611feac74e65a54bce22b931d9a30cac8ddebfa5ae757acb48c9514770e2ebf902113e097fcb2d80fc37b355210fb0000"], 0xcd) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x10, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2857.961013][T30168] bond467: (slave bridge2785): Enslaving as a backup interface with an up link [ 2858.074649][T30167] bond467: (slave bridge2786): Enslaving as a backup interface with a down link 10:31:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9403) 10:31:11 executing program 1: r0 = socket(0x1, 0x80009, 0x9) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x38, r1, 0x800, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x40800) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2858.176080][T30168] bond467: (slave bridge2787): Enslaving as a backup interface with a down link 10:31:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x40000000000000}, 0x0) 10:31:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9602) 10:31:12 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) mmap(&(0x7f0000bde000/0x1000)=nil, 0x1000, 0x0, 0x40031, r0, 0xdbacf000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2858.473166][T30227] bond468: (slave bridge2788): Enslaving as a backup interface with an up link [ 2858.512538][T30248] bond468: (slave bridge2789): Enslaving as a backup interface with a down link 10:31:12 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) accept$alg(r0, 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9603) [ 2858.699143][T30248] bond468: (slave bridge2790): Enslaving as a backup interface with a down link 10:31:12 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xe0ffff00000000}, 0x0) 10:31:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9802) 10:31:12 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x13, 0xffffffffffffffff, 0xffff8000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='net_prio.prioidx\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2859.190498][T30304] bond469: (slave bridge2791): Enslaving as a backup interface with an up link 10:31:13 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r3, 0x400c6615, &(0x7f0000000000)={0x0, @adiantum, 0x0, @desc3}) [ 2859.304711][T30291] bond469: (slave bridge2792): Enslaving as a backup interface with a down link 10:31:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:13 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9a02) [ 2859.468712][T30304] bond469: (slave bridge2793): Enslaving as a backup interface with a down link 10:31:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x100000000000000}, 0x0) 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000100)='freezer.self_freezing\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:13 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9a03) 10:31:13 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='cpu.stat\x00', 0x275a, 0x1000000) [ 2859.999269][T30395] bond470: (slave bridge2794): Enslaving as a backup interface with an up link [ 2860.113739][T30365] bond470: (slave bridge2795): Enslaving as a backup interface with a down link 10:31:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:13 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9e00) [ 2860.168470][T30395] validate_nla: 6 callbacks suppressed [ 2860.168485][T30395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2860.298049][T30395] bond470: (slave bridge2796): Enslaving as a backup interface with a down link 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x200000000000000}, 0x0) [ 2860.453636][T30432] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2860.506519][T30432] bond471: (slave bridge2797): Enslaving as a backup interface with an up link 10:31:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa203) [ 2860.549006][T30432] bond471: (slave bridge2798): Enslaving as a backup interface with a down link [ 2860.606726][T30473] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x6, [@const={0xc}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0xd, 0x0, 0x62, 0x2}, @const={0x2, 0x0, 0x0, 0xa, 0x3}, @var={0xd, 0x0, 0x0, 0xe, 0x5, 0x1}, @int={0x10, 0x0, 0x0, 0x1, 0x0, 0x3, 0x0, 0x7e, 0x2}]}, {0x0, [0x2e, 0x0, 0x0, 0x30]}}, &(0x7f00000006c0)=""/146, 0x66, 0x92, 0x1}, 0x20) splice(r0, &(0x7f0000000140)=0x7, r2, &(0x7f0000000780)=0x6, 0x6, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r1, 0x0, 0xffffffff800) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1fd54ecab303d3cd4cc4670b3d22b840f2000005030000000000000000000000000000003eefb1cf871a7d7ad50fd1c0e243474473fb67662ced840bcd238f7b826f7b28ed1c7b01ca096f3f5d5e59d9a620880ebc3b4ece7b6e478dffffff7f15e85613171aeb80806457e09fad74be88fdd4c955451d8b9c5b996ef14478cb", @ANYRES16=r7, @ANYBLOB], 0x28}, 0x1, 0xa00000000000000}, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r6, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000000440)={0x40, r7, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x1c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x64010100}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x200}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x40}}, 0x40) sendmsg$IPVS_CMD_GET_SERVICE(r4, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x158, r7, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x67}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x13, 0x38}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@remote}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1d}}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e24}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0xc}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x59}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x9}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @private=0xa010101}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x8001}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x80}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x401}]}, @IPVS_CMD_ATTR_DEST={0x44, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0x323e}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x800}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e24}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x80000001}, @IPVS_DEST_ATTR_PORT={0x6, 0x2, 0x4e20}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}]}, 0x158}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000080) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2860.759388][T30473] bond471: (slave bridge2799): Enslaving as a backup interface with a down link 10:31:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa403) [ 2860.929490][T30476] bond471: (slave bridge2800): Enslaving as a backup interface with a down link [ 2860.962463][ T37] kauditd_printk_skb: 70 callbacks suppressed 10:31:14 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @empty}, &(0x7f00000001c0)=0x1c, 0x80000) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000280)={'sit0\x00', &(0x7f0000000200)={'sit0\x00', 0x0, 0x2f, 0xff, 0x7, 0x9, 0x0, @local, @ipv4={'\x00', '\xff\xff', @broadcast}, 0x1, 0x40, 0x20, 0x8b}}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpu.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0x1f) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f00000002c0)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_PKTINFO(r4, 0x10e, 0x3, &(0x7f0000000300)=0x6, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x300000000000000}, 0x0) [ 2860.962479][ T37] audit: type=1800 audit(1625221874.693:2610): pid=30481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14131 res=0 errno=0 10:31:14 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$SIOCPNENABLEPIPE(r2, 0x89ed, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa603) [ 2861.082527][T30499] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2861.086748][ T37] audit: type=1804 audit(1625221874.693:2611): pid=30484 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9162/memory.events" dev="sda1" ino=14131 res=1 errno=0 10:31:14 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket(0x2, 0x80805, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000100)={r5}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000100)={0x8ef, 0xffff, 0x8202, 0x1, 0x4, 0xffff8001, 0x2, 0x3d58, r5}, 0x20) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) accept4(r0, &(0x7f0000000180)=@phonet, &(0x7f0000000200)=0x80, 0x80800) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={r5, 0x10001, 0x30}, &(0x7f0000000280)=0xc) socket$xdp(0x2c, 0x3, 0x0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000)=0x2, 0x1) [ 2861.360357][T30502] bond472: (slave bridge2801): Enslaving as a backup interface with an up link [ 2861.382006][ T37] audit: type=1804 audit(1625221874.783:2612): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7339/memory.events" dev="sda1" ino=13894 res=1 errno=0 [ 2861.490912][ T37] audit: type=1800 audit(1625221874.783:2613): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=13894 res=0 errno=0 [ 2861.518121][ T37] audit: type=1804 audit(1625221874.793:2614): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7339/memory.events" dev="sda1" ino=13894 res=1 errno=0 [ 2861.524650][T30536] bond472: (slave bridge2802): Enslaving as a backup interface with a down link [ 2861.547375][ T37] audit: type=1800 audit(1625221874.803:2615): pid=30495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=13894 res=0 errno=0 [ 2861.579676][ T37] audit: type=1804 audit(1625221874.813:2616): pid=30498 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7339/memory.events" dev="sda1" ino=13894 res=1 errno=0 [ 2861.610129][ T37] audit: type=1804 audit(1625221874.913:2617): pid=30503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9163/memory.events" dev="sda1" ino=14131 res=1 errno=0 [ 2861.641562][ T37] audit: type=1800 audit(1625221874.913:2618): pid=30503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14131 res=0 errno=0 10:31:15 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:15 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$FS_IOC_GETFLAGS(r2, 0x80086601, &(0x7f0000000000)) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r3 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100)=0xffffffffffffffff, 0x4) ioctl$BTRFS_IOC_GET_FEATURES(r3, 0x80189439, &(0x7f0000000180)) 10:31:15 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xaa00) [ 2861.685382][ T37] audit: type=1804 audit(1625221874.933:2619): pid=30503 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9163/memory.events" dev="sda1" ino=14131 res=1 errno=0 [ 2861.685693][T30499] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2861.905014][T30536] bond472: (slave bridge2803): Enslaving as a backup interface with a down link 10:31:15 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x400000000000000}, 0x0) 10:31:15 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xaa02) 10:31:15 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000000)=@req3={0x3, 0x10000, 0x976d, 0x10001, 0x9, 0x7ff, 0x17}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2862.226634][T30574] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2862.490927][T30582] bond473: (slave bridge2804): Enslaving as a backup interface with an up link [ 2862.608515][T30612] bond473: (slave bridge2805): Enslaving as a backup interface with a down link 10:31:16 executing program 1: mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2862.694217][T30574] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2862.826893][T30612] bond473: (slave bridge2806): Enslaving as a backup interface with a down link 10:31:16 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) getsockname(r3, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:16 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xaa03) [ 2862.968893][T30582] bond473: (slave bridge2807): Enslaving as a backup interface with a down link 10:31:16 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xac02) 10:31:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x500000000000000}, 0x0) 10:31:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:17 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={r1, 0x9, 0x3, 0x6}) openat$cgroup_freezer_state(r3, &(0x7f0000000100), 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000280)="a696d54d86dfd2781701b29d45941c20014a19897e2a059e515034eeec1f7e49fff347c3d7d80065aaf507cf008a534a18221c9ca9e2620a3c2c0c470571e9e61fd2982d39fb2172555691703fb3a52f4cb2e5274d862ded9bfd6fa9b2f5c9d34653ff052070f447be69ddcf7e8c622b", 0x70}, {&(0x7f0000000300)="fe1adaecc272b053897ea02292735e59a93788f18128f6af0e5334534587ccbcac769c1fcbffd33b040fc9a61a8f9740d1f0042cf2944def085570f47c9be55602e8deb8c984c81bc867a2a443606b2eb70a4a65bd472ac469875e76a45019930e7ab21a97897da80d56539fe1b9433db07a211e3cb2e08f422616477ab3d915a9c7f1526e9175ae4073398f7e4f1978f7a4a1bfa91d01836030b68ed6b3ba2ffe43efc3702e47088fadd06b47", 0xad}, {&(0x7f00000003c0)="509ada0095938613adcc70a75acebe63cb2c301881fead30438fe0348e68a0af2be25c8bde0bf7e3afa1cc479f4ac9b56db6bb9dad42b5b0f4698717f9e857b038d7a3ea52a5a34d85f4702beabf86373895fba113dd8e7e069f3540edc00cf6dcfadaac2ab821b6e3eca87afa9c0526e1d05bbad6e30b9cfd5deea93ee59282988d9e4e5fcf21eb99b3d08407d9e5db6773bde9f1be339be5cba628f018b74f039e50853377b895f07800c825310e4cdaf35cbc54621759f60b664753262bc3ac1f604b5bb7cc22c5d71ae3f1d82f150603adec7ee11e6bed74909cbe90905fb364dc5a65546fd0387aadca3a589e7c82", 0xf1}, {&(0x7f0000000580)="f622a9125f53268333201c7d535b157de9ed291bf9d458275d20dd93d577abde237c08efd8f9b0f54187538a32452243174ce9e0c9496d01949201babd734d5fb517d4c274cfa03ded361f163b4d8934b5aff552f58885a8194402e12f62dc423ca3da9139a573b92ade07490f1096604b08e45d7f91f380580fdda99fbf5ce5e956c568bb54d58f99cd34325fdcf1ce0f2d757cdcb0031df6f0cbbacf1ebb8be95c3ecb9d8f7da4cb5ad8eafbd76705a75b9c031972", 0xb6}], 0x4) write$cgroup_int(r0, &(0x7f0000000140), 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r6 = socket$kcm(0x29, 0x7, 0x0) r7 = accept(r6, &(0x7f0000000640)=@caif, &(0x7f0000000200)=0x80) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000240)=[@window={0x3, 0x800, 0x401}, @sack_perm, @timestamp, @timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x5}, @window={0x3, 0x7, 0x1ff}], 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:17 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r3, 0xc0709411, &(0x7f0000000180)=ANY=[@ANYRES64=0x0, @ANYBLOB="e600000000000000871d00000000000000000100000000d4008000000000000000000000c00000000104000000000000ffff0000030000003b0000000500000020000000000000008000000000000000001000000000000006000000000000003800"/160]) 10:31:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xb001) [ 2863.273020][T30655] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2863.512748][T30661] bond474: (slave bridge2808): Enslaving as a backup interface with an up link [ 2863.593195][T30703] bond474: (slave bridge2809): Enslaving as a backup interface with a down link 10:31:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2863.654261][T30655] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xb203) 10:31:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x600000000000000}, 0x0) [ 2863.840090][T30722] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xba01) 10:31:17 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r1 = socket$inet_udp(0x2, 0x2, 0x0) close(r1) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r0, 0x89f8, &(0x7f0000000640)={'ip6gre0\x00', &(0x7f00000005c0)={'syztnl0\x00', 0x0, 0x2f, 0x3, 0x20, 0x2, 0x21, @mcast1, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, 0x8001, 0x7, 0x7, 0x7ff}}) splice(r0, 0x0, r1, 0x0, 0x19404, 0x0) sendmsg$nl_route(r0, &(0x7f0000000580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f0000000280)=@dellinkprop={0x278, 0x6d, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x20050, 0x60015}, [@IFLA_MTU={0x8, 0x4, 0x8000}, @IFLA_GSO_MAX_SIZE={0x8, 0x29, 0xff53}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_GROUP={0x8, 0x1b, 0x401}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x6e}, @IFLA_IFNAME={0x14, 0x3, 'veth0\x00'}, @IFLA_VFINFO_LIST={0x34, 0x16, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x7b, 0xb5}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x6, 0x7}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x2, 0x9a}}]}]}, @IFLA_NET_NS_FD={0x8}, @IFLA_VFINFO_LIST={0x1d4, 0x16, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x3c91, 0x7fff}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x6, 0x4}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x80000001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffb, 0xa5}}]}, {0x98, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x7ff, 0xc4c}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x3ff, 0x401}}, @IFLA_VF_VLAN={0x10, 0x2, {0x4, 0x1b7, 0x5}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x9}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x1ff, 0xccad}}, @IFLA_VF_RATE={0x10, 0x6, {0x200, 0xfd6, 0x1f}}, @IFLA_VF_TRUST={0xc, 0x9, {0x8001, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x33}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x70d6, 0x6}}]}, {0xfc, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x2c, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x5, 0xe14, 0x70000000, 0x88a8}}, {0x14, 0x1, {0x10000, 0xcb8, 0x80000001, 0x88a8}}]}, @IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x4, 0x3}}, @IFLA_VF_MAC={0x28, 0x1, {0x80000001, @remote}}, @IFLA_VF_VLAN_LIST={0x90, 0xc, 0x0, 0x1, [{0x14, 0x1, {0x6, 0xe68, 0x4, 0x88a8}}, {0x14, 0x1, {0x8, 0x305, 0x1, 0x8100}}, {0x14, 0x1, {0x5, 0xf1, 0x2, 0x8100}}, {0x14, 0x1, {0x4, 0x626, 0x74, 0x88a8}}, {0x14, 0x1, {0xfca, 0x64a, 0x3ff, 0x8100}}, {0x14, 0x1, {0x0, 0xa2c, 0x81, 0x8100}}, {0x14, 0x1, {0x1, 0x7, 0x4, 0x8100}}]}]}]}]}, 0x278}, 0x1, 0x0, 0x0, 0x20000840}, 0x41) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) r5 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) close(r4) pwritev(r5, &(0x7f0000000000)=[{&(0x7f0000000180)="9247921ca6de2d6f3738da1ef12ba5865686cd76b1fe21e71299bec9cad34cb32bf70676ad07669537724c733ae0a15e8d0df695e791030b4b16ef412aa81a9cfc52239890d48dfa295303d9eb50ad0bf95e5f32f77db79a34f22a5d76f0a8651e5a2a10fa62fcb784ffc6f4cd8e3135537b0a6372d6c2b7875eaa4dcd88e841d2753f29185ef93828ec5fc582e9f8bf098bfc4a3bf1e03a7509879c74d96382a2e91b7a9f10c4dd69e563c8fc054ea0039173090d318caac4bf0eba686451921180f6797be235daa2a34fb21b92e85da2b0448ab5cb199aae2dbd0b952f40aa6c88e01dbbc1", 0xe6}], 0x1, 0x9, 0x2) 10:31:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2864.008750][T30722] bond475: (slave bridge2810): Enslaving as a backup interface with an up link [ 2864.158835][T30755] bond475: (slave bridge2811): Enslaving as a backup interface with a down link 10:31:18 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xba02) 10:31:18 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.stat\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r2, &(0x7f0000000180)='cpuset.effective_mems\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(r0, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[], 0x15) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r4, 0x84, 0x5, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e22, 0x8001, @empty, 0x8}}}, 0x84) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2864.320692][T30722] bond475: (slave bridge2812): Enslaving as a backup interface with a down link 10:31:18 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, 0x1000}, @in6={0xa, 0x4e24, 0x80, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e24, @multicast1}, @in6={0xa, 0x4e20, 0x10000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0xdc4}, @in={0x2, 0x4e23, @private=0xa010100}], 0x84) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:18 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2, 0x12, 0xffffffffffffffff, 0x2e7e5000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendto$inet6(r1, &(0x7f0000000580)="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", 0x1000, 0x20, &(0x7f00000001c0)={0xa, 0x4e24, 0x7, @mcast2, 0x5}, 0x1c) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@loopback, 0x5, 0x2, 0x2, 0x9, 0x7f, 0x2}, 0x20) getsockopt$inet6_dccp_int(r0, 0x21, 0x1, &(0x7f0000000100), &(0x7f0000000180)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2864.384876][T30775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2864.419554][T30772] bond475: (slave bridge2813): Enslaving as a backup interface with a down link 10:31:18 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x700000000000000}, 0x0) 10:31:18 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(r2, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:18 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xbc00) 10:31:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2864.770104][T30818] bond476: (slave bridge2814): Enslaving as a backup interface with an up link [ 2864.858913][T30836] bond476: (slave bridge2815): Enslaving as a backup interface with a down link [ 2865.040768][T30818] bond476: (slave bridge2816): Enslaving as a backup interface with a down link 10:31:18 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc000) [ 2865.117421][T30854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2865.183026][T30836] bond476: (slave bridge2817): Enslaving as a backup interface with a down link 10:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x800000000000000}, 0x0) 10:31:19 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_UPDATE_FT_IES(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x18000080}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, 0x0, 0x200, 0x70bd2a, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x5e}}}}, [@NL80211_ATTR_MDID={0x6, 0xb1, 0xa7e8}]}, 0x30}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) sendto$inet(r1, &(0x7f0000000200)="422caf9ddc8bd628acd9508c20abecc69db1308c2f0ee1c434ed", 0x1a, 0x480, &(0x7f0000000240)={0x2, 0x4e21, @multicast2}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) bind$alg(0xffffffffffffffff, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r5 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r6 = epoll_create1(0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r6, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r5, 0xc4009420, &(0x7f0000000980)={0x12, 0x0, {0x0, @usage=0x8000, r7, 0x2d9, 0xffffffff00000000, 0xfffffffffffffc01, 0x2a, 0x0, 0x469, @usage=0x3f, 0x61c, 0x2, [0x9, 0x40, 0x3f, 0x4, 0x80000000, 0xffffffff]}, {0x100000000, @struct={0x1, 0x3}, 0x0, 0xce0, 0x101, 0xffffffffffff8e2c, 0x1f, 0x7, 0x4, @usage=0x2, 0x8, 0x9, [0x7f, 0x9, 0x3, 0xfff, 0x6, 0xffffffff]}, {0x9, @usage=0x2, 0x0, 0x8b0b, 0x72b4, 0x1, 0x0, 0x7, 0x4, @usage=0x1f, 0x10000, 0x0, [0x9, 0x4, 0x7, 0x7fffffff, 0x9, 0x2]}, {0x101, 0x1ff, 0x1}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r4, 0xc400941d, &(0x7f0000000580)={r7, 0x80, 0xf0, 0x1}) [ 2865.361040][T30871] validate_nla: 3 callbacks suppressed [ 2865.361058][T30871] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc001) 10:31:19 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000100)='pids.max\x00', 0x2, 0x0) mmap(&(0x7f0000083000/0x1000)=nil, 0x1000, 0xd, 0x840000000000a132, r0, 0xe6f8e000) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) write$cgroup_int(r1, &(0x7f00000001c0)=0xfa, 0x12) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) mmap(&(0x7f0000a30000/0x4000)=nil, 0x4000, 0x0, 0x20010, r3, 0xc2ad0000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendfile(r3, r2, &(0x7f0000000000)=0x20, 0x10000) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r1, &(0x7f0000000200)="461aabde19a2d2e78378116067", 0xd, 0x800, &(0x7f0000000240)={0xa, 0x4e24, 0x8, @mcast2, 0xab}, 0x1c) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2865.602199][T30871] bond477: (slave bridge2818): Enslaving as a backup interface with an up link 10:31:19 executing program 3: mmap(&(0x7f0000243000/0x2000)=nil, 0x2000, 0x10, 0x810, 0xffffffffffffffff, 0x595c9e05) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup(r0, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_all\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='cpu.stat\x00', 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = accept4(r2, &(0x7f0000000180)=@ieee802154, &(0x7f0000000200)=0x80, 0x80000) sendmsg$BATADV_CMD_SET_VLAN(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, 0x0, 0x800, 0x70bd2b, 0x25dfdbfb, {}, [@BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000841}, 0x20000000) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2865.672474][T30873] bond477: (slave bridge2819): Enslaving as a backup interface with a down link 10:31:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc00e) [ 2865.713641][T30873] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:19 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2865.852390][T30914] bond477: (slave bridge2820): Enslaving as a backup interface with a down link 10:31:19 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:19 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x900000000000000}, 0x0) [ 2865.968309][ T37] kauditd_printk_skb: 79 callbacks suppressed [ 2865.968323][ T37] audit: type=1800 audit(1625221879.703:2699): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14401 res=0 errno=0 10:31:19 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc200) 10:31:19 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) socket$inet6(0xa, 0x4, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2866.002323][ T37] audit: type=1804 audit(1625221879.703:2700): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7348/memory.events" dev="sda1" ino=14401 res=1 errno=0 [ 2866.029411][T30937] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2866.090781][ T37] audit: type=1804 audit(1625221879.703:2701): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7348/memory.events" dev="sda1" ino=14401 res=1 errno=0 [ 2866.177344][ T37] audit: type=1804 audit(1625221879.773:2702): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7348/memory.events" dev="sda1" ino=14401 res=1 errno=0 [ 2866.207504][ T37] audit: type=1800 audit(1625221879.773:2703): pid=30933 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14401 res=0 errno=0 [ 2866.236599][ T37] audit: type=1804 audit(1625221879.783:2704): pid=30938 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7348/memory.events" dev="sda1" ino=14401 res=1 errno=0 [ 2866.237478][ T37] audit: type=1804 audit(1625221879.913:2705): pid=30948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7349/memory.events" dev="sda1" ino=14468 res=1 errno=0 [ 2866.297838][T30957] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2866.302454][ T37] audit: type=1800 audit(1625221879.913:2706): pid=30948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14468 res=0 errno=0 [ 2866.339245][T30942] bond478: (slave bridge2821): Enslaving as a backup interface with an up link [ 2866.340971][ T37] audit: type=1804 audit(1625221879.913:2707): pid=30948 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7349/memory.events" dev="sda1" ino=14468 res=1 errno=0 [ 2866.379842][ T37] audit: type=1804 audit(1625221880.013:2708): pid=30984 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5816/cgroup.controllers" dev="sda1" ino=14482 res=1 errno=0 10:31:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 10:31:20 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2866.595738][T30946] bond478: (slave bridge2822): Enslaving as a backup interface with a down link 10:31:20 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0x1, 0x2}, 0x6) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$inet(0x2, 0x800, 0x200) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r3, 0x0, 0x61, &(0x7f0000000180)={'filter\x00', 0x4}, 0x68) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc202) [ 2866.637583][T30942] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2866.695522][T31006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:20 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="842a8822d0b2263d2f10a6dba0bf618ac52b70d43de2b16e89c0779a8f6b6744b51f88e66367dcec0679c550d19fc366074424229d88e190a346a0bd3f6b721b49a8dceb3b504155b0", 0x49) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) pwrite64(r3, &(0x7f0000000180)="bfaa7b9ea8b18edd82f45ddbbfb204e174f63ca53dfd80191caf28fa14c7f2257e8370759ee9814b05e2b261e80bb7d0a43e3589a125c0220428a4df035850389e12ed1cc9d379d570c3bc9add1ad5bdc08ef28865b38749524a91b812ff657ac723746d1b2dcca4e1b273e6f315b43140e1d7ca79aae768e7448fa18d9f7aa4778c9dbb34d24d2f571b06cf41117fe4620a66744eabb3e1afc25b3778196878d81012dbd176d6", 0xa7, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000580)="697ea18f4c54b7f88c027fa7acbf80ca07435aab4cf21c134abbebfa137bfe8286f49ed2d70a53a02b040c38043a66ccb76ed9ea5a3c7d1c98522edeca2cd67c808b507bfe47f38518d777632a1ae31e532a508394f8c798a33cb3e8c9896d320dbcacbb3bb907fa2e2ac96e28f78cf4f8410377404f97f578f2b2aaad0b576046eb00e37ef4e5c0d85ff0b679d0b58ccc2d9b07a5777d15d082d72b85072471a844334dca5276add9827195cdca0324419860e8106f4b6e6094f54240556b6a103306b27ab5a5582ad02112d29f2f84103a", 0xd2}, {&(0x7f00000002c0)="77e5a2cca7990a4c9b15970d7fd0a2c971d3c9255d9096d548ab718563f8777932645bb39febca44ec3c4cd10a1ccae77b04181b89", 0x35}], 0x2) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='signal_generate\x00', r2}, 0x10) sendfile(0xffffffffffffffff, r5, &(0x7f0000000740)=0x4, 0x5c) sendfile(r4, r2, 0x0, 0xffffffff800) sendfile(r4, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r6 = socket(0x0, 0x5, 0xfffffff7) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40d1) [ 2866.759595][T30942] bond478: (slave bridge2823): Enslaving as a backup interface with a down link 10:31:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 2866.865048][T30946] bond478: (slave bridge2824): Enslaving as a backup interface with a down link 10:31:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc203) 10:31:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xa00000000000000}, 0x0) 10:31:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc802) [ 2867.160860][T31035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2867.192690][T31047] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc803) 10:31:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='memory.swap.current\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2867.403091][T31049] bond479: (slave bridge2825): Enslaving as a backup interface with an up link 10:31:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r4 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) sendfile(r4, r0, &(0x7f0000000100)=0x100000001, 0x8000000007) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) r7 = openat$cgroup_ro(r6, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000140), 0xff4d) sendfile(r8, r7, 0x0, 0xffffffff800) sendfile(r8, r7, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2867.482308][T31047] bond479: (slave bridge2826): Enslaving as a backup interface with a down link [ 2867.509047][T31049] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xca02) 10:31:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, 0x0) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 2867.585010][T31047] bond479: (slave bridge2827): Enslaving as a backup interface with a down link 10:31:21 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={r1, 0x10000, 0x6, 0xed9}) sendmsg$IPSET_CMD_GET_BYINDEX(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x5c, 0xf, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x3}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x1}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_INDEX={0x6, 0xb, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_INDEX={0x6}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x50) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xc00000000000000}, 0x0) 10:31:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xca03) [ 2867.827168][T31113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:21 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = socket$pptp(0x18, 0x1, 0x2) sendfile(r3, r5, &(0x7f0000000000)=0x6, 0x100000001) sendfile(r2, r2, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x101}], {0x14}}, 0x3c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xcc02) [ 2867.927884][T31126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:21 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) sendmsg$netlink(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)={0x8c, 0x11, 0x36b997a1445b09bf, 0x70bd25, 0x25dfdbfd, "", [@generic, @generic="0f97557d1642dc5327c269d706b5326183d8a5c310f7e8d95a70022132741af061cf9479d641a0c9e7127ddbed1d2a38f723bd409ff26af5909c32f902d05c8577eaef2d533d48df3275052eeca58d7b171fcec6e164dbbe013e1b3d7bd4f081eab76debc2463cceccf6d45aaf0f6472a34d1d898b9c7ac6b3f6ef"]}, 0x8c}, {&(0x7f0000000580)={0x298, 0x26, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x287, 0x88, 0x0, 0x1, [@typed={0x3d, 0x51, 0x0, 0x0, @binary="255650821db1691a076653a1d9b24b1ac5de45470ba15715e0f51930d8ce8b7b61b0231fdb27e23da6029649e2b4db76e788841d73822b5fd9"}, @generic="873384bcd4603838192a2e7057f227068290ffac6699a5b43112ea2ee2ec45803486b3f5781045992b6f520e1f97ae0878c4362e9b4ba0edd00f76fbf0841e9002491219c1c87036809337351d30bfdad8479f5bb02f4454648e21cd66260aa37627c37d0afb292f61ae39f3fd9d769d24da90360a596b758bacbcc5a51e5f56127a287d15c65d7eccbbe6c4237b09deefb4d6c058dcd67eab6f231f6251e56ce4038717cc22a94aaafc81", @generic="c22a3428437f7d4f54a7c78e3bdf99f7f9aae41d072ce22ce06f32b567cb6957c7f93f622b5993be729fe79aa5227076e67eaccd8ecad0e10924358ec5c74aa164f9e77f4b54db482ab6a73973b27c73af8a562dac61f5cafaa458721654e394cf50cddc10ef774c0a1b51815c", @generic="7faf25be65f91e39bcfb1dc713d1da8f495e25678a5968ed2d6569be7e92667e956b419e0202a7159c4a4655ed9a808722a17da1dc4e2a09faa3a50fa8d8bb3f98e899131abfde31767190c8260e4d13f43b23f6a2d2145f793f723d0161b567757c53563c130eaf1d7b6d73851635a84091ca2d6b894ca93f34bf6c84cdd6a057f6fc19eccee3151c76701565b4bb944be83c4089fe01bb4ffc88f3dcb3f65e9cafd0c1a35b9f4b15360ba34c3d1eb435747ed49ef2e34f18a2b66f8434c23eb17609a4d5cfa7b147fd", @generic="5818603ad93eae241d47431529c159bd6ae16569a00b3ce124873810e870e74761d8419a1c7c2196248db131c931fca9f11e71c70876242c930c28b52423b8d4fec684159a740303ac05c091d1dc13e144aaa91bc5c0d68baa358fd06a0b6b55c7"]}]}, 0x298}], 0x2}, 0x20) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000180)={0x0, 0x0, 0xb6, 0x4d}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(r5, r0, &(0x7f0000000100)=0x100, 0x7) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r6, r1, 0x0, 0xffffffff800) sendfile(r6, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r7 = socket$l2tp6(0xa, 0x2, 0x73) sendfile(r7, r4, &(0x7f00000003c0)=0x20, 0x3) [ 2868.103557][T31126] bond480: (slave bridge2828): Enslaving as a backup interface with an up link [ 2868.209532][T31155] bond480: (slave bridge2829): Enslaving as a backup interface with a down link [ 2868.249232][T31126] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xd001) 10:31:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) 10:31:22 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$FICLONE(0xffffffffffffffff, 0x40049409, r4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r6, r1, 0x0, 0x20) sendfile(r6, r1, &(0x7f0000000100)=0xa04, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000580)) [ 2868.469764][T31182] bond480: (slave bridge2830): Enslaving as a backup interface with a down link 10:31:22 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xe00000000000000}, 0x0) 10:31:22 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x15) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r0, &(0x7f0000000180)="46a246add58d3a3e6f541702bade3a2c290e00a7bdfe518aec", &(0x7f00000001c0)=@buf="859ea324d4094dbd9ea751bb4eff094c498e90f06aaee5b20045d989be9fcf94c9fc544483421e983969473a9503647b7de7ba02492ad3ca4d01a464ae2fc4fcd5437ac7681095eaf4cb94e935d989403d194a86590b3148c871db4a49fc99777855d73123ce0a27a1cacaaa2911c4376572d7031a51698c8c385fed5e3303eb7b9f6bba689e08befc931ba1bc315c23c741da64090789d16f2a35b8c9865583906c1ce61fb0dcf8aa89051d2ac5aa3452f09ab5555f92976a9bc875bc8ae2a7", 0x4}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000000)=0x6, 0x7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r4, &(0x7f0000000100)='memory.events\x00', 0x0, 0x0) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xd201) [ 2868.657631][T31196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2868.671721][T31203] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:22 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x4000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000003c0)=0x9fe, 0x5) sendto$rxrpc(r1, &(0x7f0000000100)="89181617890ceb6ddd7784598a0073ebbf76d011ad542d094cdb15a615bacc76f4f1320dc962ed0295798cc51a9ac70ded68831cb3c8d855c5b756845cf5765b774657505052867e3feaddb481ef3594cdd49992fcd6ab36a1dcf32b2a4b222738d8335672e9363552bb", 0x6a, 0x40041, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_CREATE(r2, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="000128bd7000fedbdf2505b6bdb1e208b1a6274a000000050005005d0000000c00040000000000000008000a000300000008001100010000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = openat$cgroup(r4, &(0x7f0000000340)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000380)={r1, r7}, 0x10) close(r6) splice(r3, 0x0, r6, 0x0, 0x19404, 0x0) getsockopt$inet_dccp_int(r3, 0x21, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xd203) [ 2868.960395][T31207] bond481: (slave bridge2831): Enslaving as a backup interface with an up link 10:31:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 2869.083735][T31238] bond481: (slave bridge2832): Enslaving as a backup interface with a down link 10:31:22 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r0, r3, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2869.143770][T31207] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:22 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xd802) 10:31:23 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_sys\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x2633}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB="944a730f4faa2239666ab377131ba19922ba875dd791cf04acd48982c5fb2a2a5307fe6304b28e210898f8b13ba3fc549972261d2c8e6736b5bafe1dcbb3c729560ad733da728da8d7acf34806324ac1c6aca35cbbf15f4babc300d40f9486f33e05bd4731887ca39a2ff73351658b6c1860ef56d9cdcf05e1652aafcfa20e6b49faa76ce2e80b07adb25e434951eef48e2a61cf5b59629b788f91438775552157cc1503e3584e6b683b175ae016e7000000000000", @ANYRES16=r7, @ANYBLOB="000429bd7000ffd0df25010000000000000009410000004c00180000000473797a30001f00000000000000000000000000000076e40c9708cb4de9db61568a00"/108], 0x68}, 0x1, 0x0, 0x0, 0xc040}, 0x701eecf8d1e4a28f) bind$vsock_stream(0xffffffffffffffff, &(0x7f00000003c0)={0x28, 0x0, 0x2711}, 0x10) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x17687674f2752159}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYRESHEX=r6, @ANYRESOCT=r1, @ANYBLOB="100029bd7000fcdbdf257bba9c48a53bb3e7610000000800037d", @ANYRES32=0x0, @ANYBLOB="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"], 0x90}, 0x1, 0x0, 0x0, 0x2000c815}, 0x1) sendfile(r0, r3, &(0x7f0000000000)=0x3f, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2869.261543][T31207] bond481: (slave bridge2833): Enslaving as a backup interface with a down link [ 2869.352433][T31265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2869.381081][T31238] bond481: (slave bridge2834): Enslaving as a backup interface with a down link 10:31:23 executing program 1: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x2000000, 0x4010, r0, 0x156db000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) setsockopt$TIPC_MCAST_BROADCAST(r1, 0x10f, 0x85) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.events\x00', 0x275a, 0x1000000) 10:31:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x1000000000000000}, 0x0) 10:31:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xd803) 10:31:23 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000480)=""/75, 0x4b}], 0x7, 0xdf4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2869.714154][T31285] bond482: (slave bridge2835): Enslaving as a backup interface with an up link 10:31:23 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000002, 0x40010, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000)=0x100000000000, 0x12) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2869.885224][T31324] bond482: (slave bridge2836): Enslaving as a backup interface with a down link 10:31:23 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000b65000/0x1000)=nil, 0x1000, 0x2000002, 0x840000000000a132, 0xffffffffffffffff, 0xffffe000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000001900010026bd700002000000000040000000fe000800000000004bfb8554573e4c2b50436f457f03068a958638875b2c05e2676aa2259726566ae081215ae64b774b0789de6eff7d311aeb841757e431781cde768635865d1a9e94000000000000"], 0x24}, 0x1, 0x0, 0x0, 0x40850}, 0x18) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xda03) 10:31:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) ioctl$TUNSETLINK(0xffffffffffffffff, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) [ 2869.990237][T31324] bond482: (slave bridge2837): Enslaving as a backup interface with a down link 10:31:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x161b000000000000}, 0x0) 10:31:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xdc03) 10:31:24 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$inet6(0xa, 0x6, 0x7e) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2}, 0x1c) mmap(&(0x7f0000241000/0x2000)=nil, 0x2000, 0x4, 0x13, r1, 0x291d4000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(0xffffffffffffffff, 0x12, 0x2, &(0x7f0000000180)=""/229, &(0x7f0000000100)=0xe5) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(r0, &(0x7f0000000000)='freezer.state\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, r3, &(0x7f0000000040)=0x304f, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2870.339023][T31349] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:24 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f0000001200)={{0xa, 0x4e21, 0x9, @rand_addr=' \x01\x00', 0x6}, {0xa, 0x4e22, 0xce, @remote, 0x6}, 0x800, [0x165f, 0x1ff, 0x1, 0x9, 0x101, 0x5, 0xff, 0x6]}, 0x5c) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) write$binfmt_script(r1, &(0x7f0000000180)={'#! ', './file0', [{0x20, '${'}, {0x20, 'cgroup.controllers\x00'}, {0x20, '#'}, {0x20, 'memory.events\x00'}, {0x20, '%\\@--'}, {0x20, ',^'}, {0x20, ',/}.'}, {0x20, 'memory.events\x00'}], 0xa, "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"}, 0x1050) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2870.491845][T31369] bond483: (slave bridge2838): Enslaving as a backup interface with an up link [ 2870.621608][T31388] bond483: (slave bridge2839): Enslaving as a backup interface with a down link [ 2870.700635][T31350] validate_nla: 3 callbacks suppressed [ 2870.700654][T31350] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:24 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe001) 10:31:24 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x1f00000000000000}, 0x0) 10:31:24 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:24 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/4096, &(0x7f0000000100)=0x1000) r5 = accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) sendfile(r5, r3, 0x0, 0x1f) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000580)=""/4096, 0x1000}) mmap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x8, 0x30, r4, 0x86638000) 10:31:24 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe403) [ 2870.862414][T31413] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:24 executing program 1: mmap(&(0x7f00007c7000/0x4000)=nil, 0x4000, 0x0, 0x40010, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000d42000/0x2000)=nil, 0x2000, 0x2, 0x82010, 0xffffffffffffffff, 0xffffb000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_percpu\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000000000)=@get={0x1, &(0x7f0000000180)=""/181, 0x1}) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2871.012899][ T37] kauditd_printk_skb: 92 callbacks suppressed [ 2871.012913][ T37] audit: type=1804 audit(1625221884.743:2801): pid=31416 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5823/cgroup.controllers" dev="sda1" ino=14562 res=1 errno=0 [ 2871.056392][T31416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2871.147295][T31419] bond484: (slave bridge2840): Enslaving as a backup interface with an up link 10:31:25 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="3a9818bd828540d6f47d56eb111f9a351017f37256521b473d013d7cd1cc90df4f0e28bdbeebee573d923a23d466ae650400940c31e272046404d4d3798b43c0df83a2e01235c3d74d444ca9b3b7591474b8ca4057c64e11c0a6be407e38d7722760988303c727764e53e55f1f184b878640d8d6bae099c173070cd1"], 0x1c}}, 0x0) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x4, 0x3, 0x3f, 0x1f, 0x10, @rand_addr=' \x01\x00', @empty, 0x7, 0x7, 0x5d4, 0x7e9}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)={0x110, 0x0, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6tnl0\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x200048c1}, 0x10001) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000140), 0xff4d) sendfile(r10, r9, 0x0, 0xffffffff800) sendfile(r10, r9, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2871.203666][T31419] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2871.224348][ T37] audit: type=1804 audit(1625221884.813:2802): pid=31461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9181/memory.events" dev="sda1" ino=14658 res=1 errno=0 10:31:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe602) [ 2871.327152][T31445] bond484: (slave bridge2841): Enslaving as a backup interface with a down link [ 2871.370504][ T37] audit: type=1800 audit(1625221884.813:2803): pid=31461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14658 res=0 errno=0 10:31:25 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000100)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r0, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.limit_in_bytes\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000300), 0x12) sendfile(r3, r2, 0x0, 0xffffffff800) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="d70186d81e665160fa7010b44153c3ce6e4ec655fb56e974caae0e4faa299e55899bc3a25fa084ffe7710d7145e4aa660ca3481482977c11fcda64eaf0a7490cf14c3a90cb68ba09b9a6cf1024c0d91ac3fd925521ac6d6fe7194a19901337e36261d8d18f8acca8ee638ae8a93fe01f0da8703de478bab75211b56cee7f19688dfd0f73ab7915e91e25059e5913bf89330e49fc41f26e2fc43655a2369051d8fa9aa06e63c91147e08ff690883cdce34971332215fa8e"], 0x1c}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f00000001c0)={@private1, 0x21, r4}) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) openat$cgroup_ro(r5, &(0x7f0000000000)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x2000000000000000}, 0x0) [ 2871.439812][ T37] audit: type=1804 audit(1625221884.823:2804): pid=31455 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7359/memory.events" dev="sda1" ino=14610 res=1 errno=0 [ 2871.508876][ T37] audit: type=1804 audit(1625221884.833:2805): pid=31461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9181/memory.events" dev="sda1" ino=14658 res=1 errno=0 [ 2871.537127][ T37] audit: type=1800 audit(1625221884.843:2806): pid=31461 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14658 res=0 errno=0 10:31:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe801) 10:31:25 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r4, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) getpeername$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x0, @broadcast}, &(0x7f0000000300)=0x10) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r4, &(0x7f00000002c0)=ANY=[], 0x15) openat$cgroup_ro(r4, &(0x7f0000000000)='pids.events\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) read$alg(r3, &(0x7f0000000200)=""/222, 0xde) write$binfmt_misc(r1, &(0x7f0000000180)={'syz0', "f21dca141e5312b6b857c2c9f8186abd53123fb297b588e291106a4628f3f77949adcd0b1c9348e22f2eb4e6d405eedafe90a34956e44871b383406249a607c0d9141d8b"}, 0x48) [ 2871.625520][T31483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2871.648568][ T37] audit: type=1804 audit(1625221884.923:2807): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7359/memory.events" dev="sda1" ino=14610 res=1 errno=0 10:31:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000380), 0x8) openat$cgroup_ro(r1, &(0x7f00000003c0)='pids.current\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r3, r2, 0x0, 0xffffffff800) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000b00)={r3}) accept$alg(r5, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="04005f0023002a000301002d1a0000000000000000000000000000000000000000000000000000000a0006005050505050500000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_SET_MAC_ACL(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xe8, r4, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa}, {0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}]}, @NL80211_ATTR_MAC_ADDRS={0x1c, 0xa6, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}]}, @NL80211_ATTR_MAC_ADDRS={0x10, 0xa6, 0x0, 0x1, [{0xa}]}, @NL80211_ATTR_MAC_ADDRS={0x64, 0xa6, 0x0, 0x1, [{0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa}]}]}, 0xe8}, 0x1, 0x0, 0x0, 0x800}, 0x40080) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2871.898361][ T37] audit: type=1800 audit(1625221884.923:2808): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14610 res=0 errno=0 [ 2871.951230][T31487] bond485: (slave bridge2842): Enslaving as a backup interface with an up link [ 2871.979267][ T37] audit: type=1804 audit(1625221884.923:2809): pid=31417 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7359/memory.events" dev="sda1" ino=14610 res=1 errno=0 [ 2872.049885][T31505] bond485: (slave bridge2843): Enslaving as a backup interface with a down link [ 2872.075598][T31483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:25 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="d10000000000000002004e247f0000010000000000000000000000000000000000000000000000000000000000000000000000000077b14acad1e9dcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000100000002004e24ac1414aa00"/272], 0x110) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r0, r0, &(0x7f0000000000)=0x10001, 0x800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe802) [ 2872.092485][ T37] audit: type=1804 audit(1625221885.153:2810): pid=31473 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9182/memory.events" dev="sda1" ino=14618 res=1 errno=0 [ 2872.134484][T31536] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2872.191260][T31505] bond485: (slave bridge2844): Enslaving as a backup interface with a down link [ 2872.323694][T31487] bond485: (slave bridge2845): Enslaving as a backup interface with a down link 10:31:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x2000020000000000}, 0x0) 10:31:26 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='freezer.state\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x4, 0x80000000, 0x10001}) openat$cgroup_netprio_ifpriomap(r3, &(0x7f0000000100), 0x2, 0x0) sendfile(r2, r1, 0x0, 0x400ffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2872.547461][T31558] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:26 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xea01) 10:31:26 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140d, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendfile(r1, r4, &(0x7f0000000000)=0x200, 0x80) [ 2872.846997][T31558] bond486: (slave bridge2846): Enslaving as a backup interface with an up link 10:31:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x0) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2872.969847][T31596] bond486: (slave bridge2847): Enslaving as a backup interface with a down link [ 2873.022518][T31558] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:26 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xea03) [ 2873.135823][T31596] bond486: (slave bridge2848): Enslaving as a backup interface with a down link [ 2873.159798][T31618] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2873.247950][T31606] bond486: (slave bridge2849): Enslaving as a backup interface with a down link 10:31:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xec03) 10:31:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x3f00000000000000}, 0x0) 10:31:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2873.482872][T31636] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf000) [ 2873.678540][T31636] bond487: (slave bridge2850): Enslaving as a backup interface with an up link [ 2873.744727][T31663] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf201) 10:31:27 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$l2tp(0x2, 0x2, 0x73) r4 = socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, r4, 0x0, 0x101, 0x7, 0x4}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2873.977828][T31663] bond487: (slave bridge2851): Enslaving as a backup interface with a down link 10:31:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:27 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x4800000000000000}, 0x0) 10:31:27 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf400) [ 2874.306195][T31701] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:28 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@can, &(0x7f0000000000)=0x80, 0x81800) sendfile(r2, r1, &(0x7f0000000100)=0x3, 0x86d) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x200, 0x0) ioctl$PPPIOCSMRU1(r4, 0x40047452, &(0x7f0000000240)=0x7f) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f0000000280)={0xc08f, 0x1}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf403) [ 2874.503000][T31705] bond488: (slave bridge2852): Enslaving as a backup interface with an up link [ 2874.562098][T31701] bond488: (slave bridge2853): Enslaving as a backup interface with a down link [ 2874.673439][T31705] bond488: (slave bridge2854): Enslaving as a backup interface with a down link 10:31:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:28 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2874.751875][T31744] bond488: (slave bridge2855): Enslaving as a backup interface with a down link 10:31:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf601) 10:31:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x4c00000000000000}, 0x0) 10:31:28 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ppoll(&(0x7f0000000180)=[{r3, 0x4}, {r5, 0x4012}, {r1, 0x1080}, {r6, 0x4190}], 0x4, &(0x7f00000001c0)={0x0, 0x989680}, &(0x7f0000000200)={[0xffffffff80000000]}, 0x8) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf803) 10:31:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2875.161667][T31796] bond489: (slave bridge2856): Enslaving as a backup interface with an up link [ 2875.263305][T31770] bond489: (slave bridge2857): Enslaving as a backup interface with a down link 10:31:29 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xfa00) [ 2875.419383][T31796] bond489: (slave bridge2858): Enslaving as a backup interface with a down link [ 2875.547467][T31812] bond489: (slave bridge2859): Enslaving as a backup interface with a down link 10:31:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x6000000000000000}, 0x0) [ 2875.733073][T31837] validate_nla: 3 callbacks suppressed [ 2875.733092][T31837] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:29 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xfa01) 10:31:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2876.016533][T31838] bond490: (slave bridge2860): Enslaving as a backup interface with an up link [ 2876.094911][T31863] bond490: (slave bridge2861): Enslaving as a backup interface with a down link [ 2876.112526][ T37] kauditd_printk_skb: 64 callbacks suppressed [ 2876.112543][ T37] audit: type=1804 audit(1625221889.843:2875): pid=31884 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9190/memory.events" dev="sda1" ino=14281 res=1 errno=0 [ 2876.157283][T31837] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:29 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xfe02) [ 2876.247369][ T37] audit: type=1804 audit(1625221889.973:2876): pid=31886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5830/cgroup.controllers" dev="sda1" ino=14754 res=1 errno=0 10:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x6558000000000000}, 0x0) 10:31:30 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7d21) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:30 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xfeff) [ 2876.382762][T31896] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2876.471372][T31901] EXT4-fs warning (device sda1): ext4_group_extend:1793: can't shrink FS - resize aborted [ 2876.518973][ T37] audit: type=1804 audit(1625221890.253:2877): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9191/memory.events" dev="sda1" ino=14285 res=1 errno=0 [ 2876.536744][T31900] bond491: (slave bridge2862): Enslaving as a backup interface with an up link 10:31:30 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xff0f) [ 2876.623727][T31907] bond491: (slave bridge2863): Enslaving as a backup interface with a down link [ 2876.624945][ T37] audit: type=1800 audit(1625221890.283:2878): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14285 res=0 errno=0 [ 2876.689639][T31900] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2876.783915][ T37] audit: type=1804 audit(1625221890.283:2879): pid=31901 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9191/memory.events" dev="sda1" ino=14285 res=1 errno=0 [ 2876.838671][T31900] bond491: (slave bridge2864): Enslaving as a backup interface with a down link 10:31:30 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xff7f) [ 2876.901353][ T37] audit: type=1804 audit(1625221890.433:2880): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9191/memory.events" dev="sda1" ino=14285 res=1 errno=0 [ 2876.974684][T31907] bond491: (slave bridge2865): Enslaving as a backup interface with a down link [ 2877.020592][ T37] audit: type=1804 audit(1625221890.733:2881): pid=31954 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5831/cgroup.controllers" dev="sda1" ino=14738 res=1 errno=0 10:31:30 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x6800000000000000}, 0x0) 10:31:30 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xfffe) [ 2877.180708][T31963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2877.273896][ T37] audit: type=1804 audit(1625221891.003:2882): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9191/memory.events" dev="sda1" ino=14285 res=1 errno=0 10:31:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={0x0, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2877.391766][ T37] audit: type=1804 audit(1625221891.033:2883): pid=31945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9191/memory.events" dev="sda1" ino=14285 res=1 errno=0 [ 2877.413083][T31989] bond492: (slave bridge2866): Enslaving as a backup interface with an up link 10:31:31 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x2, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000000)) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000062c0)={'vxcan0\x00', 0x0}) sendmsg$inet(r6, &(0x7f0000006340)={&(0x7f00000001c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2f}}, 0x10, &(0x7f0000002900)=[{&(0x7f0000000200)="f361f574d7fd4f567ad5569e04b3df5dd91e4881ab6592866b2c1f5e81f190867b49dccaeca2ce7d11f81ad0d125ba47c4827c91306143bcec3fe5bd55cbd79672208a36db66492612b8c259719d4a2a2f0d52c3106ed654c529d3ee71", 0x5d}], 0x1, &(0x7f0000006300)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @local}}}], 0x20}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2877.517944][T31999] bond492: (slave bridge2867): Enslaving as a backup interface with a down link [ 2877.553732][ T37] audit: type=1804 audit(1625221891.283:2884): pid=32006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5832/cgroup.controllers" dev="sda1" ino=14285 res=1 errno=0 [ 2877.606440][T31963] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x6c00000000000000}, 0x0) 10:31:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x20000) [ 2877.884257][T32030] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:31 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000001f80)={'gre0\x00', &(0x7f0000001ec0)={'erspan0\x00', 0x0, 0x10, 0x20, 0xff, 0x6, {{0x1b, 0x4, 0x3, 0xa, 0x6c, 0x68, 0x0, 0x9, 0x2f, 0x0, @empty, @loopback, {[@rr={0x7, 0xb, 0x4e, [@rand_addr=0x64010100, @private=0xa010100]}, @timestamp_addr={0x44, 0x2c, 0x5, 0x1, 0x2, [{@loopback, 0xb9}, {@empty, 0x1}, {@private=0xa010100}, {@broadcast, 0x8}, {@multicast2, 0x100}]}, @ssrr={0x89, 0x13, 0xbd, [@multicast2, @multicast1, @empty, @local]}, @rr={0x7, 0xb, 0xeb, [@multicast1, @loopback]}]}}}}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x11, 0x4, &(0x7f0000000100)=@raw=[@ldst={0x2, 0x3, 0x1, 0x9, 0x7, 0x1, 0x10}, @func={0x85, 0x0, 0x1, 0x0, 0x6}, @btf_id={0x18, 0x1, 0x3, 0x0, 0x1}], &(0x7f0000000180)='syzkaller\x00', 0xff, 0x5c, &(0x7f00000001c0)=""/92, 0x40f00, 0x8, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000001fc0)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000002000)={0x3, 0x2, 0x3, 0x80}, 0x10}, 0x78) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) setsockopt$IP_VS_SO_SET_EDIT(r1, 0x0, 0x483, &(0x7f0000000000)={0x73, @rand_addr=0x64010100, 0x9, 0x3, 'wrr\x00', 0x5, 0x47, 0x46}, 0x2c) 10:31:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x33fe0) [ 2878.180752][T32032] bond493: (slave bridge2868): Enslaving as a backup interface with an up link 10:31:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={0x0, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:32 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r9 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ppoll(&(0x7f00000008c0)=[{r2, 0x201}, {0xffffffffffffffff, 0x1010}, {r3, 0x131}, {r4, 0x40}, {r6, 0x10}, {0xffffffffffffffff, 0x140}, {r8, 0x8040}, {r0, 0x804}, {r9, 0x8443}], 0x9, &(0x7f0000000940)={0x0, 0x3938700}, &(0x7f0000000980)={[0x5]}, 0x8) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x1000000) [ 2878.280403][T32054] bond493: (slave bridge2869): Enslaving as a backup interface with a down link [ 2878.333026][T32030] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x6e00000000000000}, 0x0) 10:31:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x34000) [ 2878.556857][T32089] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2878.778361][T32091] bond494: (slave bridge2870): Enslaving as a backup interface with an up link [ 2878.909385][T32127] bond494: (slave bridge2871): Enslaving as a backup interface with a down link [ 2879.004194][T32089] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:32 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x7400000000000000}, 0x0) 10:31:32 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x3ffff) 10:31:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={0x0, 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x40000) [ 2879.381777][T32140] bond495: (slave bridge2872): Enslaving as a backup interface with an up link 10:31:33 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) ioctl$F2FS_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0xf50f, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2879.499795][T32179] bond495: (slave bridge2873): Enslaving as a backup interface with a down link [ 2879.671633][T32179] bond495: (slave bridge2874): Enslaving as a backup interface with a down link 10:31:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290557) [ 2879.840492][T32181] bond495: (slave bridge2875): Enslaving as a backup interface with a down link 10:31:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290558) 10:31:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x7a00000000000000}, 0x0) 10:31:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290559) [ 2880.283610][T32217] bond496: (slave bridge2876): Enslaving as a backup interface with an up link [ 2880.370674][T32240] bond496: (slave bridge2877): Enslaving as a backup interface with a down link 10:31:34 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055a) 10:31:34 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = accept4(r0, &(0x7f0000000180)=@un=@abs, &(0x7f0000000000)=0x80, 0x80000) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000100)=0x8, 0x4) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005200)=[{&(0x7f0000000200)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001740)=[{&(0x7f0000000580)="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", 0x1000}, {&(0x7f0000000280)="7fb8cdd3afc0de7ecd2f3d2bfc8cf2c053eb82e178b5e333e36fe3c310d83982e7088163bd9ed842e102f90cbe2ae43b8d94dbc377a69cec29751048b5d1bd87f65589955138fbd3ea81869565fed144da3f682fede3acf9f99d6d899dc6d7341e207b3e4127a803d906d804289499097e09eaf0276b40eedc11bc9272051f95d98988072ac9bce61b3cbe920165c0b5b34153e671afe6fc9744c971e1cec0decc1065a099f433d962592fa5fe1a0081e145777e8b784a", 0xb7}, {&(0x7f0000000340)="492a0716f8b0c52d1de855bb46cf1c15d37e01892155c0cc6f5674d657302131f2267213bc71cea83f0d17f39c33805f2dd1beb020d071cc4bc1baac53b6a96c2ab36392d6b4eb83e91d2dec177deba5464eee7c686638f14b0d47979cd2714b38c826c5c0e0126f08b3d9c944dab0c6eb1a900efa77395892f74822bcc99cd5c134eb1a294c5afe496a41d337381a76d7b68b01b3f8577d4572f28b098ab842eb86e4da40d913a38ce096232627106a1dc19e3bc1f2c775c01768c40c602fbd37757ca5cfc503da03b4de8a9fc0649bace57593af224fbbac38546da61ee0d6", 0xe0}, {&(0x7f0000000440)="55992a26b9d6420469190c4925688308d9590b4b8cf25a1e339de4d9f40e018ef4a6ffd47a6855d029bd3a8f7fa4a57934fab9912ccccc6f698bd950c14301f25fbce5543908df4750d80fa88203232bdb25f753d7db0d9e31741528331dd10e7e9097c0295f46f1b57573c90c4cef7acc2901e2b8e9e105731e5119d8991d737f27786cea20d956afe51dd063985eab25ea981c75", 0x95}, {&(0x7f0000001580)="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", 0xfe}, {&(0x7f0000001680)="e0074fc28a0a716897b8415b8228769b963869329a5bfae7337645ebde48a54f4353aa1a0fe1b817e15d27098a4dc510498459efdae6c96a39f124fd33998dcea37b22f2be94aed3b7ad03cc495eceda5507d0820dbf3d944ff7018d4020a0720aa4c3255eb410c9ae3b5ba449df4e92b2913f0d2c70646a2c7223bd4b44897adafad38ced50eced3fad17f66f7fe64cd8737cc7774c420bd2d5edecdd32f98e266533212675db64ed01ff0c73", 0xad}], 0x6, &(0x7f00000017c0)=[@cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @rights={{0x14, 0x1, 0x1, [r0]}}], 0x58, 0x400c4}, {&(0x7f0000001840)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000003b00)=[{&(0x7f0000000500)="369f9f47", 0x4}, {&(0x7f00000018c0)="c3f565e7c30c32432df2881c0f83c5843fe05a1df4b6ea3c2a3f", 0x1a}, {&(0x7f0000001900)="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", 0x1000}, {&(0x7f0000002900)="3ea4f766464981bc197edcee1ffd5386b6c171a8b6e0c35d5510170c89b25a7c8fbd5024c08f1990cb9d24efc07fb80728881dc5803a2d57197a4c57d164188629dc6c63ea4170967ef28cf58d99058008f85f734c46345a7cea4b0fb4ae642d0a731f1c957aa9f59ae0c17fa8ecebbb8340f7ad9ccca749d2ec031b3050dc6bc7d8ed6be798e9fb71911e830264c024b1e5a54b052a2da652577e9318cac34606186212f19b58faaf2ad70b0aefcbfe4185005678a480647e3ec76b363c9f5c84df73a5a1ce29deca0eb2f45e7eaa1cc3980db231a93677b5f12b37f94834c419b9d59966cf17987f830c7e", 0xec}, {&(0x7f0000002a00)="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", 0xff}, {&(0x7f0000002b00)="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", 0x1000}], 0x6, &(0x7f0000003cc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r1, r3, r2, r3]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c}}], 0xa8, 0x4c080}, {&(0x7f0000003d80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e40)=[{&(0x7f0000003e00)="d455fb70beb14bea1ff9a819e5fd1b41b1763c371cf8", 0x16}], 0x1, &(0x7f0000003f40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, r0, r2, r2]}}], 0x28, 0x4000804}, {&(0x7f0000003f80)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000005100)=[{&(0x7f0000004000)="4bf721cb6ceb2053e2bb3a1ead1990fec91a87bfb792e0afe4a89dd430645bb20f0fe27b", 0x24}, {&(0x7f0000004040)="d5414eb71b93e41609933f61f9a18c27beec45ee14c28d5b9077aa54991b015e249f94d072f8d20d7f12b9fcdafd4afb07f3d5e302e2c15ef7480003555e8a3ae638224a56fea17adafe1e6c714140e2ac1edcde5fb41a9224c132acbd5998d6e5b7e168cc0e0e5f1fa99a8fbb15f0f2b9d4e74ecbe9642f9b8d736af7bda547c508541f022e100a748c9aa54acb85e5e8bc1dff2549e9419deebbed9effceaf1e47528e4f90b7e9a3fd61f0d09cb950367a7bb2fef162d79f9d", 0xba}, {&(0x7f0000004100)="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", 0x1000}], 0x3, &(0x7f0000005140)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @rights={{0x20, 0x1, 0x1, [r2, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [r3, r2, r3, 0xffffffffffffffff, 0xffffffffffffffff, r4, r6]}}], 0x90, 0x40000}], 0x4, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2880.511840][T32212] bond496: (slave bridge2878): Enslaving as a backup interface with a down link 10:31:34 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) sendfile(r2, r2, &(0x7f0000000000)=0x7f, 0x0) [ 2880.630794][T32240] bond496: (slave bridge2879): Enslaving as a backup interface with a down link 10:31:34 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x7b3e000000000000}, 0x0) 10:31:34 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055b) [ 2880.925581][T32283] validate_nla: 4 callbacks suppressed [ 2880.925600][T32283] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2881.169735][T32286] bond497: (slave bridge2880): Enslaving as a backup interface with an up link [ 2881.289772][T32316] bond497: (slave bridge2881): Enslaving as a backup interface with a down link [ 2881.366149][T32283] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2881.397822][ T37] kauditd_printk_skb: 36 callbacks suppressed 10:31:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x8000000000000000}, 0x0) [ 2881.397840][ T37] audit: type=1804 audit(1625221895.133:2921): pid=32273 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7362/memory.events" dev="sda1" ino=14931 res=1 errno=0 10:31:35 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055c) [ 2881.557665][T32341] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:35 executing program 3: openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001380)='./cgroup.net/syz1\x00', 0x200002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.events\x00', 0x0, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000001240)=0x1024) sendfile(r3, r2, 0x0, 0xffffffff803) ioctl$int_out(r2, 0x5462, &(0x7f00000013c0)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001280), &(0x7f00000012c0)=0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000001300)={0x0, 0x1000}, &(0x7f0000001340)=0x8) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(0xffffffffffffffff, 0x660c) openat$cgroup_ro(r2, &(0x7f0000000180)='memory.stat\x00', 0x0, 0x0) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:35 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) mmap(&(0x7f0000a06000/0x4000)=nil, 0x4000, 0x0, 0x40010, r2, 0xb3000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2881.589198][ T37] audit: type=1804 audit(1625221895.133:2922): pid=32334 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7362/memory.events" dev="sda1" ino=14931 res=1 errno=0 [ 2881.739615][T32345] bond498: (slave bridge2882): Enslaving as a backup interface with an up link [ 2881.739694][ T37] audit: type=1804 audit(1625221895.183:2923): pid=32335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5836/cgroup.controllers" dev="sda1" ino=14939 res=1 errno=0 [ 2881.847253][ T37] audit: type=1804 audit(1625221895.233:2924): pid=32280 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9196/memory.events" dev="sda1" ino=14934 res=1 errno=0 [ 2881.889554][ T37] audit: type=1804 audit(1625221895.283:2925): pid=32338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9196/memory.events" dev="sda1" ino=14934 res=1 errno=0 10:31:35 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$isdn(0x22, 0x3, 0x23) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r3, r4, &(0x7f0000000000)=0x7, 0x5) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2881.962269][ T37] audit: type=1804 audit(1625221895.303:2926): pid=32338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9196/memory.events" dev="sda1" ino=14934 res=1 errno=0 [ 2881.991803][T32341] bond498: (slave bridge2883): Enslaving as a backup interface with a down link 10:31:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2882.043380][ T37] audit: type=1804 audit(1625221895.563:2927): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9197/memory.events" dev="sda1" ino=14938 res=1 errno=0 [ 2882.079026][T32341] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:35 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055d) [ 2882.150983][ T37] audit: type=1800 audit(1625221895.563:2928): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14938 res=0 errno=0 [ 2882.256184][T32367] bond498: (slave bridge2884): Enslaving as a backup interface with a down link [ 2882.320935][ T37] audit: type=1804 audit(1625221895.613:2929): pid=32394 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9197/memory.events" dev="sda1" ino=14938 res=1 errno=0 10:31:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x8100000000000000}, 0x0) [ 2882.388732][ T37] audit: type=1804 audit(1625221895.743:2930): pid=32398 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9197/memory.events" dev="sda1" ino=14938 res=1 errno=0 10:31:36 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055e) [ 2882.545402][T32413] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:36 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) read(r0, &(0x7f0000000180)=""/150, 0x96) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0x275a, 0x1000000) 10:31:36 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000000)='cpu.stat\x00', 0x0, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) splice(r4, &(0x7f0000000100)=0x8, r5, &(0x7f0000000180)=0x800, 0x6, 0x2) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r6, r1, 0x0, 0xffffffff800) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r7, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r7, &(0x7f00000002c0)=ANY=[], 0x15) sendto$inet6(r7, &(0x7f00000001c0)="8a4a3bbcbac3098a20ff9f21356cc44e9df881b15127853d49f019c2374ec5afb5adf8b8dd2d718861fdd0b4e577678be02ff152f691dc9c36e00ff06532c8ff3d17d6418cc4ae15b7f5355536bed41727d0b131f8ae", 0x56, 0x4000, &(0x7f0000000240)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c) sendfile(r6, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2882.836960][T32429] bond499: (slave bridge2885): Enslaving as a backup interface with an up link 10:31:36 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29055f) [ 2882.878740][T32413] bond499: (slave bridge2886): Enslaving as a backup interface with a down link [ 2882.914246][T32456] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2883.023682][T32429] bond499: (slave bridge2887): Enslaving as a backup interface with a down link 10:31:36 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x88a8ffff00000000}, 0x0) 10:31:36 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290560) [ 2883.194389][T32479] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2883.434943][T32485] bond500: (slave bridge2888): Enslaving as a backup interface with an up link [ 2883.595109][T32479] bond500: (slave bridge2889): Enslaving as a backup interface with a down link 10:31:37 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r0, &(0x7f0000000000)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2883.682612][T32485] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:37 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000d85fc555204a00000000280012000c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="d8"], 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/53, 0x35) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2883.872757][T32485] bond500: (slave bridge2890): Enslaving as a backup interface with a down link [ 2883.924264][T32540] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 10:31:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290561) 10:31:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xc3ffffff00000000}, 0x0) 10:31:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2884.086793][T32540] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. 10:31:37 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = accept$unix(r2, &(0x7f0000000180), &(0x7f0000000000)=0x6e) ioctl$sock_inet_SIOCSIFNETMASK(r3, 0x891c, &(0x7f0000000100)={'macvlan0\x00', {0x2, 0x0, @empty}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) openat$cgroup_ro(r4, &(0x7f0000000200)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) 10:31:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290562) [ 2884.218291][T32553] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2884.386563][T32569] bond501: (slave bridge2891): Enslaving as a backup interface with an up link 10:31:38 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r0, &(0x7f0000000040)=0x1, 0x3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2884.555434][T32553] bond501: (slave bridge2892): Enslaving as a backup interface with a down link 10:31:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2884.641740][T32553] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:38 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='freezer.self_freezing\x00', 0x0, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup(r1, &(0x7f0000000000)='syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x275a, 0x1000000) [ 2884.808581][T32598] bond501: (slave bridge2893): Enslaving as a backup interface with a down link 10:31:38 executing program 1: mmap(&(0x7f0000bfd000/0x400000)=nil, 0x400000, 0x0, 0x40031, 0xffffffffffffffff, 0xc099f000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r0}, 0x8) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r3, 0x4, 0x5, 0xffffffffffff6246}) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x1000000) 10:31:38 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290563) [ 2884.901049][T32619] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2884.953426][T32569] bond501: (slave bridge2894): Enslaving as a backup interface with a down link 10:31:38 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290564) 10:31:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xf5ffffff00000000}, 0x0) 10:31:38 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0xc, 0x110, 0xffffffffffffffff, 0x3000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) pwritev(r3, &(0x7f0000002680)=[{&(0x7f0000000180)="4992baa112798588b09d2e9715cf00b91362510e0a1d544c480a785c23fb1904f91839915e597fb08e757413117529ac845305c6005223c9f79de4203750cbe2d28ddaad1ac48bc4bd4645075039439f91ff45ae82ebb713fe015d948502f4cca8421433906f58ab228c8134e43407857d459e58a2a2405763b05f96e11efd28cdc1c55d45352b3f", 0x88}, {&(0x7f0000000240)="edb2236d427301a425e60c136a4a023b06c9ceb7c7ef766d638939ccc168a08349062eac4495742526c5d915395fe356257c516c59a13f81639cf789d3bdb6f5ec30c46d2a3eabe330a7591ef65c901789cfbc1bbb772956df703a22c0cd23ddca5dbd803c2e63d2e869b899a32b0e03772347ac374ef971749afcc56fdf41fa38e1d3a7ec3195", 0x87}, {&(0x7f0000000300)="cb2d79a94d313ce8277e696977521eb13b3d34c7ba0fcb48f1b455f8c1ade07b74c1c6660d0989339232ff1d3906621a26e96a42470a9ae213e8ccfba1796b5463651346ebf3ae53f47424", 0x4b}, {&(0x7f0000000380)="55511f5c6c5c0c0ca654ddc54f3a6133adf337c5dd167fa00a15e79a3163f4d7d1c92006d2ac3ae39cfb52580c8db85e094112fa0526461d8ca254b505f4c2ae6cdc2cc41a7222468aaf9c3121e3e621cbea250b09bd92eba13f2af57edcbdd8d6061b42b43928373c7e60474582029f640984e757998baf51f011cff87486dd951d83779fa2b551046d8b65aea3274acfbd8b9750cdd87a06239db5d4d9fdebfbc27a441c1793080be71d43c598bdb8302de82859a2f2fce1f1e8cc46f3c06c7e3c9df2ce9da7015c9aba1ca92186671a97d55425537279224caa620a7262016de8d7476cb1c2f7a8f69cd82026853a4dc5bada", 0xf4}, {&(0x7f0000000580)="91dde7989c315fb6428be4d9ec16b07483087d53ad8886894bff73a66ba477d5692fa26ee1be6873f2910673e854528b92b27f3e931e8468bad824eceafd6f915b1aecc6352b99686578cecdd7b74c6c4e6ec6e6f3470439713157943fc21cd0b6cb8ca468d963f81ab13a43d02e953fc7cfd646b073c47b157b794772a66599bf195a7b881407475fe49a34c33aab207862745e5443fa19acc4a231edc1a1debb1bd225535424108bd409894c00f150218035d0e14a49fe24b1d4d8b4a3006db9845c5377e4041a205427b6bbe50f97de2ca55e120af2d7", 0xd8}, {&(0x7f0000000680)="5a944f5fb531d119b67694d37765d754b99622494a3dd7dfcde6906d454a6a26827a737bb5391aefa2d3271998f9d44a8b2abaa7941173b08f84cec7ab5d8d5712529564e1b16b30fbbc1600d9a7fc3bb0db325e86a0b12056c3d98016536e05c8394f615c14c644b23eb1588acbd4ff0d562c457a2b3d2ed59331cc12d4badc34e01da23f1aa1623b0a2b84f98fc350b4019ccf28760aa851f3a33a96a50de90021e7ad364adcb6707813679c4cdf9b7f191fe04835ba6cb38816cc6551a1f7943ae980c9ad1bb629634805a88589f0664b60e3e7686ab70346363b45dc76f915920a92dcf260ab2b4ebd0821d52bcc178ceecc37a937e5a498f9e6a47e29d80f0e5471bfe8cf3e75578791cf6d0e974ff93604b0b99f5d7e641abb1d472262eb0963fac351617495a1bf8e59410de56a9f920684c0203832686ce5d2c826bc72e4ccaca375035b7dd5788e3329992b49e1f03d653e4b254da4dd9d67f33ed290d52ea5d8a9ed5b8261353c82833c454d34ea1159040b631dd2653692d8918ed973f005d75812d6ca07f2e80f9eb893c84a9192254897f410c391b5d0f80269bc5878723958187889105c162d28ab80d154747240e8c91a4a8ffc7c217470cb867d89b03b632181a1de217f32dd206fce4b8656ce377401aa70688276dadd1d302967309ab2f50f20ddaa2e55f617bac943274a59acc8a65b9e13391e9c4e733fbdf1878b5104b36eb99f414688185e9c4aba75ea215c2d92b951a03e940f3f85119a14bfcb8cc4b0d3892b47f150acafebfbb41c44863155e0ebbeb20a16e59a0e9fffc0081d73af166d870627f0dd7858f4638bd01b626d88c7507e4701f3bf9941a66f3657019ce17855033e48f868b21f79e3af88ba4213ce7b86eda9bec0c1b0a04a73f4ae3745ecfe3067221cb9941b84164a09a25b99ce9d459df5cbe65eae7243907893b027c46b5dcc33b345efb7ff13ea786f3c6391726a9b2e73b920b6d087072c7c59fbe78747f6737e22b3c203db7991f614d3ab3353edba5450eceec5716f9aaf0bd6f56111392b911ecdf98fa7a55b4702c31841d463df17dbb1f15d943663381e6f05af85fd38ce8d5e9e3abc46bdb83b84860592e77fad9886ca832305d78691dabefa26c784768ae5f5827d2a83900be70fce07bdeb653eba7ed7a67cefb18013e80c93ded72d7288dad7a9f7eec10ca8fd1106300000eccdcab34c5a0e90b9f51a97bd8dde51ecf69df15f0e94d666b69d969d26a13402ccade2ca44241e5c01a128bc94d2145d52c734606aac2717a42bbfc7572495018541befa1aa58677d32702c7dec83fadd79c14b08fb6c6388ec52b5f9b9fc489749490a80046fbd0729f13f6a6e07ba8a4310fd5926a4a4fbf327a60d8844df212b89a5cee505cfd07bbbad20c81839ee17e130e0864ab739d8bc55a14a3e7e9973f32e8c01ee4585fda45697fe4b16c4f2331465e51adc71beb2624f6c8be4b160fda9ddec75f975c03b8e3b3574ef81edc99bb970782f6f95c35d403e5b59ff1168f357239a46db51665c51e77b4a96605d8846f234b50934c06a9e25117ea640f6628aeaa5c7aacea439a1f8e9c4aa643b5d5a988a04a0b95582ccdcc6362870a5dbdecd244a9efe1e487edd2511ffd80c926517679fe47bf5433d2796d22fc51883d7dde5b3d842b31e6b7359cedf6e9cc8e157c130e3f23a649c9d188d9ee7d0b4b079152a7b0e4c96aa7940776a8ed783f31ba890f9fed2501a064a03c59447c83ca41a18f3cbd62e182f53ee10d97cfe46590abf5cca50057c8d767e14d53c2a4879c15d33709e8928dc7e9d6a196521d602f5a47e9d144e097f39ed12220aa3872daaaa9afa3331c9774eb720e1aea532fd5dc33429057a59d07a73ae6e44d0955471358eb5b6e6e009503829981be3590b93c6785f6eac8a53652669ac4990ee7a742ba5543d104e1b0de75889eccace666e5e000b17c2b1acc2622152a66bbac2f197b0806bb20b143564958098788407cde2cb9bee9a17253100b9ed527461603f68ce75453320affecf5fdd3fa7f2b3fea043b963161e7b82169b8aa36269ca6350828d7e133271abe7e76dfdd19dfddf709444681ef0bdb96d4248bb8bd644f178ab0c8aab9d4b4c2f2048da5e72ff15845bafb84b90517f7c322cb92e989eb087f1cce6cdf2007843f7d6103515b4dd4a3986268843151505d6b313f52645c00cce7fdc8ebc1129c430331f53da3bd2969db29030ca1e566fe2ba876d9a48bd3e4eefd63632620a688b9faf2566d01bab0e3b1b58212e77e9bc1cb697e5375119c42cb606aac56a2a189cb0af85f956f5ea67c67c7cda0fcf585623cab7445fd42e4b994308268c445ffafe5fec22f2613d83ddbbf0566e34860e73ffac2e4ea93421e83071927fc77117759966962538ad8eefd368421ea500563fca82a87b997ee7e3051f08303c8ac6d7fdfaf3df0419e8103aeff8b7d4588d49cc9ec2487e6ea29ce6ec25cfb9354eeb20a33dd4e5e4a05fb7c3341d7be448ccb23c58a2edd71ece23ceea105eeadef5aa7669dfa47a3c31835b0a8e073bc89ac0be2aef4848862cc101839c8f94be371700ded6ca0b90cfe6850614ff5877fb4bf7e454c65263e0a8602dfc77396fb8cdc694f809f89ef542b3a8e02f3db7b9f79f282d4f1b9cb43434afbbd203213e9caaeadbdfb6d86abf75e4b28c4c234047dd30a3f1e01d999ff3cb8120a106fb66b80517840d33b5f32372aa3ab294cb93a45d587126e46acdb5408e87cca1e1ccfb3fe4c708a2de7293e6c8e963baa85413eac1ca8cdaaf2dfe6639773efd210e20f1068ba486baa4b1d17a618f213282c0fc9b8f94759a1b4f155d4d54f105cdd46ca5041a4d3cb41c2d3689a687c34c80d2a6936b39e38057c1f37d5923e0cf662b08f6a73a34ec9f4100bbd98e316f74e9ca5221f84f63f506e2657529aa28ce9d9b739ca0951d8ecae0ded8403a1d5c024781d6864c6d31c125454832d66e4b1d68b0761abf8109df9a3e93f28e516c771ce9d6ef5ce7433bfce8055dfccfac6c7266d54225075959a59295171664d27ae7aa4f935716c0afa8e2bf6b771a73afc731b4705e53be4a2b63eb287485af65435673d369e8652deb25ca61ca3263bff866ac323c9bfc2d3a4aa48339c6f44c59b8e3bea97947fe00e176245a3e5d7ad0ac3253471bf7fe3591cd62c7d85270d524c73dd9b2cb3e25ca5c8d711ea5b35dc91372219a61ad59e34bc8e0a1ec1315e935f28dbe469be4a7911c1129e2a60b44225b0d4bc2767703d398ee7367e1b477ee8a4f43e4df7d8b82b17c3c5343edd43a42232f5cbcdb4af2bef638fb071c0a26299781435e74262db360dd4b20f83c22263e0fa14f4d098e04e502c6fdfb3fcf443e7e6b2a3e851d999cf4bb3c1b97160862b7f1d14328b0902eaafa8bb4baecf213268ae5d93a40cc2e2743b934f34b1f89ec1ce59f016abab77f0ec87629a59528be71bab164c393f63b2aa77f4be569262d91555d28dd7459596a910f14036076613bb80f3d6be31fe4a1d02c10815e7e2f6dfa7a5d04c67c376ef16cb0c9cbe34ae7792ed698c8d97fed6a04d2688d20fd357568e86f2811257c0e2484bd8e4fe6daf03516853d95ebe1d0da1e8c047511a50f75585249703504b470982ec178fbb20bfda600f4970f746e6d590e992ef1255f310cbcb5343d28eed37259d45d6244ba0a204c088ccaa5901b265762dda3ae79e82aade10ff1bff1c4636605a695d194bc963d7ed45b2ddfe4927a0420ddcf7bd618034ef901de759e4d8f656c67bed446b8525ab8ed4885ff516b821f91e17bc4b18a8ad97a298b3b1b89877cbbbd422ae7343128f28c6778ec445526229e1be9556741e552b24791462b425079599e3d5276da43f5c5dd07e4662877dfbae14a94447257f26f997a6bb3e8653ecf16dd39c87bd0efd736332121182f918512ed0a0f0d5e88e530b078b5d275862b109b334a296a84e56464d0c6fa2a3c04053ae999cef49a384b89cddd358dcd1fb5e0fb8cbc77cdafe550a2fb75ed70f9e79dcb08c8dce98049933496d85bfa3f4b299d8a3dd3e9e076b7f6f48b6ecf1f9ead45f92caa78edbb894128d521243f93218936cf1af297cb45e6be7351791c48a8802f1be23c3ce247c32cb95805ad4d0768c98f7b4c55cc49c89fb294c9148a2f39774893b3f45490257af30362f06591e274eb6824ab21c75d31b7871e0afa4ba8fc1943efe087a7482072c3814ccca0f6ef0446909eddeea75e9dfa425a9cc6ede2a5853e818a97f4d6895ef2c5942b9b6072999baba48cc57b3dd482246e1837e47ffaefb84d5fd8c649c6a14c4677b09df5488920647ca5e1ebf006eb783978a79382d515e48878413d6b65e4134296ccb9a3a67a545c1b1c4b54ebb79a02e5b1f8e3e6bf1c962a7edeb0c4fa18ce2693e248ca43852bfbc1b7c5816fa82388b5ab534ff8150b7575346249bf54b522839f189c59b7da05559df6c633b4eb83c2a6f42fa7186364a8276f138519fea984c62b669aaa4b466c5bba7d64ee49b42e0dbc943b394ea3aced14d9831eaa6b42041349440f7ae7885896b1dcd8904fd384dd18266f853d62e85d68b2c7908917c07471bfd52a114c4150930d22e4a445e80615062d2b6e1ccb05a92691552948ab82cdc480dbf376f61b407e8a55a62649fcc326d6b0064cf7f981c44f454c790d7287473139a43dec7c64bd35abeef28347fac0b1baa7e8426549a518cab042fb9958a22dc8fe90b91d16473ea7971914bc133ff4b01003718a23f294d3cb6192e8bb1cf23dc7329e7045d7d722cd33e26b2dfb040dd1ce374de0a20adb7da2102038b46ce5c26f9f60765efa3e5ee1782940d7e375a74ae35b167c14a068304a74a41507cb5eda85a868fb12d5077251bfaba03deed21ec855f9c88e7bd3e1f1e7ad1ae320332f1bac34782064a397fc7cf0f4cd5093cca98cd6450e51c70efe7774d36c5633a0c46179b16b57cfa509fca15407a856da94570dd0048bae23b1246be15ff5bb10a1841a3345dadc61dc5f871264a656f67a591bb6006cca918e7e97e4ee33f1cdd415f47c1fe83165bcfd631efe895a27017db9315e3c8ae34913e6c8bf690945e284bfe67c06bd55d82a2ad34a12af77ffbbd2ba72da0809b2b057b7ccba3b4dd803ae821adcc84b6c7291087ccaf411094fbc8c4f87c0b27c7b8b8277b9ffcdbe4e2958eb73831134e5462d4cd5370fcaf5548991810b08951ea39533fe81f2afdf12b07f0a5261243133c0ab223a2d9b5a9271b94968e9bb2c0330dc29a099e449c591fc17317f4541dfb21658956781556b892d52e832a088d6b8ded2b631c36fb08b3082247e032e2e9d36c10e6b1fd7e683a004dc95c060975baf5e14a29511cbfc29b8a9abe0556fa52ff39298358b1738dda11cd08525a3868d4c3ebf9d2c35e44640404f6ea695076a1ba6da2b3cc8bc1ca90ff1da2ead38390fc5ab77947adc16027262f96e2a03e42d75c44b8bab413b954f58d895feabbf3d89a593302a5d0028f051f675d73e67d2f7234759d7edc75745c5bde3c9d2321108e08d6dfcf2382e8a440a773c4d4d2f92322307e342239bc67eba8d9763f63b75f01ce14c932128aa2fb4b85e98554402037cc3d1b7844a7bf549ef4e25fe6264d8add12279a4868d5b44d917074ebdf7d7e7c4fbc07d69c951af7df63ca7d8c834c7f7a455b77c44606bf160ba3e862d999cd9ebd53b98b27ef2b733365895ab940378d30958a77", 0x1000}, {&(0x7f0000000480)="c10c53a817cdd088eda5a67fdaaab938d7052c55322ae446a03479d8149095d761a70e72118d83c637134460d5f4ec6e379f16dadbc7b4b94ee3403dc4e19fe8b82b4e09fea6a0275647f67b4363397554f79f9af3e275", 0x57}, {&(0x7f0000001680)="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", 0x1000}], 0x8, 0x200, 0x98d) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290565) [ 2885.278716][T32635] bond502: (slave bridge2895): Enslaving as a backup interface with an up link 10:31:39 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) mmap(&(0x7f00008cf000/0x4000)=nil, 0x4000, 0x9, 0x50, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:39 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f000039a000/0x2000)=nil, 0x2000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x1000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000000580)={{r1}, "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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2885.457036][T32635] bond502: (slave bridge2896): Enslaving as a backup interface with a down link [ 2885.583116][T32659] bond502: (slave bridge2897): Enslaving as a backup interface with a down link [ 2885.662631][T32691] bond502: (slave bridge2898): Enslaving as a backup interface with a down link 10:31:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290566) 10:31:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xfeffffff00000000}, 0x0) 10:31:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:39 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$AUDIT_USER_AVC(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0xa0, 0x453, 0x1, 0x70bd27, 0x25dfdbfb, "7a1bf99866e69bf625794f0cad5bbe0951015baf5bf253b249a47e8429216493198f5fcfaddc5193cd7612dc9ad5adf8d5c7bba58c788d511c9d5d61389ec36bb475bbca246d0144acecda493c3ed133b1619367fa993381bb9febafea0aa9f6afece19760fda7803f9ad9f95bf628b7969d9e44875e66ac4bf813a40caf320c0a389d6f2345ae6b10a45c30026350", ["", "", ""]}, 0xa0}, 0x1, 0x0, 0x0, 0xd5}, 0x24008030) r1 = accept$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x8, 0x8010, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r5, r1, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:39 executing program 1: mmap(&(0x7f0000990000/0x3000)=nil, 0x3000, 0x2000002, 0x40010, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}]}, 0x1c}}, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r2, &(0x7f0000000300)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="44010000", @ANYRES16=0x0, @ANYBLOB="02002dbd7000fddbdf25020000001400018008000100", @ANYRES32=0x0, @ANYBLOB="08000300010000005c000180140002006e65747063693000000000000000000008000100", @ANYRES32=r6, @ANYBLOB="140002006e6574706369300000000000000000001400020065727370616e30000000000000000000140002006d6163766c616e3100000000000000002c000180140002006e65747063693000000000000000000014000200687372300000000000000000000000002000018006000100", @ANYRES32=0x0, @ANYBLOB="140002006e657464657673696d300000000000002000018008000100", @ANYRES32=r10, @ANYBLOB="1400020076657468315f746f5f62617461648600140001800800010057217809ad2fe78430926408", @ANYRES32=0x0, @ANYBLOB="00000200767863616e310000000000000000000040000180080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="0800030006000000080003000300000008000100", @ANYRES32=0x0, @ANYBLOB="1400020076657468315f6d616376746170000000"], 0x144}}, 0x800) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2885.949752][T32704] bond503: (slave bridge2899): Enslaving as a backup interface with an up link [ 2885.981367][T32704] bond503: (slave bridge2900): Enslaving as a backup interface with a down link 10:31:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290567) [ 2886.002509][T32747] validate_nla: 3 callbacks suppressed [ 2886.002530][T32747] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2886.084884][T32747] bond503: (slave bridge2901): Enslaving as a backup interface with a down link [ 2886.105215][T32743] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:39 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r0, 0x401, 0x7fffffff, 0x40}) pwritev(r2, &(0x7f0000000000)=[{&(0x7f0000000580)="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", 0x1000}], 0x1, 0x7fffffff, 0x4) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000005400)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_dccp_int(r3, 0x21, 0x3, &(0x7f0000005440), &(0x7f0000005480)=0x4) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r4, 0x0, r5, 0x0, 0x19404, 0x0) getsockopt$inet6_buf(r4, 0x29, 0x0, &(0x7f0000000180)=""/27, &(0x7f00000001c0)=0x1b) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290568) [ 2886.139930][T32757] bond503: (slave bridge2902): Enslaving as a backup interface with a down link 10:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xffffff7f00000000}, 0x0) 10:31:40 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl(r2, 0x4, &(0x7f0000000180)="dbb22c1999b05ee396a6e52b4aedc150567fe3b445b9b43d7dab37dadbb9377fef477b435d00767ccbf4351f530eee4117a5f19b179922c70697cad1cc9d61a6365778ef53f80d8d7f0cba647b010e9dd2559b65458a8dd6565dfb65a18169a5e9adbda725307636bb3434ad3a1ceaaffd21f7") r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:40 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290569) 10:31:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2886.373137][ T304] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:40 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) openat$cgroup_ro(r4, &(0x7f00000003c0)='net_prio.prioidx\x00', 0x275a, 0x1000000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x0, &(0x7f0000000000), &(0x7f0000000100)='syzkaller\x00', 0x3, 0xa8, &(0x7f0000000180)=""/168, 0x41000, 0x1a, '\x00', 0x0, 0x0, r0, 0x8, &(0x7f0000000240)={0xa, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0xe, 0x13fc52b5, 0x4}, 0x10}, 0x78) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r6, 0x8040942d, &(0x7f0000000340)) [ 2886.438899][ T37] kauditd_printk_skb: 80 callbacks suppressed [ 2886.438917][ T37] audit: type=1804 audit(1625221900.173:3011): pid=308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7369/memory.events" dev="sda1" ino=13976 res=1 errno=0 [ 2886.660738][ T310] bond504: (slave bridge2903): Enslaving as a backup interface with an up link [ 2886.677351][ T359] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2886.695526][ T37] audit: type=1800 audit(1625221900.173:3012): pid=308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=13976 res=0 errno=0 10:31:40 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f0000000180)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xa, 0x6, 0x7, [@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2886.751798][ T37] audit: type=1804 audit(1625221900.273:3013): pid=352 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7369/memory.events" dev="sda1" ino=13976 res=1 errno=0 [ 2886.775476][ T323] bond504: (slave bridge2904): Enslaving as a backup interface with a down link [ 2886.809734][ T37] audit: type=1804 audit(1625221900.273:3014): pid=351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9208/memory.events" dev="sda1" ino=14115 res=1 errno=0 10:31:40 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056a) [ 2886.853284][ T310] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:40 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x330b6da4a96e426e, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2886.954101][ T310] bond504: (slave bridge2905): Enslaving as a backup interface with a down link 10:31:40 executing program 1: r0 = accept$unix(0xffffffffffffffff, &(0x7f0000000180)=@abs, &(0x7f0000000100)=0x6e) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, r0, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = accept4$unix(r0, &(0x7f00000002c0)=@abs, &(0x7f0000000340)=0x6e, 0x80000) connect$unix(r4, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0x8) ioctl$TUNSETLINK(r5, 0x400454cd, 0x8) [ 2886.989129][ T37] audit: type=1800 audit(1625221900.273:3015): pid=351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14115 res=0 errno=0 [ 2887.091967][ T323] bond504: (slave bridge2906): Enslaving as a backup interface with a down link [ 2887.111252][ T37] audit: type=1804 audit(1625221900.293:3016): pid=351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9208/memory.events" dev="sda1" ino=14115 res=1 errno=0 [ 2887.141966][ T379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0xffffffff00000000}, 0x0) [ 2887.174140][ T37] audit: type=1800 audit(1625221900.313:3017): pid=351 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14115 res=0 errno=0 [ 2887.196950][ T37] audit: type=1804 audit(1625221900.323:3018): pid=354 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9208/memory.events" dev="sda1" ino=14115 res=1 errno=0 [ 2887.224866][ T37] audit: type=1804 audit(1625221900.343:3019): pid=359 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5843/cgroup.controllers" dev="sda1" ino=14146 res=1 errno=0 [ 2887.251842][ T37] audit: type=1804 audit(1625221900.373:3020): pid=360 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7369/memory.events" dev="sda1" ino=13976 res=1 errno=0 10:31:41 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056b) [ 2887.351766][ T391] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:41 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2887.513981][ T393] bond505: (slave bridge2907): Enslaving as a backup interface with an up link [ 2887.631479][ T391] bond505: (slave bridge2908): Enslaving as a backup interface with a down link [ 2887.677689][ T393] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:41 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:41 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056c) 10:31:41 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2887.809072][ T393] bond505: (slave bridge2909): Enslaving as a backup interface with a down link [ 2887.930138][ T435] bond505: (slave bridge2910): Enslaving as a backup interface with a down link 10:31:41 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}}, 0x0) [ 2888.000660][ T454] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. 10:31:41 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x19406, 0x0) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) r4 = openat$cgroup_ro(r3, &(0x7f0000000540)='devices.list\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140)=0x9b, 0x12) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040)=0xa00, 0x100000003) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_WIPHY(r3, &(0x7f0000000280)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x102, 0x79}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x191c8a5330c89b2a) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:41 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056d) [ 2888.143881][ T461] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2888.288132][ T467] bond506: (slave bridge2911): Enslaving as a backup interface with an up link 10:31:42 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/uts\x00') sendfile(r5, r7, &(0x7f0000000040)=0xa00, 0x100000007) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f00003cc000/0x2000)=nil, 0x2000, 0x2, 0x11, r0, 0x4dab8000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_user\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000080)) [ 2888.391816][ T461] bond506: (slave bridge2912): Enslaving as a backup interface with a down link 10:31:42 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2888.448624][ T467] bond506 (unregistering): (slave bridge2911): Releasing backup interface 10:31:42 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffb000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) sendfile(r1, r1, &(0x7f0000000000)=0x1ff, 0x1) openat$cgroup(r1, &(0x7f0000000180)='syz1\x00', 0x200002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, r3, 0x0, 0x7f) openat$cgroup_ro(r1, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x275a, 0x1000000) [ 2888.613731][ T467] bond506 (unregistering): (slave bridge2912): Releasing backup interface [ 2888.623806][ T517] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2888.783247][ T467] bond506 (unregistering): Released all slaves 10:31:42 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056e) [ 2888.901879][ T461] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:42 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f000044b000/0x4000)=nil, 0x4000, 0x2, 0x2010, 0xffffffffffffffff, 0x8d97000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x8000, 0x0, 0x7}) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r0, r2, &(0x7f0000000000)=0x7ff, 0x104000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket(0x4, 0x2, 0x2df559dd) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r4, 0x660c) 10:31:42 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r1, 0xffffffffffffffff, 0x0, 0xffffffff800) sendfile(r1, 0xffffffffffffffff, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2889.163258][ T562] bond506: (slave bridge2913): Enslaving as a backup interface with an up link 10:31:43 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x50, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='devices.list\x00', 0x275a, 0x1000000) [ 2889.260433][ T597] bond506: (slave bridge2914): Enslaving as a backup interface with a down link [ 2889.278361][ T461] bond506 (unregistering): (slave bridge2913): Releasing backup interface 10:31:43 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30000000001000"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2889.454020][ T461] bond506 (unregistering): (slave bridge2914): Releasing backup interface [ 2889.535699][ T461] bond506 (unregistering): Released all slaves 10:31:43 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x2}, 0x0) 10:31:43 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_deladdr={0xa4, 0x15, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0xfd, r7}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x4, 0x0, 0x7}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xfff, 0x20, 0x100}}, @IFA_LABEL={0x14, 0x3, 'bond_slave_0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x800, 0x800, 0x8, 0x2}}, @IFA_LABEL={0x14, 0x3, 'netdevsim0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) 10:31:43 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29056f) 10:31:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = epoll_create1(0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r2, 0x84009422, &(0x7f0000000580)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r1, 0xc4009420, &(0x7f0000000980)={0x12, 0x0, {0x0, @usage=0x8000, r3, 0x2d9, 0xffffffff00000000, 0xfffffffffffffc01, 0x2a, 0x0, 0x469, @usage=0x3f, 0x61c, 0x2, [0x9, 0x40, 0x3f, 0x4, 0x80000000, 0xffffffff]}, {0x100000000, @struct={0x1, 0x3}, 0x0, 0xce0, 0x101, 0xffffffffffff8e2c, 0x1f, 0x7, 0x4, @usage=0x2, 0x8, 0x9, [0x7f, 0x9, 0x3, 0xfff, 0x6, 0xffffffff]}, {0x9, @usage=0x2, 0x0, 0x8b0b, 0x72b4, 0x1, 0x0, 0x7, 0x4, @usage=0x1f, 0x10000, 0x0, [0x9, 0x4, 0x7, 0x7fffffff, 0x9, 0x2]}, {0x101, 0x1ff, 0x1}}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000001580)={{}, 0x0, 0x12, @inherit={0x68, &(0x7f0000000180)=ANY=[@ANYBLOB="000000000000000004000000000000000a000000000000000900000000000000010000000000000008000000000000008100000000000000000001000000000001000001000000000800000000000000001000000000000008000000000000000002000000000000"]}, @devid=r3}) mmap(&(0x7f0000613000/0x2000)=nil, 0x2000, 0x1000006, 0x1010, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000140), 0xff4d) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040)=0xa00, 0x100000003) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), r4) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r7, 0xd000941e, &(0x7f0000000580)={0x0, "b1fc5cae6174712345130a699c0d770f"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2889.796545][ T659] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:43 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290570) 10:31:43 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f00000001c0), r0) sendmsg$L2TP_CMD_NOOP(r0, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x1, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x20000) r4 = socket$rxrpc(0x21, 0x2, 0xa) mmap(&(0x7f0000694000/0x2000)=nil, 0x2000, 0x4, 0x14030, r4, 0x28a48000) sendfile(r2, r1, 0x0, 0xffffffff800) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r1, 0x40189429, &(0x7f0000000000)={0x1, 0x4, 0x7}) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) ioctl$HCIINQUIRY(r2, 0x800448f0, &(0x7f00000002c0)={0x4, 0x4, "4b8f43", 0x1, 0x8}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010800000000678b997a6c2efb0000000021000000efff0300", @ANYRES32=r7, @ANYBLOB="080084800400068008009e000a000000"], 0x2c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) mmap(&(0x7f000009c000/0x11000)=nil, 0x11000, 0x2000004, 0xdc3ea4136009fb33, r0, 0xeff21000) [ 2890.084116][ T665] bond506: (slave bridge2915): Enslaving as a backup interface with an up link [ 2890.248057][ T659] bond506: (slave bridge2916): Enslaving as a backup interface with a down link [ 2890.316668][ T701] bond506 (unregistering): (slave bridge2915): Releasing backup interface [ 2890.329106][ T716] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:31:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30000000001000"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2890.558033][ T701] bond506 (unregistering): (slave bridge2916): Releasing backup interface [ 2890.752504][ T701] bond506 (unregistering): Released all slaves [ 2890.819863][ T659] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2890.837341][ T718] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:31:44 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0xa, 0x4000010, r2, 0x4000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) write(r4, &(0x7f0000000000)="1c5f836ee1a16786aae06604022b3315b0fe9659a7da22dccc92cbd1a47e1a44adf90d", 0x23) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:44 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a30000000001000"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:44 executing program 3: ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f0000000580)={0x9, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x8, "93f4bb3165977c"}) ioctl$BTRFS_IOC_TREE_SEARCH_V2(0xffffffffffffffff, 0xc0709411, &(0x7f0000000180)={{0x0, 0x10000, 0x9, 0x100000000, 0x81, 0x7, 0x80000000, 0x9, 0x3, 0x555, 0x2, 0x20, 0x8, 0x9, 0x4}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f0000001580)={r0, r1, "9bfe4b3765881c43d052012a779d3411781b2e8691bf7a9d579854bf4e03fad92a4874bc8fdc58962628063fa18a8d42b020eb8303c9d527c4ae89de411bd4cc428b4c226fdfd2c212aaf838d7d7fab3a3c42e70cc13752d6d3519e9648e37f6c50bbea1c437f94cd8b45a63830ea8d73820bce83e5e36dbc7bb327f6f59597b083b50d32baa7ff043ae66f2aaeffd9504f323a73c64d222cf0ccc6d0f4d1d25b2be51708cd3836eedd2d017c60b948201ad755f70c93614c04f4b24aae04171e5bf56e87f78f71191a89a6953ac11138aa639b29d97e8c2f410af231532a16d6b77070e470449cdc03fba1933c804bcf419a9a27cb5353e5a4670425d3d2560", "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"}) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000080)='cpuacct.usage_percpu_user\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r4, r5, &(0x7f0000000040)=0xa00, 0x100000003) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0', [{0x20, '&w[[]'}], 0xa, "9bfecb9b7cc1914f6946ff2746620ee46eef1ad3d4197b401bd66e3d8aac59"}, 0x30) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:44 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(0xffffffffffffffff, 0x89fb, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000180)={'ip6gre0\x00', 0x0, 0x2f, 0x0, 0x3, 0x2, 0x25, @rand_addr=' \x01\x00', @loopback, 0x8000, 0x8086, 0x3, 0x9}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="c00100001800000126bd7000fbdbdf25021400fdff01ff0b0008000008000700ac1414bb0c00090001803b07", @ANYRES32=r0, @ANYBLOB="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"], 0x1c0}, 0x1, 0x0, 0x0, 0x20}, 0x24000040) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15) r2 = openat$cgroup_ro(r1, &(0x7f0000000440)='pids.current\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:44 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x3}, 0x0) 10:31:44 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290571) 10:31:44 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:45 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa04, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:45 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290572) [ 2891.293491][ T791] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:45 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2891.456895][ T37] kauditd_printk_skb: 100 callbacks suppressed [ 2891.456912][ T37] audit: type=1804 audit(1625221905.193:3121): pid=830 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7378/memory.events" dev="sda1" ino=13988 res=1 errno=0 10:31:45 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140)=0xf31e, 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2891.549677][ T794] bond506: (slave bridge2917): Enslaving as a backup interface with an up link [ 2891.600770][ T37] audit: type=1804 audit(1625221905.333:3122): pid=843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9220/memory.events" dev="sda1" ino=13992 res=1 errno=0 [ 2891.653640][ T791] bond506: (slave bridge2918): Enslaving as a backup interface with a down link [ 2891.691447][ T37] audit: type=1800 audit(1625221905.363:3123): pid=843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=13992 res=0 errno=0 [ 2891.713563][ T836] bond506 (unregistering): (slave bridge2917): Releasing backup interface 10:31:45 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) socket$rds(0x15, 0x5, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = socket(0x8, 0x0, 0x401) sendfile(r5, r7, 0x0, 0x2) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) sendmsg$TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="00b9", @ANYRES16=0x0, @ANYBLOB="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"], 0x1268}, 0x1, 0x0, 0x0, 0x4048010}, 0x45000) [ 2891.825451][ T37] audit: type=1804 audit(1625221905.363:3124): pid=843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9220/memory.events" dev="sda1" ino=13992 res=1 errno=0 [ 2891.854260][ T37] audit: type=1804 audit(1625221905.383:3125): pid=843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9220/memory.events" dev="sda1" ino=13992 res=1 errno=0 [ 2891.886735][ T37] audit: type=1804 audit(1625221905.383:3126): pid=841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5850/cgroup.controllers" dev="sda1" ino=13977 res=1 errno=0 [ 2891.921325][ T37] audit: type=1800 audit(1625221905.393:3127): pid=843 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=13992 res=0 errno=0 [ 2891.922154][ T836] bond506 (unregistering): (slave bridge2918): Releasing backup interface [ 2891.950873][ T37] audit: type=1804 audit(1625221905.393:3128): pid=847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9220/memory.events" dev="sda1" ino=13992 res=1 errno=0 [ 2891.989815][ T37] audit: type=1804 audit(1625221905.393:3129): pid=847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9220/memory.events" dev="sda1" ino=13992 res=1 errno=0 [ 2892.022718][ T37] audit: type=1804 audit(1625221905.553:3130): pid=851 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9221/memory.events" dev="sda1" ino=14162 res=1 errno=0 [ 2892.142756][ T836] bond506 (unregistering): Released all slaves 10:31:45 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2892.228175][ T791] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:46 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:46 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) bind$bt_sco(r2, &(0x7f0000000000)={0x1f, @none}, 0x8) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendfile(r3, r0, &(0x7f0000000100)=0xd69, 0x7fffffff) r4 = ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) sendfile(r4, r1, &(0x7f0000000040)=0x20000000000, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:46 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290573) 10:31:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 10:31:46 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000180)=0x3, 0x4) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[], 0x15) openat$cgroup_ro(r5, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x1000000) [ 2892.747013][ T922] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:46 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290574) 10:31:46 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$F2FS_IOC_RELEASE_VOLATILE_WRITE(r3, 0xf504, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2892.951499][ T926] bond506: (slave bridge2919): Enslaving as a backup interface with an up link [ 2893.099080][ T922] bond506: (slave bridge2920): Enslaving as a backup interface with a down link 10:31:46 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r3, 0xc028660f, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x7f, 0x3, 0x800, 0xa40}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2893.179718][ T967] bond506 (unregistering): (slave bridge2919): Releasing backup interface 10:31:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:47 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r2, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2893.433313][ T967] bond506 (unregistering): (slave bridge2920): Releasing backup interface 10:31:47 executing program 1: mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) openat$cgroup_ro(r0, &(0x7f0000000180)='freezer.state\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$FS_IOC_SETVERSION(r4, 0x40087602, &(0x7f0000000000)=0xfffffffffffffffc) [ 2893.669393][ T967] bond506 (unregistering): Released all slaves [ 2893.736534][ T922] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:47 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290575) 10:31:47 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0xffffffffffffff10, 0x8}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r0, r1, &(0x7f0000000240), 0x20) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000140), 0xff4d) sendfile(r5, r4, 0x0, 0xffffffff800) sendfile(r5, r4, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c0001"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) 10:31:47 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290576) 10:31:47 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x5}, 0x0) 10:31:47 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f000044e000/0x4000)=nil, 0x4000, 0x200000a, 0x10010, r0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x65, &(0x7f00000003c0)=0x6, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000300)={'syztnl2\x00', &(0x7f0000000180)={'erspan0\x00', 0x0, 0x1, 0x10, 0x9, 0xffff0301, {{0x53, 0x4, 0x2, 0x0, 0x14c, 0x66, 0x0, 0x3f, 0x29, 0x0, @rand_addr=0x64010101, @multicast2, {[@timestamp_prespec={0x44, 0x54, 0x70, 0x3, 0x0, [{@empty, 0x3}, {@dev={0xac, 0x14, 0x14, 0x21}, 0x9}, {@rand_addr=0x64010101, 0x9382}, {@initdev={0xac, 0x1e, 0x1, 0x0}}, {@broadcast, 0x9}, {@rand_addr=0x64010101, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x10001}, {@loopback, 0x1}, {@multicast1, 0x7}, {@private=0xa010102, 0x3ff}]}, @generic={0x89, 0x4, "c450"}, @timestamp_addr={0x44, 0x4c, 0x48, 0x1, 0xe, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@private=0xa010101, 0x3}, {@remote, 0x10000}, {@broadcast, 0x5}, {@remote, 0x8}, {@broadcast, 0x7}, {@rand_addr=0x64010101, 0x4}, {@dev={0xac, 0x14, 0x14, 0x33}, 0x5}]}, @timestamp_prespec={0x44, 0x24, 0x3f, 0x3, 0xe, [{@broadcast, 0x11}, {@remote, 0x3ff}, {@multicast2, 0xffffffff}, {@multicast2, 0xffff}]}, @rr={0x7, 0x23, 0x13, [@multicast2, @empty, @multicast1, @multicast2, @empty, @multicast2, @rand_addr=0x64010101, @multicast2]}, @ssrr={0x89, 0x3, 0x73}, @timestamp={0x44, 0x14, 0xcd, 0x0, 0x9, [0x54d6, 0x908, 0x6, 0x10001]}, @end, @timestamp_prespec={0x44, 0x34, 0xc6, 0x3, 0x6, [{@multicast1, 0x10000}, {@multicast2, 0x1000}, {@empty, 0x1ff}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x100}, {@multicast2, 0xffff}, {@private=0xa010102, 0xc0000000}]}, @noop]}}}}}) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)={0x31c, 0x13, 0x20, 0x70bd2a, 0x25dfdbfc, {0x5, 0xff, 0x7, 0x81, {0x4e22, 0x4e24, [0x0, 0x400, 0x40, 0x401], [0x4, 0x6, 0x0, 0xaa3], r4, [0x6, 0x100]}, 0x8000, 0x4}, [@INET_DIAG_REQ_BYTECODE={0xed, 0x1, "9f9b9177c8e5b97cb86a2949c700c1289f8b0798a4ce13e43a1a6fbe790d17952c16b77682d488876a49e9c90b32a1b11b3e5e4126e607dfa18bb84566dd2135bbc00bb9ff53b6ac927a117f65cece5ea25d42d9fb27860c772f12da62ad9850b889d61ceb4232f5a671288359b783b1c98b97ccc996c5d100639617bbf311e0f954e29d9c459b2b7827dc5ab4c9872d4754cd5eb59fc281c954f74d5f6e6c568f7d247d4cfa1f5ff9dfd29c766d00947326a0f6ebd6369370be9419bda8567e0ad4512c26c680aba71425db7575287b236bbff416d6df2c41769b6b5692ef4ed5ddf1a5a000b8238b"}, @INET_DIAG_REQ_BYTECODE={0xfb, 0x1, "babc6a2e6a72ea3d8a35ccb5bfc5dfeb2ef7f693b83bc5b74205dcdb67d55ddfedbede0d40d5c6e6727fc94170e132b0ef6bc8b1cce9bb612d2093a6bf9236a0a0b0909840f48e66a38df46f6e12e5e5d5f4637c300cab16638d5de7a8ef4842e7a788b3ebe9cfd1c6807b7dc1414c4964be2e36847b3eda0a604f1fff7a1b2bae96e1c520468fe6227313ebd6f601e4f0edc2fb08cd4a5ff5114e9f7aa975f65eb8f981aeacefd7ed84645ecc04b1655d2806c29a8339848aba1f8b6c0a72772ee78c24eeef0a818702ef803e6edf6625237102bc2470a780d4427af813887b2c2c0c082a47c7fba8e0b222939959319944e59213074f"}, @INET_DIAG_REQ_BYTECODE={0x9, 0x1, "54802d3181"}, @INET_DIAG_REQ_BYTECODE={0x8b, 0x1, "a54a63f5b9757b4e0635282ea2d94e0d7fd8f8de9b05fd81c45acf5ef2a5839cfca155a48d68e3776e542b7a3b7899ae21264ff15c7c6a3eb02d4519a8f6e321e375d6580ee51d881f9fb3deb4e896bd6070e50d32940d47f264bb2ed8346ea3a13e8041ba65e932e28238007bd0a24c8930aac545c10275e9efc5c6db538e231524d00e980c91"}, @INET_DIAG_REQ_BYTECODE={0x4b, 0x1, "f4cf16506c5cddf70898b2ff2e4b0321efd52a0180ca940658caaab11ec4b28002629b6a6896e4c39ad30f07ba6ae0bec20a45fbb9ccf9ed19a3c230b7bea9103122ff28f82a73"}]}, 0x31c}, 0x1, 0x0, 0x0, 0x20004000}, 0x4008008) openat$cgroup_subtree(r3, &(0x7f0000000000), 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$FIONCLEX(r1, 0x5450) sendto$inet6(0xffffffffffffffff, &(0x7f0000000400)="841c006c277610c22cd61e1a790fe17e3d6d129c435b7c8b98abfb85b9262f4310c7311a02905e9ad9131f911257c6ef97c1bb47ef6cb9138e1eeabaa9ae07ac77be9d6149ddd84489ce1d509f2521f32d25a5d211803b3fe9f773699debb1a87e19e7161844d7f1c08f79d542b714cb53711aa77771f2e0b1a191af96b4bc43", 0x80, 0x4000805, 0x0, 0x0) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r5, r3, 0x0, 0xffffffff800) sendfile(r5, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2894.121284][ T1048] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:47 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000000)={r3, 0x4, 0x4, 0x3}) openat$cgroup_int(r4, &(0x7f0000000100)='cgroup.clone_children\x00', 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:48 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa01, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2894.291587][ T1055] bond506: (slave bridge2921): Enslaving as a backup interface with an up link [ 2894.445515][ T1048] bond506: (slave bridge2922): Enslaving as a backup interface with a down link 10:31:48 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = accept4$inet(r1, 0x0, &(0x7f0000000100), 0x80800) setsockopt$inet_sctp_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000200)={0x9, 0xf2, 0x3, 0x7f, 0x40, 0x20, 0x6, 0xfc, 0xcd, 0x4, 0x1f, 0x0, 0xfb, 0x71}, 0xe) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x275a, 0x1000000) openat$cgroup_ro(r4, &(0x7f0000000180)='hugetlb.2MB.limit_in_bytes\x00', 0x0, 0x0) 10:31:48 executing program 3: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r0, 0x6}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2894.528322][ T1092] bond506 (unregistering): (slave bridge2921): Releasing backup interface 10:31:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c0001"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2894.754408][ T1092] bond506 (unregistering): (slave bridge2922): Releasing backup interface [ 2894.926372][ T1092] bond506 (unregistering): Released all slaves [ 2894.990660][ T1048] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:48 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290577) 10:31:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c0001"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2895.164053][ T1153] bond506: (slave bridge2923): Enslaving as a backup interface with an up link [ 2895.275348][ T1160] bond506: (slave bridge2924): Enslaving as a backup interface with a down link 10:31:49 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x6}, 0x0) 10:31:49 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290578) 10:31:49 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) [ 2895.431493][ T1202] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:49 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) r3 = socket$inet_tcp(0x2, 0x1, 0x0) sendfile(r2, r3, &(0x7f0000000100)=0x100, 0x1c2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) listen(r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2895.593912][ T1208] bond507: (slave bridge2925): Enslaving as a backup interface with an up link 10:31:49 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290579) [ 2895.701741][ T1235] bond507: (slave bridge2926): Enslaving as a backup interface with a down link [ 2895.763922][ T1202] bond507 (unregistering): (slave bridge2925): Releasing backup interface 10:31:49 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'rmd160\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) epoll_create1(0x80000) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, &(0x7f0000001180)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, &(0x7f0000000980)={0x12, 0x0, {0x0, @usage=0x8000, r5, 0x2d9, 0xffffffff00000000, 0xfffffffffffffc01, 0x2a, 0x0, 0x469, @usage=0x3f, 0x61c, 0x2, [0x9, 0x40, 0x3f, 0x4, 0x80000000, 0xffffffff]}, {0x100000000, @struct={0x1, 0x3}, 0x0, 0xce0, 0x101, 0xffffffffffff8e2c, 0x1f, 0x7, 0x4, @usage=0x2, 0x8, 0x9, [0x7f, 0x9, 0x3, 0xfff, 0x6, 0xffffffff]}, {0x9, @usage=0x2, 0x0, 0x8b0b, 0x72b4, 0x1, 0x0, 0x7, 0x4, @usage=0x1f, 0x10000, 0x0, [0x9, 0x4, 0x7, 0x7fffffff, 0x9, 0x2]}, {0x101, 0x1ff, 0x1}}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000000580)={r5, 0x9, 0x0, [0x10000, 0x6, 0x1, 0x7, 0xf8], [0x7076ddd1, 0x7, 0x1, 0x3f, 0x20, 0x8, 0x7425, 0x7, 0x9, 0x8, 0x161, 0x7f, 0x400, 0x2, 0xfffffffffffffffc, 0x2, 0x81, 0x7fffffff, 0x10000, 0x100, 0x1, 0x0, 0x5, 0x7, 0x7fff, 0x8, 0x8001, 0x7, 0x1f, 0x1ea6, 0x5, 0x8001, 0xec9, 0x8, 0xcd, 0xffffffff, 0x0, 0x9, 0x9, 0xffffffffffff6b6b, 0x1, 0x7, 0x7fffffff, 0x8000, 0x8aca, 0x906, 0x7, 0x1, 0x600, 0x0, 0x2, 0x0, 0x3a42, 0x7, 0x7fff, 0x1f, 0x6, 0x7fffffff, 0x9, 0xd5, 0x0, 0xfffffffffffff800, 0x0, 0x9, 0x5, 0xffffffffffffffc0, 0x1, 0x3, 0x7f, 0xa4f6, 0x20, 0x6, 0x6, 0x3f, 0x1, 0x8, 0x80000000, 0x6, 0x10000, 0x8e, 0x8c4, 0xfff, 0x8, 0x7, 0x8, 0x7, 0x0, 0x5, 0x8, 0x800, 0x9, 0x4, 0x7, 0x438060b5, 0x1, 0x4d, 0x0, 0x6, 0x3b, 0x0, 0x1f, 0x10000, 0x4a273611, 0x20, 0x3, 0x100000000, 0x6, 0x80000001, 0x2, 0x101, 0x401, 0x101, 0x800, 0x4000000, 0x0, 0x1, 0x80000000, 0x6, 0x2, 0x2, 0x8]}) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="a162f2", @ANYRES16=r6, @ANYRESHEX, @ANYRES32=0x0, @ANYRESDEC=r5], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x4044) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2895.952696][ T1202] bond507 (unregistering): (slave bridge2926): Releasing backup interface 10:31:49 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r4, r4, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2896.109566][ T1202] bond507 (unregistering): Released all slaves 10:31:49 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057a) 10:31:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 10:31:50 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', './file0', [{}, {}, {0x20, 'memory.events\x00'}, {}, {0x20, 'memory.events\x00'}], 0xa, "e56bff43671ac3b9ee1f5127c39f98bb22f3f5b2d503b15829c56049efe7d230b922eff672cb10a65a249aaec9b67969f63016a662f66046361c19e70cc8088ffbcd22841f5b3728540b545651b7b2ead12fc73d7ad396c64bf6d0a85951ec5ca7ae17e57739d62ad188a0ffbd7765acb011246f75444ed17017fa7b7de15559a1c9ccb73d5709b1dab0977a6bc7120c93c3d49e5aadad37a6a6ae8e56b2a456e7f68d805e7338ec15d60f333a52243934e165649d"}, 0xe1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r3, 0x6611) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f00000004c0)=@assoc_value={0x0, 0x7}, &(0x7f0000000500)=0x8) preadv(r1, &(0x7f0000000800)=[{&(0x7f0000000000)=""/53, 0x35}, {&(0x7f0000000180)=""/145, 0x91}, {&(0x7f0000000240)=""/68, 0x44}, {&(0x7f00000002c0)=""/199, 0xc7}, {&(0x7f00000003c0)=""/224, 0xe0}, {&(0x7f0000000580)=""/164, 0xa4}, {&(0x7f0000000640)=""/240, 0xf0}, {&(0x7f0000000100)=""/58, 0x3a}, {&(0x7f0000000740)=""/174, 0xae}], 0x9, 0x8, 0x1) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2896.303762][ T1208] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2896.459801][ T1235] bond507: (slave bridge2927): Enslaving as a backup interface with an up link [ 2896.478805][ T37] kauditd_printk_skb: 101 callbacks suppressed [ 2896.478819][ T37] audit: type=1804 audit(1625221910.213:3232): pid=1345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9228/memory.events" dev="sda1" ino=13986 res=1 errno=0 10:31:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057b) [ 2896.593006][ T1208] bond507: (slave bridge2928): Enslaving as a backup interface with a down link [ 2896.612023][ T37] audit: type=1804 audit(1625221910.263:3233): pid=1344 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5857/cgroup.controllers" dev="sda1" ino=14467 res=1 errno=0 10:31:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(0xffffffffffffffff, r1, 0x0, 0x100000001) 10:31:50 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x7}, 0x0) 10:31:50 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057c) [ 2896.750355][ T37] audit: type=1804 audit(1625221910.423:3234): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9228/memory.events" dev="sda1" ino=13986 res=1 errno=0 10:31:50 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$bt_rfcomm(0x1f, 0x0, 0x3) mmap(&(0x7f0000c77000/0x4000)=nil, 0x4000, 0x2, 0x1010, r3, 0xa544c000) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r0, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x3e, 0x11, 0x4}}}, 0x24}}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_DISASSOCIATE(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRESDEC=r2, @ANYBLOB="04005f0023002a000301002d1a0000000000000000000000000000000000000000000000000000000a0006005050505050500000"], 0x50}}, 0x0) sendmsg$NL80211_CMD_ADD_TX_TS(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c2e152542c2df1220d6484efe56f000000000", @ANYRES16=r7, @ANYBLOB="0854d67a3569820827bb0000007500000000000000ffffffffffff00"/44], 0x2c}, 0x1, 0x0, 0x0, 0x884}, 0x888) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2896.808773][ T1360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2896.884133][ T37] audit: type=1804 audit(1625221910.613:3235): pid=1365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7389/memory.events" dev="sda1" ino=14386 res=1 errno=0 [ 2896.935857][ T1365] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2896.947498][ T37] audit: type=1800 audit(1625221910.613:3236): pid=1365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14386 res=0 errno=0 [ 2896.974788][ T37] audit: type=1804 audit(1625221910.613:3237): pid=1365 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7389/memory.events" dev="sda1" ino=14386 res=1 errno=0 [ 2897.006837][ T37] audit: type=1804 audit(1625221910.653:3238): pid=1361 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5858/cgroup.controllers" dev="sda1" ino=14322 res=1 errno=0 [ 2897.048996][ T1367] bond508: (slave bridge2929): Enslaving as a backup interface with an up link [ 2897.056696][ T37] audit: type=1804 audit(1625221910.743:3239): pid=1404 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7389/memory.events" dev="sda1" ino=14386 res=1 errno=0 [ 2897.095344][ T1367] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:50 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) [ 2897.132661][ T1365] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2897.158468][ T3261] ieee802154 phy0 wpan0: encryption failed: -22 [ 2897.255212][ T37] audit: type=1804 audit(1625221910.983:3240): pid=1345 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9228/memory.events" dev="sda1" ino=13986 res=1 errno=0 [ 2897.263847][ T1399] bond508: (slave bridge2930): Enslaving as a backup interface with a down link [ 2897.330666][ T37] audit: type=1804 audit(1625221910.983:3241): pid=1356 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9228/memory.events" dev="sda1" ino=13986 res=1 errno=0 10:31:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) [ 2897.392795][ T1367] bond508: (slave bridge2931): Enslaving as a backup interface with a down link 10:31:51 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="5d3137ab67535b6025382ea09bb5398c6f63fb3a5d16cfcbab0fca61d682d56daf38afd17c36ac709bca706f0ac5c36cc664369d4927dcf6ae311cf3ff14e50d2e40d0df2fbca971d4e561ce0796da8945528d0befe1bc1f528f9e89652df2305446c153a872268b45a6bb69fd20cd3581dc4e27ff455bdeb41a059924017498b00ae43649d1d15472fc84bcdc6dbc7967e73d1d966571c29d52af8f99", 0x9d) 10:31:51 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.stat\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:51 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057d) 10:31:51 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x8}, 0x0) [ 2897.577647][ T1432] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:51 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057e) 10:31:51 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, 0xffffffffffffffff, 0x0, 0x100000001) [ 2897.825500][ T1458] bond509: (slave bridge2932): Enslaving as a backup interface with an up link [ 2897.943741][ T1474] bond509: (slave bridge2933): Enslaving as a backup interface with a down link [ 2898.020468][ T1432] bond509 (unregistering): (slave bridge2932): Releasing backup interface [ 2898.190787][ T1432] bond509 (unregistering): (slave bridge2933): Releasing backup interface [ 2898.358861][ T1432] bond509 (unregistering): Released all slaves 10:31:52 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "edb5b1034fb545a8", "977f6c9c7a74772d0e96a45f7679ab10df6bc946d98440a0579cf5d4bf77ca7a", "fbbc96f8", "681cdd91273538e5"}, 0x38) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2898.457271][ T1458] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:52 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29057f) 10:31:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x0) [ 2898.736516][ T1527] bond509: (slave bridge2934): Enslaving as a backup interface with an up link [ 2898.783190][ T1534] bond509: (slave bridge2935): Enslaving as a backup interface with a down link [ 2898.808853][ T1474] bond509 (unregistering): (slave bridge2934): Releasing backup interface [ 2898.902284][ T1474] bond509 (unregistering): (slave bridge2935): Releasing backup interface [ 2899.004316][ T1474] bond509 (unregistering): Released all slaves 10:31:52 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290580) 10:31:52 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x0) 10:31:52 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x9}, 0x0) 10:31:53 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000cfefee)="120000001200e7ef007b00000000000400a1", 0x12, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f00000005c0)=0x0) sendmsg$nl_netfilter(r4, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000bc0)={0x370, 0x7, 0x5, 0x101, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0xa}, [@nested={0x86, 0x7a, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a346ffa9487c55cd12ee1bda4ec2ac070b71003eb91779a11925ff4d7b0eae647f70860761563a978f4c9c1567790da0e211fe2e3b9d4444afcc5de9d302582160ffdcfddaed0e75f9e93ffbe51885efa9e0e440c03f3705be45baea970ad9b2d3a6", @typed={0x8, 0x4a, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0xdc, 0x1e, 0x0, 0x1, [@generic="3e5f91579a6b0f2f297e3a4055c8927dcc72d3e2c898ad85b7b53059ce4a71fb8a44a9b683478670f81ed4e5c0f9cc2ef52f27cddcc297073b03735258203fa6d8e2a72fbd91ee042b1ccd3b47ee38697c8b68700d9a081e6a023fd2725433dadf01bde334fff79f7fde3b6badc1b32aece9a9d515ddfdf200c15e75ac4dd5703b7534f586fe8583bc6c83ab9622504e75a316d3447ba27414ea178d1de18a559350efab0acdca5151acb19a8ac7bde97e5d9af9f8ac936160783502af6a63d7849b05c265e9a6ad40f8509d4120f9bac3738322a576dc", @generic, @generic='^']}, @nested={0x1f8, 0x7d, 0x0, 0x1, [@typed={0xc, 0x4c, 0x0, 0x0, @u64=0x8}, @generic="5514bb006ca7d4d16a0172ba62dd8e50a319edd47d86f141085e00324231f0131da1331ee78a0a976e78c1bdd080f60f01f8836110b1810ccf97cfc35b720f2023f58d6fa2f10e7bc641f0e904596eb6b832148dc366baf4d923541d19b0995b29731d5d86f028e8f29a4b0825bc96d82ac63ac4", @typed={0x4, 0x3f}, @generic="950662da2143b534625e45ae94fcf72477d9f801d672f535c98633e14f05d0567bb206c73b846a53bad11b0eafff8242f995fe5e9b4ae86e2f99b5e3e027ccf891f40715aae93fe999ef97ec423f851ff025a0ee1a498c3f1317839d00c21dcc9efb44efc660d291b0ad6628921da7101bba52253de6da3c9da622d0f7fb2a9bf94695de4165f9f33f0bcd576612e93b0aec1980375f5c8d6435afb0a3f6ebae6a94673af29dfc185ab6e0bcfe8673de27c20f56b333ab54", @generic="e2a7259b2142c3de8428018ac7e250115bb5ee23b0dd09c4e472eb0a808aef46f518c36c272f76ea1e585d9473e24216289c46ff261e9dae9fa8caa5d6702d91636e70f14850202fa1fbbcd329f0b424bfd0ff48ad7a2d0d9ede94950d55a1051e913b2cb4b566dd231ea3ae3c2401efb06cb876def184d170ca7b56dca7eeacfa0f6de2b741f0357d3cd7b69630e2c4a1cc89fce2d58fe607d7085eec376e60d36277350b1d76a9", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x85, 0x0, 0x0, @pid=r5}]}]}, 0x370}, 0x1, 0x0, 0x0, 0xc0}, 0x0) getuid() sendmmsg$unix(0xffffffffffffffff, &(0x7f0000006c00)=[{&(0x7f0000000180)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000380)=[{&(0x7f0000000200)="d73e64995275082f093d5d8a9f5ab8f9b0a9398452a2866a42c0fd859a25d069aa383df7dc104a7e901cf13d1a8fda1459284ee784385b6562977a51e40c377276d62b30c58bc0b00e8f8becc5a3211feb6747415a6becc72cba2641a10266c6fbe406650b50e08b298db7e44eeedd", 0x6f}, {&(0x7f0000000280)="96a18e975975b4b4c8d8474e181d01048bf1fafb6b1bcfc85d95583629ec95f6126bd751e0b312a511e6ca0a1666fb2ded00426cd10d2f94dddd92c85988cdfda0bf9554e2d9a6ca36eb6b8b8b2f0c69a7067618894c6f5aa601cefac89f13c0b93e86e7f76c10212f7dfe624537e1fa0a8a2c9d181cf8059ce1ca255d0bf0e9070ce627a1fdf0b2790c571ac9f13e3e3d0c374cd22775f3bd15f5fc2a807517dbaa9158e7377a93340ccc89c5910cd87ac39271852481788c8bb9991fcdbb68d72851cd875300fb3d0260414b2105a94b35e96c674cde73a06b546eaa2318781d8199b5ce5b5f4b4d10e8afc091ef", 0xef}, {&(0x7f0000000100)="da00c99787a5acaa700585677dfee6cea0", 0x11}], 0x3, 0x0, 0x0, 0x24000080}, {&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000440)="caf31f1ed29f5ac4b1097912071a5f4311629a3449d39bebdd57c553ef6f1334523c277a974a8daf0d013812c57791269d0bf2af4e64cf1dc7eefbf61c1c9addbf196e9ea2b1d49cf5071ce2cf608b9ae7f1982e299250e1db6ea76ac500bfc43ce501bfd40ac1a334adbb", 0x6b}, {&(0x7f0000000580)="211c91560ffcbb2a1cedc5138b8b60c06f8267ac652b30efd9d4dc2644dc9eaae1a124800476156de02e4fd7bd1e5fe746ff039c3706ff1ac0927fe29d88b17603eca03358cd81c6239772aeac7c05d9a0a55dd2d9c876c0f5e65949e8dd81617c1270f6a2e5d898bdd5ec6ba0a9713b29db28b4616a0b58852b47cf406f2fa0bbf5c3deea155a8ccf21852b55bf3c8f304cceb42d86b1d977e4510e199112ec54333156b3cf2d622b4689552a98fe6f61a19d7c4f626003fadd8ce0bd8b4ed3757840a21cb2a4240272fefcdea3", 0xce}], 0x2, &(0x7f0000004340), 0x0, 0x1}, {&(0x7f0000004440)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000880)=[{&(0x7f00000044c0)="410051cfa2b94e45fbfecd716f9af1aecd81875fa4b44c802d00f017144765c09500782752d0788149262afe4bc62a99241dabbf828ea64cb2d2aa7960", 0x3d}, {&(0x7f0000000940)="795e6ea5724b4b0ac2c2f96619b09e9068129cbacfefad87396fad8d6c460ed122790a5f3fc2308cef96dac3db93b6edf0d9d908059a7a6120a950b68eaab4fcc6cb", 0x42}, {&(0x7f0000004580)="ef42f8416e1f400e52431aeaa41787f3133d47537b2c51d64290a0d00b540a076ecc9ff597fe7ecf83a4346374602f416a64615bdfc8e114cd2bf88ffa3236e3d10df4bcd1a93213737561837496d9aec189add44aed143279cbd1122bb8d6125ff803d3d9fb3dcf7509555dfae6c268fa5cc949e2e4e0162cfebf9fd63b7bdb556d623962768b0f62e0c3b65efd1fabedf1e55aca75a3b5d9830ae004acd6a7503a194c3f35015cbebc33a4f2a6f825b95c8bdd9a4566a9feb7cea7543d", 0xbe}, {&(0x7f0000004640)="5b6199bd1e2f68cec40fa99f1309f4b33b9236c312a35b2f60ec31edf0870d682f59c866e9b975e2d2c6d11aae02cc9e4cbdda0e5bb6185b5f0e761d8d4bddd58c86b337d2423548f710f458b39cc475454faa5c1a3491b4ec295ca52567e6ae660e3c24c51e541587587933b9", 0x6d}, {&(0x7f00000046c0)="367627de3317eefc79304b38475cf39711655954fe9fd34766e59c14027e0a9a4762f7c1c40202a4d3358cec07aab3ea13d9ef0ee0eb04bff1e58df742b8e7740b3d5d64ad9a25d8c5b9cd54eb1d", 0x4e}, {&(0x7f0000004740)="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", 0x1000}, {&(0x7f0000005740)="27b703efc11d58cb369612a2c025dacc6327dc84dfaccdb1331ce9fbffb85ef473c2ee778fd432132e00075ced784506fd73dcd6e8ad9398de73892206326d36f3261103817d42d8f6fab9ae4581a33ba4e2806593431265527940d731bb3905a578cac32b049fd4ba0b4e0c2920dae451958adfc1e42bb13291422a", 0x7c}, {&(0x7f0000000740)="97c466f7709743ee6939a2fa79b896dade796990546c9c39cd2ea412f9be867c22467b4c583084444fac75c852a1ad95cead46c09442d443c84ed888e7427aeaf5cbfc5f07c9b6b24c89586ca60e828b3f549d92af30a96ac435a1d150b40d52e6b7c49d8d2d36222a9b574d51c4061d709283f1709ab200e6c819c5dff483eb6f24dd1fbf536aba491c5f0af27c2dbcecab0261836c5003bf4b75083bdaade9ba6fb7a47d7f41139ded13541f2280ec4dd3268dd91fc8", 0xb7}, {&(0x7f0000000800)="45ff7281977bb1517f396693f74136980db58f931bfe0c30a1aaec23fcaa0b7d5840ed4583c90b5144dab349462e158da99cc2d6b4895ae18e9d4302de5223e58f93c5452e7bfb240c4e58fa53df9a95b29d1945e199", 0x56}], 0x9, &(0x7f0000006b40), 0x0, 0x20000000}], 0x3, 0xc081) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r6, &(0x7f00000002c0)=ANY=[], 0x15) sendto$rose(r6, &(0x7f0000000000)="fba8fe8c1c08d9efe07a9e44fdc55b50c3edaa126f76e1bd1b9577fb677be74b761d435a635128a4a981adacdd30", 0x2e, 0x4, 0x0, 0x0) [ 2899.253513][ T1616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:53 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290581) [ 2899.544775][ T1619] bond509: (slave bridge2936): Enslaving as a backup interface with an up link 10:31:53 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_STATION(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3ce683f802c66055be52afb9be4201d242049875fa8437de03a00df7a0d970ef1ab53b23613a6030870428d9041a4a234c09d91cd3277750722d", @ANYRES16=r0, @ANYBLOB="000128bd7800fbdbdf252b2ff8ffa52bcf34765b000300", @ANYRES32=r1, @ANYBLOB="0c009900070000004f0000000600ab00fdff00000c0043002000000004000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4c010}, 0x20000000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cgroup.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000000)={0x0, r3}, 0x10) sendfile(r5, r7, &(0x7f0000000100), 0x81) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) write$binfmt_script(r3, &(0x7f0000000580)=ANY=[@ANYBLOB="2321202e2f66696c6530207b2125255b2c5e5c5e205e7d2e20ef5e2d202321232d206d656d6f72792e6576256e74730020275e5ded2d202d5c205b275c40232c2d2c272d212721230a497de6a9634b8d8bf358fafaf3f094308234fc6537d841c71348fe731071c47e7e617dd67d1dd07064fa089bf55cddb6e45813de67e8aa71"], 0x71) [ 2899.623271][ T1622] bond509: (slave bridge2937): Enslaving as a backup interface with a down link [ 2899.658343][ T1637] bond509 (unregistering): (slave bridge2936): Releasing backup interface [ 2899.770769][ T1637] bond509 (unregistering): (slave bridge2937): Releasing backup interface [ 2899.841901][ T1637] bond509 (unregistering): Released all slaves 10:31:53 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290582) 10:31:53 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x0) [ 2899.911648][ T1616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:53 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.swap.current\x00', 0xb00000000065808, 0x0) r2 = socket$inet6(0xa, 0x3, 0x3) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) ppoll(&(0x7f0000000100)=[{r2, 0xc000}, {r3, 0x2540}, {r0, 0x2}], 0x3, &(0x7f0000000180), &(0x7f00000001c0)={[0xffffffffffffff81]}, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r3, 0x50009418, &(0x7f0000000280)={{r5}, 0x0, 0x2, @inherit={0x78, &(0x7f0000000200)={0x1, 0x6, 0x80000000, 0x3f, {0x21, 0x51a, 0x2, 0x7ff, 0xfff}, [0xc6, 0x6, 0x5, 0xaa9b, 0x7fff, 0x8]}}, @subvolid=0x5}) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2900.138874][ T1622] bond509: (slave bridge2938): Enslaving as a backup interface with an up link 10:31:53 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, 0x0, 0x8, 0x70bd2d, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_SPORT={0x6, 0x1a, 0x4e22}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @multicast2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) setsockopt$packet_rx_ring(r3, 0x107, 0x5, &(0x7f0000000200)=@req={0x80000000, 0x7, 0x2, 0xfffffff9}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2900.197565][ T1619] bond509 (unregistering): (slave bridge2938): Releasing backup interface [ 2900.393841][ T1619] bond509 (unregistering): Released all slaves 10:31:54 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290583) 10:31:54 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x0, 0x0) openat$cgroup_ro(r3, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:54 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xa}, 0x0) 10:31:54 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290584) [ 2900.690246][ T1814] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2900.979998][ T1818] bond509: (slave bridge2939): Enslaving as a backup interface with an up link [ 2901.247069][ T1814] bond509: (slave bridge2940): Enslaving as a backup interface with a down link 10:31:55 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f00000000c0)='cpu.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r4, r4, 0x0, 0xffffffff800) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:55 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r7, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r8, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_SHOW_LINK_STATS(r5, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0800ef2bf339a7d68b5ed00000000b000000000000000000"], 0x28}}, 0x4000) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$INCFS_IOC_FILL_BLOCKS(r3, 0x80106720, &(0x7f0000000400)={0x5, &(0x7f0000000340)=[{0x1ff, 0xf4, &(0x7f0000000180)="290ec47ed654e97d49b0dc56bf0ee902ac33ab603ff2586cb8514bd776bd3ee0062acdb9aa7e30ff698cd1fcedb82b342ab7a942a5d95d9ce572ad4ac3467c46a7ca29dd4c3f0b1c8059093405cf0028ff3e409ada472783271e346f43acbd9fe54dd28b1d838edce6f79550d2471e7e9f11b462d5fb08ba11162526a99b2967c92ef1b109aba71358ce001b482abc20fd406a5641c702e644cf1c3653f62e53feabd98fd6c3c75fffff0aa2eeee0eff49c2a17c53d86611913889bc0e06cbfee5057911ffcdd8b2e2c74c481ab5d9a4f5a9fe4657fd5e72927e531b2860c96c0ecf410e248c42de940fd1aab03b417bcfbe6399"}, {0x1f, 0x3c, &(0x7f0000000000)="95c8ac29dd581af9d295029e3441c4d80b1a3c2eb7b6352c87f6718b7cca05c3fb9866d388e3b108cd888324f3ca7b558647f5b835a94df8ebeafd68", 0x1, 0x1}, {0x7, 0x2b, &(0x7f0000000100)="c0a6c18379a42e9a3e9d9c0b91b681dcdc8632d6ca1a7ce9d6f30491dc7edcb5c0403cfbd3b170d9831be8", 0x1, 0x1}, {0xd2, 0x1000, &(0x7f0000000580)="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"}, {0x8, 0x89, &(0x7f0000000280)="a24c2883657a6972e8ace9dc5f8661d7b5a5d0163860f9667af0c8796c2b02598706b7c9de231257792a916e1e030ed78545d80a845e0bff359dc7507908fe30ddef065cd9a6cc3ec40b17465c7b4d034f9055330393d6514ec35f926c1f8ed6514a470af3a74d6ef6f285af17e9942f29c68e1c377089660964caa5530e2e348e72513c2331b5c5b1", 0x0, 0x1}]}) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2901.306613][ T1854] bond509 (unregistering): (slave bridge2939): Releasing backup interface [ 2901.498040][ T1854] bond509 (unregistering): (slave bridge2940): Releasing backup interface 10:31:55 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f000024f000/0x1000)=nil, 0x1000, 0x3000002, 0x110, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_emit_ethernet(0x6e, &(0x7f0000000140)={@broadcast, @random="909c7a6be674", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d64d4d", 0x3, 0x3a, 0x0, @remote, @mcast2, {[], @dest_unreach={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, '$\x00@', 0x0, 0x0, 0x0, @loopback, @private1, [], "1804000000740000"}}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2901.666616][ T1854] bond509 (unregistering): Released all slaves [ 2901.687017][ T37] kauditd_printk_skb: 45 callbacks suppressed [ 2901.687034][ T37] audit: type=1804 audit(1625221915.423:3287): pid=1886 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9232/memory.events" dev="sda1" ino=14674 res=1 errno=0 10:31:55 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290585) [ 2901.794953][ T1814] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:55 executing program 0: r0 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000100)={&(0x7f0000000000)='./file0\x00', 0x0, 0x8}, 0x10) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000180)={@cgroup, r0, 0x6}, 0x10) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2901.985810][ T37] audit: type=1804 audit(1625221915.713:3288): pid=1929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5866/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2902.117204][ T37] audit: type=1800 audit(1625221915.713:3289): pid=1929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14529 res=0 errno=0 [ 2902.142233][ T37] audit: type=1804 audit(1625221915.723:3290): pid=1929 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5866/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2902.169924][ T37] audit: type=1804 audit(1625221915.833:3291): pid=1937 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5866/memory.events" dev="sda1" ino=14529 res=1 errno=0 10:31:56 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290586) 10:31:56 executing program 3: socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40010, r0, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000000)='memory.swap.current\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) write$cgroup_int(r2, &(0x7f0000000080)=0x100000000, 0x12) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2902.236375][ T37] audit: type=1804 audit(1625221915.973:3292): pid=1871 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9232/memory.events" dev="sda1" ino=14674 res=1 errno=0 10:31:56 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xc}, 0x0) 10:31:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.stat\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) socketpair(0xa, 0x3, 0xaf7, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCPNDELRESOURCE(r3, 0x89ef, &(0x7f0000000100)=0x7) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2902.390387][ T37] audit: type=1804 audit(1625221915.993:3293): pid=1876 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9232/memory.events" dev="sda1" ino=14674 res=1 errno=0 10:31:56 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290587) [ 2902.460920][ T1952] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2902.475554][ T37] audit: type=1804 audit(1625221916.123:3294): pid=1945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7396/memory.events" dev="sda1" ino=14306 res=1 errno=0 10:31:56 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000180)=0x3, 0x4) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[], 0x15) openat$cgroup_ro(r5, &(0x7f0000000100)='cpuset.effective_mems\x00', 0x275a, 0x1000000) [ 2902.727783][ T37] audit: type=1800 audit(1625221916.123:3295): pid=1945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14306 res=0 errno=0 [ 2902.728342][ T1974] bond509: (slave bridge2941): Enslaving as a backup interface with an up link 10:31:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000000180)={{{@in=@multicast1, @in6=@local}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000000000)=0xf2) sendfile(r2, r1, &(0x7f0000000040)=0xa01, 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r4, 0x80489439, &(0x7f0000000280)) [ 2902.755363][ T37] audit: type=1804 audit(1625221916.133:3296): pid=1945 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7396/memory.events" dev="sda1" ino=14306 res=1 errno=0 10:31:56 executing program 3: mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x6, 0x1010, 0xffffffffffffffff, 0xc3930000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000180)=0x100, 0xc2a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) pipe(&(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='hugetlb.2MB.limit_in_bytes\x00', 0x7a05, 0x1700) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000000), &(0x7f0000000100)=0x4) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000440)={&(0x7f0000000400)='./file0\x00'}, 0x10) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000480)={&(0x7f00000001c0)="52cfec2ef2c1e373e40f03e4f200fcad95b7974957bf056b0ad5f7048cff6516ba049b701acf0f92f1eb6688c0d2824486ea8556d619f7a248047f8f3ac489b5a19f884cf159782597f031562fc2ed7ae9c802b0a3edb5a465bde7725457bf04aac73df9a5256c5a4f15868fa9807c0b20424718d354a53e9f8432be428799f7ae45a3d9f5ee0555b4b7d9997a7848382c83cf2d243dd599ed5fbff9d2789c04ecd9200b38b7a76813fbcaef01b7ab1afc578fe23bbba16d867a29ee5398b6e1281fce13daed8a20", &(0x7f00000002c0)=""/2, &(0x7f0000000300)="f48609c4f3e7c5fcabf23f9273941361609ef24fcb572be3b39032683d758ea8c167e9d99d747f55489993f9419943538734bc0baa6ef18ec65eabb9667e90c6", &(0x7f0000000340)="68406a068967def30f7f8a8dd117940ef2d3c874bcf467dc33dd07072c4f5053c47f4e87e29d109ce6f010e95bae12d33da7c4ac2bcf28e55ea06544820c0e5fed769e508c1754bd04e1b00c1afb8f67cf372c6b340bea0f9fb3cf6f31ef9e5b1fe1ad98638391c8234392bcf4ac0e2dcbfddde33ce5d58e4cbecd0b25ee7e94fc1b89ce43e4c2d7d10eb5846867d79a5338c603c3f947fdea8bfeda0b990564b5a16c3647c9c6a614", 0x7, r3}, 0x38) unshare(0x800) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = epoll_create(0x19) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000004c0)=0xffffffffffffffff, 0x4) sendfile(r4, r4, &(0x7f0000000500)=0x10000, 0xa) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000580)='veth0_to_bridge\x00') 10:31:56 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$binfmt_misc(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x23) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x1f, 0x30, 0x7fffffff, 0x4, 0xc68, r0, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1}, 0x40) ioctl$F2FS_IOC_FLUSH_DEVICE(r2, 0x4008f50a, &(0x7f0000000100)={0x5, 0x4}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@initdev, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_route(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000340)=@ipv4_getnexthop={0x38, 0x6a, 0x300, 0x70bd2d, 0x25dfdbfd, {}, [@NHA_GROUPS={0x4}, @NHA_ID={0x8, 0x1, 0x8}, @NHA_OIF={0x8}, @NHA_OIF={0x8, 0x5, r3}, @NHA_FDB={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000080}, 0x48004) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r4, r1, 0x0, 0xffffffff800) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001640)={0x18, 0x8, &(0x7f0000000500)=@raw=[@jmp={0x5, 0x1, 0xb, 0x2, 0x5, 0xfffffffffffffff4, 0x1}, @ldst={0x0, 0x0, 0x3, 0xb, 0x2, 0x10, 0xfffffffffffffff0}, @map={0x18, 0x7, 0x1, 0x0, r4}, @map_val={0x18, 0x9, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x3}], &(0x7f0000000580)='syzkaller\x00', 0x3ff, 0x1000, &(0x7f00000005c0)=""/4096, 0x41100, 0xa, '\x00', r3, 0x0, r0, 0x8, &(0x7f00000015c0)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000001600)={0x1, 0x8, 0x2, 0xffffffff}, 0x10}, 0x78) sendfile(0xffffffffffffffff, r5, &(0x7f00000016c0)=0x5, 0x8) sendfile(r4, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r6 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_START_SYNC(r6, 0x80089418, &(0x7f0000000180)) [ 2902.900285][ T1990] bond509: (slave bridge2942): Enslaving as a backup interface with a down link [ 2902.920847][ T1952] bond509 (unregistering): (slave bridge2941): Releasing backup interface 10:31:56 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f0000000100)=0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r3, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x98, 0x0, 0x2, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xffff8001, 0x67}}}}, [@NL80211_ATTR_BSSID={0xa}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x1f}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x3a}, @NL80211_ATTR_SSID={0x23, 0x34, @random="a9b674f5f74af9397791620f4ffffd0053bc6e0ee02517d467583a91e7a81d"}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_SSID={0x22, 0x34, @random="ffb0885afaf9b5f6f99aaf8eef43e45a30e2c0192655fe7db4b2e653ef27"}]}, 0x98}, 0x1, 0x0, 0x0, 0x4800}, 0x4000000) write$cgroup_int(r0, &(0x7f0000000000)=0x3, 0x12) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) write$binfmt_script(r5, &(0x7f00000003c0)={'#! ', './file0', [{}, {}, {0x20, 'PPPPPP'}, {0x20, '!'}], 0xa, "daa1202784e025e1089336f68fe3eac5b73e5feffbb814020cbea5d5a4399e296ae6c4c935386a2ac3137b02cd77db6473fbf7f7a7052116688b3c779fe973fe829b7c0780e029571830052bd2ff8f4f5ac074cdc41dd92ae4e033c3fda7c884c4a45649d48b62e45f49c84d84ce20c43e84"}, 0x88) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2903.129821][ T1952] bond509 (unregistering): (slave bridge2942): Releasing backup interface [ 2903.199889][ T1952] bond509 (unregistering): Released all slaves 10:31:57 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290588) 10:31:57 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xc, 0x810, r0, 0xffffc000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000140), 0xff4d) sendfile(r4, r3, 0x0, 0xffffffff800) sendfile(r4, r3, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2903.297816][ T1974] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2903.457477][ T1990] bond509: (slave bridge2943): Enslaving as a backup interface with an up link [ 2903.614627][ T1974] bond509: (slave bridge2944): Enslaving as a backup interface with a down link 10:31:57 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000008c0)={'ip6gretap0\x00', 0x0}) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x1c, r4, 0x1, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r7}]}, 0x1c}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40020000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=@ipv4_deladdr={0xa4, 0x15, 0x2, 0x70bd28, 0x25dfdbfe, {0x2, 0x0, 0x8, 0xfd, r7}, [@IFA_LOCAL={0x8, 0x2, @broadcast}, @IFA_CACHEINFO={0x14, 0x6, {0x8, 0x4, 0x0, 0x7}}, @IFA_FLAGS={0x8}, @IFA_LOCAL={0x8, 0x2, @rand_addr=0x64010101}, @IFA_BROADCAST={0x8, 0x4, @multicast2}, @IFA_CACHEINFO={0x14, 0x6, {0x1, 0xfff, 0x20, 0x100}}, @IFA_LABEL={0x14, 0x3, 'bond_slave_0\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}, @IFA_CACHEINFO={0x14, 0x6, {0x800, 0x800, 0x8, 0x2}}, @IFA_LABEL={0x14, 0x3, 'netdevsim0\x00'}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000080}, 0x4000) [ 2903.670033][ T1952] bond509 (unregistering): (slave bridge2943): Releasing backup interface [ 2903.764123][ T1952] bond509 (unregistering): (slave bridge2944): Releasing backup interface [ 2903.867652][ T1952] bond509 (unregistering): Released all slaves 10:31:57 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xe}, 0x0) 10:31:57 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(0xffffffffffffffff, r1, 0x0, 0xffffffff800) sendfile(0xffffffffffffffff, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:57 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290589) 10:31:57 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10a000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@delchain={0x2c, 0x65, 0x800, 0x70bd25, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0xa}, {0xf, 0xffff}, {0xc, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x40, 0x3}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000040) close(r4) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f00000003c0), 0x8) write$binfmt_misc(r5, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$nl_route(r5, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)=@ipv6_newrule={0xa8, 0x20, 0x1, 0x70bd2c, 0x25dfdbfe, {0xa, 0x94, 0x10, 0x1, 0x1, 0x0, 0x0, 0x6}, [@FRA_DST={0x14, 0x1, @mcast1}, @FRA_DST={0x14, 0x1, @remote}, @FRA_DST={0x14, 0x1, @mcast1}, @FRA_SRC={0x14, 0x2, @local}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @FRA_SRC={0x14, 0x2, @empty}, @FRA_DST={0x14, 0x1, @mcast1}]}, 0xa8}, 0x1, 0x0, 0x0, 0x20040000}, 0x884) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) openat$cgroup_ro(r3, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2904.095060][ T2163] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2904.248075][ T2163] bond509: (slave bridge2945): Enslaving as a backup interface with an up link 10:31:58 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000000), 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000000, 0x10, r3, 0xc5e64000) r4 = accept4(r1, &(0x7f0000000180)=@ax25={{0x3, @default}, [@netrom, @default, @bcast, @remote, @remote, @default, @remote, @rose]}, &(0x7f0000000100)=0x80, 0x800) setsockopt$netlink_NETLINK_NO_ENOBUFS(r4, 0x10e, 0x5, &(0x7f0000000140)=0x71d5, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:58 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058a) 10:31:58 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = socket$caif_seqpacket(0x25, 0x5, 0x1) sendfile(r3, r1, 0x0, 0x7fff) sendfile(r2, r1, 0x0, 0xffffffff800) r4 = openat$cgroup_freezer_state(r0, &(0x7f0000000000), 0x2, 0x0) ioctl$BTRFS_IOC_SUBVOL_CREATE(r4, 0x5000940e, &(0x7f0000000580)={{}, "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"}) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2904.411471][ T2213] bond509: (slave bridge2946): Enslaving as a backup interface with a down link [ 2904.502934][ T2163] bond509 (unregistering): (slave bridge2945): Releasing backup interface 10:31:58 executing program 3: mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x200000b, 0x110, 0xffffffffffffffff, 0xe5660000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:58 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2904.696550][ T2163] bond509 (unregistering): (slave bridge2946): Releasing backup interface 10:31:58 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) r3 = accept$inet(r0, 0x0, &(0x7f0000000100)) splice(r0, &(0x7f0000000000)=0x8, r3, &(0x7f0000000180)=0x401, 0x0, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r4, r1, &(0x7f00000001c0)=0x10000000000, 0x3ff) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:58 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2904.897881][ T2163] bond509 (unregistering): Released all slaves [ 2905.021980][ T2213] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:58 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r0, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r6 = accept$netrom(r3, 0x0, &(0x7f0000000000)) tee(r4, r6, 0x8, 0x4) [ 2905.260131][ T2271] bond509: (slave bridge2947): Enslaving as a backup interface with an up link [ 2905.329547][ T2286] bond509: (slave bridge2948): Enslaving as a backup interface with a down link [ 2905.365799][ T2270] bond509 (unregistering): (slave bridge2947): Releasing backup interface [ 2905.541316][ T2270] bond509 (unregistering): (slave bridge2948): Releasing backup interface [ 2905.649242][ T2270] bond509 (unregistering): Released all slaves 10:31:59 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x0) 10:31:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="17090000000000000000010000000500070000000000080009000000000008000a0000000000060002000000000006001a0000000000cd05fb25a747f779a2dcac37234ff9d54e6eb56834b912cc6c653b4a4cd3"], 0x3c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x34, r1, 0x10, 0x70bd26, 0x25dfdbfc, {}, [@L2TP_ATTR_IP_SADDR={0x8, 0x18, @loopback}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0xb}, @L2TP_ATTR_DEBUG={0x8, 0x11, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x8080}, 0x4000000) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(r2, r0, &(0x7f00000003c0)=0x200, 0x6) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000380)={'sit0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xed, 0x101, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @loopback, 0x80, 0x20, 0xfe, 0x1}}) write$cgroup_int(r4, &(0x7f0000000140), 0xff4d) sendfile(r6, r5, 0x0, 0xffffffff800) sendfile(r6, r5, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058b) 10:31:59 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x15) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000440)={0x3, &(0x7f0000000400)=[{0x0, 0x14, 0x1, 0x5}, {0x5, 0x1f, 0x0, 0x7}, {0x3, 0x1f, 0x9, 0x10000}]}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080), r2) sendmsg$NBD_CMD_STATUS(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x5c, r3, 0x4, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0xcd8b}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xc18}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x454}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x9}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4040040) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r5, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(r4, 0xc4009420, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(0xffffffffffffffff, r6, 0x0, 0xffffffff800) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="20002abd7000fedbdf2504000000080019000000000005002100e1ffffff05001d000900000008001800ac1414aa0c0010000800000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x58}, 0x41) sendfile(0xffffffffffffffff, r6, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:59 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:31:59 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058c) [ 2905.850479][ T2372] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:31:59 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000008, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={0xffffffffffffffff, 0x9c4, 0x20200000, 0x10001}) socket$can_raw(0x1d, 0x3, 0x1) openat$cgroup_subtree(r3, &(0x7f00000001c0), 0x2, 0x0) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f0000000100)='cpuset.memory_pressure\x00', 0x275a, 0x1000000) [ 2906.142217][ T2378] bond509: (slave bridge2949): Enslaving as a backup interface with an up link [ 2906.197408][ T2388] bond509 (unregistering): (slave bridge2949): Releasing backup interface 10:32:00 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r1, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x101) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r2}, 0x8) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_int(r5, &(0x7f00000001c0)=0x1, 0x12) sendfile(r4, r3, 0x0, 0xffffffff800) openat$cgroup_ro(r4, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r7, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r6, 0xc4089434, &(0x7f0000000580)={0x0, 0x7, 0x1, [0x10000, 0x2, 0x7, 0x7fff, 0x80], [0x2, 0x0, 0x5, 0x9, 0x8000, 0x98, 0x4, 0x32ed, 0xffffffff, 0x1, 0x4, 0x9, 0x6, 0x78f, 0x7b57, 0x0, 0x2, 0x9, 0x6, 0x0, 0x51, 0x6c72, 0x7, 0x3, 0x1, 0x9, 0xfffffffffffffff9, 0x1, 0x80, 0x3, 0x4, 0x1a12, 0x4, 0x6, 0x2, 0x10, 0x4, 0x4, 0x7238, 0x200, 0x9, 0x1, 0x1f, 0x63e, 0xad, 0x9, 0x1f, 0x3ff, 0x80, 0xa0, 0x6, 0x8, 0x2, 0x6, 0x7f, 0x4, 0x8000, 0xf1d, 0x40, 0x4, 0x5, 0x2, 0x0, 0x8, 0x20, 0x0, 0xffffffffffff8001, 0x100000000, 0x10001, 0x5, 0x10001, 0x200, 0x8d, 0x4, 0x3, 0xded, 0x3fb, 0xb0, 0x5, 0xff, 0x19, 0x80000001, 0xc6, 0x9, 0x5, 0xa00000000000000, 0x100000000, 0x8, 0x3, 0x5, 0x4, 0x1, 0x1000, 0x2, 0x8c, 0x6, 0x3f, 0x4243, 0xef, 0x101, 0x40, 0x0, 0x0, 0x6, 0x9, 0x742, 0x6, 0x101, 0xffffffffffff0000, 0x3ff, 0x100000000, 0x800, 0x8001, 0x74ee, 0x20, 0x2, 0x7fb, 0x6, 0x8, 0x800, 0x3]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2906.407211][ T2388] bond509 (unregistering): Released all slaves [ 2906.502188][ T2372] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:00 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058d) 10:32:00 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x15) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='rdma.current\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2906.741992][ T37] kauditd_printk_skb: 117 callbacks suppressed [ 2906.742011][ T37] audit: type=1804 audit(1625221920.473:3414): pid=2495 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7405/memory.events" dev="sda1" ino=14722 res=1 errno=0 10:32:00 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140)=0x400, 0x12) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x9ff, 0x100000003) setsockopt$IP_VS_SO_SET_ZERO(0xffffffffffffffff, 0x0, 0x48f, &(0x7f0000000000)={0x0, @broadcast, 0x4e24, 0x0, 'lblc\x00', 0x12, 0x9, 0x45}, 0x2c) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:00 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2906.829304][ T2388] bond509: (slave bridge2950): Enslaving as a backup interface with an up link [ 2906.892924][ T2412] bond509: (slave bridge2951): Enslaving as a backup interface with a down link [ 2906.928053][ T2378] bond509 (unregistering): (slave bridge2950): Releasing backup interface [ 2906.928683][ T37] audit: type=1804 audit(1625221920.663:3415): pid=2517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7406/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2907.027626][ T37] audit: type=1800 audit(1625221920.703:3416): pid=2517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14529 res=0 errno=0 [ 2907.119857][ T37] audit: type=1804 audit(1625221920.703:3417): pid=2517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7406/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2907.148309][ T2378] bond509 (unregistering): (slave bridge2951): Releasing backup interface [ 2907.183212][ T37] audit: type=1804 audit(1625221920.713:3419): pid=2517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7406/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2907.253594][ T37] audit: type=1804 audit(1625221920.703:3418): pid=2518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5871/memory.events" dev="sda1" ino=13989 res=1 errno=0 [ 2907.310314][ T2378] bond509 (unregistering): Released all slaves [ 2907.321045][ T37] audit: type=1800 audit(1625221920.713:3420): pid=2518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=13989 res=0 errno=0 10:32:01 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x48}, 0x0) 10:32:01 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:01 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000180)=""/140, 0x8c, 0x2, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x9, 0x8, 0x47, 0x1220, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x5}, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:01 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000d85fc555204a00000000280012000c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="d8"], 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/53, 0x35) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:01 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058e) [ 2907.409718][ T37] audit: type=1804 audit(1625221920.713:3421): pid=2518 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5871/memory.events" dev="sda1" ino=13989 res=1 errno=0 [ 2907.504240][ T37] audit: type=1800 audit(1625221920.713:3422): pid=2517 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14529 res=0 errno=0 [ 2907.596299][ T37] audit: type=1804 audit(1625221920.713:3423): pid=2519 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7406/memory.events" dev="sda1" ino=14529 res=1 errno=0 [ 2907.616358][ T2565] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2907.718964][ T2569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:01 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29058f) [ 2907.975182][ T2575] bond509: (slave bridge2952): Enslaving as a backup interface with an up link [ 2908.054610][ T2577] bond509: (slave bridge2953): Enslaving as a backup interface with a down link [ 2908.090564][ T2612] bond509 (unregistering): (slave bridge2952): Releasing backup interface [ 2908.233140][ T2612] bond509 (unregistering): (slave bridge2953): Releasing backup interface 10:32:02 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, 0x1, 0x1, 0x3}, 0x14}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) sendfile(r4, r5, &(0x7f0000000000), 0x7a3) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2908.421342][ T2612] bond509 (unregistering): Released all slaves 10:32:02 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000d85fc555204a00000000280012000c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="d8"], 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/53, 0x35) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2908.479276][ T2569] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:02 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(0xffffffffffffffff, 0x80286722, &(0x7f0000000100)={&(0x7f0000000180)=""/140, 0x8c, 0x2, 0x5}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x16, 0x9, 0x8, 0x47, 0x1220, r0, 0x7, '\x00', 0x0, r1, 0x0, 0x3, 0x5}, 0x40) ioctl$F2FS_IOC_COMMIT_ATOMIC_WRITE(r2, 0xf502, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r1, 0x0, 0xffffffff800) sendfile(r3, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2908.694474][ T2577] bond509: (slave bridge2954): Enslaving as a backup interface with an up link 10:32:02 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290590) 10:32:02 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r5}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x1f7, {0x0, 0x7fff, 0x8, 0x6, 0x6}, [0x7, 0xcff0, 0xffffffffffffff0d, 0x6, 0x400, 0xe9, 0x81, 0x0]}}, @name="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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2908.834738][ T2660] bond509: (slave bridge2955): Enslaving as a backup interface with a down link [ 2908.861378][ T2575] bond509 (unregistering): (slave bridge2954): Releasing backup interface 10:32:02 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2909.000865][ T2575] bond509 (unregistering): (slave bridge2955): Releasing backup interface [ 2909.180735][ T2575] bond509 (unregistering): Released all slaves [ 2909.225332][ T2697] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:03 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4c}, 0x0) 10:32:03 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290591) 10:32:03 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r5}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x1f7, {0x0, 0x7fff, 0x8, 0x6, 0x6}, [0x7, 0xcff0, 0xffffffffffffff0d, 0x6, 0x400, 0xe9, 0x81, 0x0]}}, @name="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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:03 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290592) [ 2909.546259][ T2764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:03 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r5, @ANYBLOB="00000000d85fc555204a00000000280012000c00"], 0x48}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=ANY=[@ANYBLOB='$\x00\x00\x00*\x00\'\r\x00'/20, @ANYRES32=r5, @ANYBLOB="d8"], 0x24}}, 0x0) recvmmsg(r1, &(0x7f0000004bc0)=[{{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) read(r1, &(0x7f0000000080)=""/53, 0x35) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r7, r6, 0x0, 0xffffffff800) sendfile(r7, r6, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xa) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r3, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x9}, 0x8) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000000)) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000cfefee)="120000001200e7ef007b00000000000400a1", 0x12, 0x0, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(r5, 0x8903, &(0x7f00000005c0)=0x0) sendmsg$nl_netfilter(r6, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000003d40)=ANY=[@ANYBLOB="70030000070501012bbd7000fddbdf250200000a86007a80080033000400000008006e00e000000108003b00", @ANYRES32, @ANYBLOB="a346ffa9487c55cd12ee1bda4ec2ac070b71003eb91779a11925ff4d7b0eae647f70860761563a978f4c9c1567790da0e211fe2e3b9d4444afcc5de9d302582160ffdcfddaed0e75f9e93ffbe51885efa9e0e440c03f3705be45baea970ad9b2d3a608004a00", @ANYRES32, @ANYBLOB="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", @ANYRES32=r7, @ANYBLOB], 0x370}, 0x1, 0x0, 0x0, 0xc0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000004180)={0x37c0, 0x37, 0x20, 0x70bd29, 0x25dfdbfb, {0x18}, [@nested={0x1283, 0x95, 0x0, 0x1, [@generic="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", @generic="f61615d8ba04ce", @generic="b5d41728350c619f243334d19cecc9fc193ae4e3645132f0194956e2b2eafe52a05bf3a815ef00490b1b2d932f1d7745fa1c87556752790f238d0152991abf9262e4dd5aa7a2a2323245f9341cc164a0c83cf475669381e386704310683d730d15f01d22fa42bf5f19e918b235f8c31a0685cc712c92ef9da45d2bf87f196889a17dc418b15cbc94a0128be81b327eb11afb16ab31fd4be549bb18085b40a306978f1991b858d6956ab9af173985a443c971162bc0ef8a3c8777f4446fc306ef539c92dcbdcff9ec800c3e9b8fcc55", @typed={0x8, 0x92, 0x0, 0x0, @fd=r4}, @generic="e514e5ef8272d12e2c5d231ed9611e5d86790428fdf06ee028a15105eb8614fe9f331684c06ce9684770eb15ecb782dd5dc6e30c339e48180aa8034d522b96729696f2f192f0d76569b54873cc4291038c56418ba4866d7bfab205349e53723a051a23b1c40946cd5ca2b32ba3ab3e1319495f82e47af5f375f4f040aca3020000004dd8adbaa5661782307e851c92c5ebe4347411c8ce1774c251977d1f16db13ee79b2d64d47dc9a447defe8842ee75a326ab1843051d5dc7d33caf38c2b1b32287028991ed17a7b20545412354a83c9cd69bd4f1a3262f17b923f91861f6d44f9a42c136e", @typed={0x8, 0xe60, 0x0, 0x0, @ipv4=@local}, @typed={0x5, 0x5e, 0x0, 0x0, @str='\x00'}, @generic="194b8cd9cbce081d3863989e8e95da96665407371dc0b2b311117a9c7c27707a4901329662f635c81cc87e1ef8f750a7833199345cf0b9b24083082e3e71ea257fe75cf2fc32efa272acfa18cfb99ac11d186b92c811e08972d9831a30526cf1074e18f14eef2aa8db1e1e886171f3f97260122a427e6be3849f28284691dc0aa8bc190b0f899f0a9dd4eebcfa351b7dd8bdeeb993fa24745bd4e94408f16e0fc31a33636956cc2be571d4"]}, @nested={0x125, 0x1e, 0x0, 0x1, [@typed={0x8, 0x3c, 0x0, 0x0, @pid=r7}, @generic="3a430f82ddc795deee0bd79ffca3ff6cf35ddc8c81b1cf91e940d0adf0ccf44b1b477c75a1e6660480933597caa05562bb955a633d7d36cfa507cf8af9cfcde75131a5b98b2dcfed715efcab894e8372b917922f235f06244cd0029ca34c2a2b", @typed={0x4, 0x79}, @generic="f6d4e2c5bd830f68ab788645309a7e8ef22ff8db959e0a17c19dc065c3924ac402a334cde90b2cbb630b0c5fdafb7e8a651b3d042dd1e1ee942783021c7a133d0425e5706698adb713a86e617ded760870e68f97cd1496089a95f96d9e61627dc926662400ce1ce4dd34411d1d1284bd7881c2fef688911b9bfeb61dd52c9958bdb4a4f9e87bc09819700525a17551151f1f0fef57bb11698dd90620804c22e5939913fe598bd0b669f77b433f", @typed={0x8, 0x14, 0x0, 0x0, @u32=0x80000001}]}, @generic="868bba5af051bb670332df94293f7340eab8cde38dd510609a12e568f8a843835c85612627efd511a287247e18777ecf53127cb9f7551948ef0fc73669418a9022fdbab1fe8a5c23164780b8cf2efd19bd7d8761722e6c43e19eb259c36840bdcb01c0a691589ff387635cf92a3aeae229f0cd7f77cc7f9aaf2f97660ac7314205866fe648aeb10a4cd3bd92d921e9ebdf523e923d32bcbe51773ac01c5d3b72c152639ade3ce04f8140d170a7039fc788f50da9defc2d321ee2e61a16d90629ffec8192b73a8c10d36ad6bd86a20ad01202", @nested={0x10e6, 0x19, 0x0, 0x1, [@typed={0x12, 0x35, 0x0, 0x0, @str='memory.events\x00'}, @generic="e4eede08966da8c97eaf0db9c56059ab3d40ee7a554e0602998e92201118e4692d0b8dacd1d66beea33db4d8084558d09961b21b60bb67a55296525a3e709bde216845bf3d2171675c0123caef42040064b1ffc9470fb893e329aac3496463368b3dd850a78f10b632527c9fe0bedeaba2e4f64d64cdbec54d125a42fc539512436ce5f0372d2e2afe6c2fe0db11ac9ff68c1c89400f2efaf36a23c3f7aa9cd49a2b59d7f744fbbffe27307a0ee9b743a79f5897a4f8548acbc4d86dcc3a4c44a6329bb2fc468982f02400a1cf2b", @generic="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"]}, @generic="243571beea6e9b7492b94ac800a937e9263848caa56ab17e4cb842b90351891db4549d0bd6ef1711084456e21d0636d7c3f58b4616640efbcfa07ca82e6a01a92e441580844815553a8d23131bd3eff2909a10efb07796bd72ec06f6f87b8e203e27a8b98d3f3470c02b4755a9fcc972e934a9dbe62b69b446d1930a8f1e5cc11f3258a0190cc6fcc86d942fe831b3172bbf2c2762d32ab613f21c27f62926e21620b24ce98e9db72f072062e95aab8ebda2bb1b9ecb6a563a941cb09bf0ced4b105c8106eacd0e372af56ce", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @typed={0x14, 0x4d, 0x0, 0x0, @ipv6=@empty}, @generic, @nested={0x1150, 0x81, 0x0, 0x1, [@typed={0x8, 0x6a, 0x0, 0x0, @uid}, @typed={0x8, 0x4b, 0x0, 0x0, @fd=r2}, @generic="7a60bed21eb2b6466426c69b9b2f2c7a236d51220c2223df", @generic="9898a81bd244a6dafce6768c8e38bb84791e257d455d1246fc11d3109de6a25e2277dc534388c72f40e3fa8249e6de849ba0dd7214352f34f51a0b45c0d4707bfd48debee85e6b6d82efd0df74269ea1cf0e85d8f89e57ce0f0c50e51d9d04d83e104ebf7b031e118ece0b6343838a35c17592e96555a9d2f9934bed540411aebd5640b3d94cb7521e0f7de14d2bd53009d7d9d0adc6e64f73", @generic="a45ff93d9c32e756b27f540992b5fba327c0db343f47fb6ffdac622d7dc967d3616f84b8f2a3476bc793c822b3c8952cbb7893cf6a19c44b66a33dce04805529daccebc7271c6e18785629d5ebb18d453822163e69b738d22d125bfbb8fcd1cd93aaef0e4f60b8eef412d03ebe2ad52f3cfe5b92e36a81d9e58069f438315a918167b68af97884ba306e4e6e66dfd0bec6256f09c350123a8963a793547654b96cb782531755eba672be6d185a2d62d6eb2a86efc8b58a97c139e88822d78cdbb5633dafaa146568f6ffd52f92059896fc82acffa8df8df6eee604c83fd2e48be78c98df704f98a60539459c6393a43a9ecb9acf20a95c37ac54dad89146b8366e8c5f45f1341e2f79a9905939a7c31948cfc8ad836ec6f1e6d1dc1528c40e9cbd3486d7fcacdb2a572e607a593cf68e36349a3bcbe5bf6f61f0baaa39d47ae21549154afe71392635c04fcb8ca73b70c8a6364102bb391fb46825fd86f17a9eb4e4f3fab0180e06575de741d53f3f3a334d459e63b1f9c71fb5ec1db38efa7fb8903c27d1ceed7726aadfbf87cc13b9165cc92c95f923ac4f1d90a806b756c4c1a71b858c0af22bb4ea227ab2062c9b1d927e1def468266c9e00f8f257d504228c5c41f8770d15cdc6713e46f98631a1371e7b7cecf91aac50946d1416616357d9ee0ce778532d07eb51545ac3a542d72c61034804ec1addc346d3bb76ed9640f0e479717fe67459517c25cc761262c5d0c2d2e54770d17cdd1789f66898de1b64da807bed12e42f405e26ae433275220476a484d8f9641800101590da42a4a9347e257920b9899bb1942d9b9b6b5c70deb791f21d842e6ec1c10c3e5ca09dfd0c2e3d374e912ec9e0872b7b38294a25e8f193242ab880bb2b98b640b3c13a0aab7063842aa1cc05ae7d79fe548bab5f74c60a640961a541a6379e43fdcf5ee860123f14904129b0378f37c5a94fd8ee6d7e5843dc4dd203e10e5da7683d3c0450ca1ce7ea73576789a1ecdbafaad8d418357a789094ab6dd465b4b15c92ae582cafce12f5289c1181377acb11125dc5beda8a41e8abfbc3426496abc01f3c1e5f41927896cf5346c494dc7691945c58f95fe0f4da296287e7da0e533533ddc8f9abbd743b9df0417a3000ba5fe208a63634c51e64bc81c28f9cd223cc8bf0edeb827db98e6369c7ac69e65edb1dfc8162d160301ee4344ee95f1d41f72ed23546d316b534007bb907c75496ba9e351af997067423bdaf8be7a1e9a7bc11e51d6e56716df1dd6e03a1334e4a101cb49d544f3d11d02197eb0159111745f2bd0ff0d975e187abc4f156a2f058b7b4dbe95bd4325ad8323c6042876796dd432b173dad2969d4bca347d2551bb1ab5be070e8bab0480776e542b64b8d15cb479661e7dab297677807061bc05e218298340414cf792db53ffd9dfa9bc7e6407d6e684767234af11b574a657a0fb70e89c11536412096e0bd2bf147cd97245ba5c6d8a53b485801eff729091620f7d966e514d775289a7d564a50d5d744172bb349e284431c4d6181c47d13e3f7a5c91f631d5eeeda8295a9413d1e70155d3c716eed75dc52e026833d85cb1f1b836459e4a30829c86e26058d58c091cdbd3f88b9a9e57a02e39707dcffda0e402cea2133f99402eb5a6765e57e13c6c4189cb4c5e90b89b85ddb69bd598f3ef4bc8292739bc792cb9375a60a96b252d15d0945a1d807990b70fbf6fc2cf77df29fc017690418c0c144226567dee088a5df72d5668bf14c4eeaf9c38c93b03049d1a176a70b27e23ecbf90cb9bd4dba145bf0d180941653d4196edef0252d22617126195bdbe6afbb0f88c31f3858c32167f44a9e11df53290b0a3814b5a3349936df2479df1e2fb3e8fcad5dcb8ecdd78d8a77cf11c495881dc31967db98409265397988f8bd1e84f4e96d5516d1ba8fb7b5053db26ef1676141e8e005c1eaf6a6f198ca584d56d12d19891b256fc96250c73222ee5ec59df40c2646f788d14c1d9f482eefdeba8877a018ca5c9cbc321cb8db1f2f8c01bc69bdd12d91d7fa159f36894628ba7bb9c7420fb8a6a89c80fbdb54d7ba6ede47ff93e15f125e16f98beb3e60ab6f0e0d3f2e9b82d3cee115aeb1b534d76a9a3ec321906919022ed2b5ec2762bacb2e5e2f0c81be9dfcd1578fd46e7697e4add3c667cdfe00604e12cc00cccaec6858beac4bab4f42ac84c93eb44130997900099fbc2c1af19d7474ccc3e4bb76dc9f9b2081ff7adb01204a647e759651a9c0b71b5103b3799becef5a15ce8bd3d13db33d5db0a762675036d2d297d1c05fe059861030a7ba80e1719e41761a74038f88482e7dea37c3691f424cb8616f9385bee31d00b2244b90c14bb7ac46fa5387601b4a46771ccedce877d0e92ab322eaf7ea097485ee408451fb3c1be86e0e56945212ff0e3c01fd575210a576bc051d6bd05a8f9573b5b42fe555c007dfd4274c7e05114a2fa42bc4291494e8561571f194370b8b6ce21f1dffdff5aec8da45e49629170e8cdfc6477f6aa2007e34837c3988b9db3dcce19dda2257fa3e3aa031496c7254b063319b1c11b294c27573c9aaa347d846b0af1499562d55496a4a542bf523fb0b8a3343e7a22a60acb31b7a84f40e833b1b5b01fbdb2580ce33e89cb0180ac10123a038e03ba652a227a557220c4de5c494d8d15cfc3e63c8601aefd2493f79007db24975d8df97f9c72c9a827043238d6c6c9ffe76c6978f9f477eab907adc30e2131e5bc376ce1b9fdba52324b2120f6d513211e159d1e7c1b7efd1475e8b6798c04c16f069de476f65c7d64af2f4d027089448eadafdb402e64a756975a5054d2814e72778be66a5722b48944c18c2f0f04963614384c700ade9a1bcf1682829143bc6caff152ada96bf926756a8d686e5658df8a0dacae9fe4abe49316083da5ddd793efa12591c729fd53acb84b2c75cbd765a725e03d082a2f836262b9727c64dd64e8af4cfe3990d75bc6e4cfd2a6ce9301f14e52bdb013a7716b29c801c62ead65a51bd656c17af047e161b214f367c39acf682cafad65192dd5b8092496e0795ae2cc7dcc879aaabfe64210674e27f1d5a94466489525d1c81fb2e34adb6d11e641d2841504662cfbf43e4681dd17d341a4f5a9f495308f2e3cc24896f943414b9c32a31c82b3e0011ff091c490a5e9d8d1addd1d6e7bde644253ac839364ae0f15c4a8149b1c957861b99e0960e63cc937e6301ee058d658f1b68d7afe9681a4c9c06b7a20897e31642dfa8ac8b1f67e2b36d13716ee8c2916582bac3de3776236f5cefe855dea53ddeb51647fa43333946d9f68058e0a4f674eb38de8b75d21b32d87385c226e9f3c1931db635c62dcbed53df05c83f368ccaeb1cc371dc43d21f8329af474ac330f1f06971aa3d0d3e449ff805ad511b76c2c67e52da428dfc41c8f84ec480f4eaa59231316df76db3037622171ca5afcff96fab39b8da2147bb40f98003e7512b1536398fafb2ac33f4db5c29ed068ada7055081856b1b8da7cf1724490851530d980b95240f130431d9b8a4cb7fd873f9aff86ce9280377d2504a50e617a2e2977a2a734d924c1b788dbd9d8b86d59c2525c8c03a45a2743618a02ed9338b227a12ad638e20b59642e83d86f91e9ef4191aa7868f8921fd1b10acc89494523c59645a9b36817225121236fc622cb382ae2d3f23e5ce16aabf7ad7f68aba184e10f47ec2927fee7159ff9d9117f73d3db5be9cc21e20c911cd1182e65c56a968d25a161f238ffd4f4bcea7d17fa0584049175cac75f137c0740adbc6aa5829bd70b858dcb10509d004a55a98af1bcb72b064cca078f3435f8b7c359cb2482620e1cf68a1812e8e9363ce71c0aba8afe03c79542ac6a860d0df15a3773d8e18490e5a1a43e84905ebf5d47ec5896335270c16bda2769d6af5d0aea5403f753fbeb509174794dafdadbc3898df76b8dfc2947ac405e05e798dedfca2c204b781cadb6ba7a5d70d874769df0c365f6861c7e4c3a8a7a7cf6b52c9e504bf3ad920bee5aade382b7962f2abf92d1a4372f8958f05e7ee00e59187e9bb26d118f7a4153b4c37a00a22984d91f099b84f611309059e6e7c591324b831c57abe1a9628a16baf496474159ef4489f4999d5e87fc0c1fd0653039bf2344519cc2c2e6af3352b9b7bdc50a825cb2e1372e155b5a7900b234541940e27bcfd8bddb6ba1dbb088be13f2ffcdad00234c86d911fa5b1f2cf929ba0be466cb08b9568663558dcbeff43106fce977b451ade96fe4c4e468576753f48e71128c90785586a0d98b1e080302ad481ec789a2c33d0170a99723e54b0bdb2d436ef7861ccd0991eebcb9016f812bf000b22b8daa3bf40926c6429cf2bec2c10f39b2e168103563eb1bc6f60f059ccb6bad39d2b818ad03e134c196ddd16c7602ff03442f5491432e655900fb97934804c000914a659b158ed94c93a040d72e5ac96ce65311e72ebda848e1bb201fd9d0eaa66a06e4c74dcb98a42bc1336d9ee9512ba05f467dd2d2824d8241b983dd575c004467b152f58e2eca1636bbf60aa6652e446060afd9b6e03b8848ae6d7c1827f81bc9b1df5aef85b71c628a45e50c6ec9d13b7afc9e8c90e834ce5b2bf30bb96b87f3366e8068d9825d65cef85600557ef4ff5a54156760bb63dcf52f14df1e12d6e611d0886d90a62454dd0a3c8c54b031762cf826031ba530dbd513fe163c95246d38c7c41cdcc070a6a22d96761dc02ce7e1afdcfaab67383e96ed57615de900294478cb974d8c8861e92cf6a20b0a44cd1c2ca457dd102238524aba25edcac6ddbd5c0cd11a9e90bd4bf5993fadaee06b6685d68d9b76f35e2a9e5806cf300ae72687edb4ca26851c45aa8cc0961734ca52d864dfc776fec9b4b62525087bdb3320fab4f26bdb4de0c09982366fca9c06c4d2e27fdf728ee9b0bc98243b3e4d4dfbe595fae770956f3073febe53bb1463759378bd69ac620108c1873efba343d5d5085b2678acf815339b65a22efdbd14c5f9552fac3c4c151383f2e86d08603c2d6fbf6fe0617d98210e60075aedfb84c18d72541e19644857dcd7d98c780cc84f4ef28112389e5a95d10864e1455e7af3ac2d51d8ccc4b1bd9f070e3a6f6e1657c674c152f2de9c33256e69edfe6155bff55256b5559f9b0f213bce2bbdcd81ce9cc63b8bc26b3e138f9e191d63e783e74f3ac98a2bfe21e93c064b5b3b591c6f7fbcacd03879b220fb9d81b9b0a82b1c8a63097bc0259ab911063a0a68cf5d6756c9a9a15e54d0362ac914284cab2fd464192a4b6cd6e57408ae52470114f191da51bbbc7322cfb0df17619111916f352a934e33c93bc58f0a44e954cdb1f92ab35f1161856d957e97aae85aac029a43a7dadd73faeea19910f2b1a273557e77bb8773f9c262f81b2e3a6806b178c0dc07169fab68ba1c05ad2697ff66a7ad541c6d081b2a8bee9e3cd936a36db377b4edcb83695706f98688ecb1c0693884e98404f6d4362293aa03af6c8d3f6eb87a7d3dd58cb6dfc3bb57f48c8cc4e483363852e30ce9aa7c953bad908e6d23fa89f49fd1e0bc9e40520195dabe31d1105bab6c079a0ac2a04f7fb2141b88134abc4c7a6804087710af785ceb6ab9e9ec93e821b09604221eb7bfb311344f25eb7a0bbea6b9d396a71ae050a6deff1a587bd13533b8ec1a12eb0d384c01277c8b876867fd32bfc14d5e08d5e6a1ac08b7e722df6d74c8e571601bdadaf0998814d19f932688505f125b93bcb35435df239508aa36b8b1dbbf4b2b47528c3e7a2a415", @generic="678ac23b4b35265a6540f64a661f20e1040d7fa9ff46b7a4313ca2d40dcd9d6a47d3b84b0257bd4e9f733888000143430516c4a84ec3b0bbf7d8e0e8e3eb3a123205b4617acec0c74ed6b8c1829dd1e36fa5ef0d22b5f4f6a7849a610b89c710c7131f2497d153a088b2573397c75b", @typed={0x14, 0x2d, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @typed={0x8, 0x6f, 0x0, 0x0, @ipv4=@multicast1}]}, @typed={0x5, 0x63, 0x0, 0x0, @str='\x00'}]}, 0x37c0}, 0x1, 0x0, 0x0, 0x80}, 0x4014) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) ioctl$FS_IOC_FIEMAP(r0, 0xc020660b, &(0x7f0000000380)=ANY=[@ANYBLOB="0000000000000000f7ffffff5e8cc9371f41671c5300000004000000000000000600000000000000faffffffffffffff0900000000000000000000000000000000000000000000000a000000000000000000000000000000060000000000000000000000000000000100000000000000800000000000000000000000000000000020000000000000003775a33dbfb300000000000000040000000000000004000000000000007f00000000000000000000000000000000000000000000000006000000000000000000000000000008000000000000000700000000000000e0fcffffffffffff00080000000000000000000000000000000100"/262]) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r1, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[], 0x15) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='memory.current\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2909.813944][ T2765] bond509: (slave bridge2956): Enslaving as a backup interface with an up link 10:32:03 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2909.924997][ T2786] bond509: (slave bridge2957): Enslaving as a backup interface with a down link [ 2909.970546][ T2808] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2910.001947][ T2810] bond509 (unregistering): (slave bridge2956): Releasing backup interface [ 2910.150845][ T2810] bond509 (unregistering): (slave bridge2957): Releasing backup interface [ 2910.254931][ T2810] bond509 (unregistering): Released all slaves [ 2910.341834][ T2764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:04 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290593) [ 2910.558181][ T2786] bond509: (slave bridge2958): Enslaving as a backup interface with an up link [ 2910.583452][ T2765] bond509 (unregistering): (slave bridge2958): Releasing backup interface 10:32:04 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r5}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x1f7, {0x0, 0x7fff, 0x8, 0x6, 0x6}, [0x7, 0xcff0, 0xffffffffffffff0d, 0x6, 0x400, 0xe9, 0x81, 0x0]}}, @name="aeffe98b94357b0f679334a41f182566333a1052effddf30fadde18ca0950948b1dbe438fa4251113da75e60bdf98efd6d5a8996a9de0f1ce712a618688f85949f34c7555f19953bd9c05d24b8e15fce94b5dd59648e065d904c53eb621c1000c3849ba229666b542edc2e3f853a6bf1b03c7931f7d8087c96a5f28a80ecd13c5a584b195299b48b74936b19050fefbac3b126fbc1dc9394a9d2b162526a47928bf3b88d20cb419831d348deeab01cb4b529eb33fe826f50391f73c8a09d82e7e51d79c6c5f5b72f2f289dae9eb377bbfdce3cf2a6317d822e4d5cc73e888eb2db92cba688c472d109b2eef553a157c7753bc5a8bd16e00044b941c802e720dd322e6ef900db9fd7cdc10031c098e9eb7a06dd3789be15c2cbd23bf59fbb93cd19fd07b3b2fe7a2ba019957089b1e59eb1193414dd597471998b089d7ebc91ee2af6970b4a6f947e772314b84f79179460de49beb6ebf3269819783f4745ee4317b3e43af02f916162e4529d78675138e6a16f83c352c7322a5114a52478782881005a404b47f523e5575480762a2c564685de5545aede855429fd11d5c2b4c2cc85c7e9a4d941836b6054544a85532a5ddffee4d5ff30fd355126c7b2af687f64917faa996a65fd0631377e2f05f9138657d783fb5796894f0aab12069dedf2c76cb3aecbcbcf4c3a8239d3bb47d13c0145d8de8ad82745521258c27ef7694cc61e047b982e387e2611fd6ddb6654b78577695eb03a0e7efb0a2977695d4cdcd3a59f482a64bf420e5e45a07b65342cb889e2669eb998381f7a20e990be34d56bdc5501c4289b65191395c44025aed92bfe21d540f918577e3030d6cca6a0c6944a6addf431fb5bbacdbe97586cab217e2705d338d0608b3f4371f33282b00314cbd969c5146404d988b2d29eb375e5830b97031f5b64dd368c6fbc10fbbfcc8b0edb3e6edbeab745b14eb6f234904877aade2c78ab36d1cfbe4bb6705b8517aef882274a41535fd96391ab021da018bcdec37683a1e7fca3f8bbb76a0041546cd2712a1dafe20a1dba24b122f658b1a4ed68748b5f60791eebe48c3e02d95d30b9d3f9aacc7158199af143729aac1f76b15102fd087f729d9ada9e0b5d4d3ad5ff3d2e53686a3da698b9c72be0194aab10974679a7e6ee8f6b26842909170fbe84306b2a108aa2ea0d70738ae885aa1131841218a429e01e5adb97ac6102e0079af822b1e0d0e6187e62f06fb5911acc7182f49c0af4c62df6c25e52eb3ac51f85dbb7d1b2fc00a5d4b4faa51821611c49e0b7c33a86fd8fe126318e2fa19fdc1b16e173b3d9dc004a45bf36289020abd4cc9229620182d1bef095fce077a7fb5be4cf5b090d99b5225cc41dc1936cb91d7c457a11737db0ee08b6237a462219161e0ebe79c5cc53f77932e2975787da4b27b6d9fb3536341acbf973d6b924366bd70d4ecce2cbd9723f2f11912c373c2f9da9f8dac9a6aa3f61a3f2db1a10b1f55ceb6d630585a3d51909a30471d492ac833985eaf2b94851abbf6419d3e0b75fbf631249f42070c83fe1cbfb4619559763ba445256dcb543d0ee6bf3354bc816ac1d4151234ff21cc8b6fe0018875771f8a95dbf5eccf141f6cb4ebc9265bf6cb9ad585b4c032573973ec48718f34f01eb79706aeb1b7bc6bd44b8d9ed8d3d724aa4e05e9f9f1125a666563c08cd9efdf057da8b0a580c30211165d6ee246b15b2c1c324bdbc4f90564802a702f6cf012f1d9fbc954cdc27158e46cdc5a8389386425adf154d0662c0a769995fca2db01a3d692256fb59c3b48a2ea163e396b5899691c3b37ae782d1be2d041f30cf15984fb8859eb28a2529af8a96a9da30bf56e8ea4c39a30a3cea63c193f4d6ee746bdf8d545fa97e5e8d830ae458dda603d7a0e868f50f746c02ceb6bcca78ce1fd44ac272c2120b55557de4a55877d329900d87b5ab6f77a68643891712abfd1a18aa25c0c3c0eaccbad4144b3bed8795a04c11c8fc0464aa0821ac68063d7557b233553e4adc6e4bf8c048dc96d7777f6d168afb0dd629eb39472d3d83ffbec1856249093fbdfaecbd52c7581c10679620a237ab7222d66e2191c7f7f1ba96ee0a4ecbb8ebebb212eea9343d6c227baab901d09cbc3b209121bba6682ee2f1184a497ce0dda52f2d934fd60a383ce544928ef143fe56459e82eab2bec10eb76347b2f893468439d818cd9fa5ab1b8cb4e4f358c51e53d4e6e947711e0362f8ad04d1f95ecae99212f20ede08b50eed0d822a585221b3a0f8916f1a626c3229ceb9b09b1d9e292a406576a46fe100e4a52c2217a53e9c854b84660f10dc95a671d289e8505c56aed84a791ea428c3a05a05860d2b46669603d65dd88620cd9a0ace25360382455510696c3a8048bd9c34bac57d495fbaa5ad2dc3bc8ef5ec6edb3ab168e0d8c219f9daa53b62894c156bdfc7b36c5831d9c3a3bb53e0e074825f3f7e6195786364cd3a704d595cb127509b62aa18bb105f4951b2304c30bc2367242a6cbbb73701ddd6da9494f56c553cbd2aa81c7feecbd593ea8bdfd8d739d69b6d19fb9b0b8767b0e8c0a0e32c246a240bd7b65096148f211b74a19b7b1cbbd184afee11fb7aea75301437c63bf57fef5eb00fabd04c53b95ba73ed2e2bf084bec4cae4d7b765482bf117e4503e8b2644b734e9886acfbfe937ac4a0b0167cf5e5a8b557c9c1aefb0efdb8eb0d54fd59bdd521f46692983c0b0c127b17380c3993db6dd4c5c42386e0423164c6d071aab68e2b13f6b158de202904f817dd707f7d37405c6b10fa2a11691506c816fee9c167134f4f69a03c63bd4e0d87662d150587762d42fd9397b8078fcd680922ac51465e99dc0d6ceee7d85497d208d984f0a1f5f4295c570a998ec723a83b917daf257991e0223b2503171893b32eda9f0633e7d979db88285b42a8f03f6e5a78d3198c1e7279a9f878dfb15b791a2eb9efc4c3a102a803385658e1c31726d6bca1216c29328c9ca61c984319b8533fc86c3e8db5dafde0a29066e07ab72651963c304b059319f83f347ed28cfd6630655cdfbad3d15ec5c89e3926e02c65fb704eaac7092cb0abf56d2c001ae4ba59ce521b9f0b867884a61a13c2216824bb3691e5fd2075bd5592a143af648d948a2146d42c553d3717cf83900a05dcbd0a93962276dce1b69460392246aaad39e987d112c369fe28b31a5b08e512aee16cb42330cedcc346d4f16f3e275c6872d748e255c8a3efed77d9286721123406c39f013900b09ad7891bc62883b392847543e690fd3cabdafce06165a165a81f0da252728c19b23c7f437c3b231d729fadd8da6991ef823fb41a46d23c6382cab69064087fd4014cfab568a3899ee77f4a00285dd8a42a1063763bb18eb06ef5106a7188be7b80b091ca2d703eb7b48ec2bfb038cc568cfbcae1ffd562ffb0688a3b3c122f50e86180e03d40d5a1fde736801f3cbcc2841725db0aa4f33c1063aab77e61c76f58d932df4d58e6a4e07170a78340337896ca4015a31f89b24c3ff9d695956db2013836ab494830bb1b58b2ef3c4b7a3f9e90b2a25df20e53ffaa92a65df3062afc9665bf266d83fc4abb1bff90900593a1e6ccb533a1a2ee2dd91d8ed60e68bf5448cb97022d6038f0a58640d641966bc094029b84db2e4cc9916d36abfadf4da64c16609daf7329ccd6341229c9a0cf1746d3374b0b088b26944cff1e38026efcef2d9bf29b690e6b5c4ea63259fca931585793432fc731d979fdfa25a2eeb9c66635668e534542de4994179d5961375608d9ec0dd6607e250e0695d83c573ed036f442c0b130db1adf217a0000b432f9eb99d6391f04edc7d3a4d8a18c65ef4f20bd42744ebeac8f4f2b16f60b17a16d397bc3462ed39ecb3107add8cf45c6928f09749476ac86187da455b64f683f11c601d4e470285c2017c8009a0354a6ef49861fcf5e0cf20e5879e5c2fcff8ca3803d7fd3e88eeb2105f2ace58db17b51f7796ef8e2052f83b8fb63630363a5f66c174e270d323df6fa381c634d1e772254f43bbdca86db86b2193f486f64de755a66716883c1220b388b5743f8a66315eb384376736871fefedc2e54e7dcf25b74c8560313ae9d152ffb4fe032099680bb731dbbc7e359b54ebce38a23de9a93c34697cc30b9ed61ebebe78a2a721474d54c552731f3d31ed3e7e1fe6a2cda7e84503b14fc14b3a5d07086827fd4b57ff3a00279c2bdeb6c12d3cc35793090ffb297f8f302fe2da1a0ba9d9eb4879752ff04a93385e5872c8df1b8e6a426d1c15c700949f6755deea3b9e168e59f50a092a63f14ba1125445797e83d57c5d8bd152491c4c39a1d55b810f747896c5866d6608bd8b98d6e5d92ad75ec18064745910d1d8e8195526e7c8e91f9d1b565dd2d17619657c94e96a9e97468dd8cbc07d4f7522dcb1d8686195976334e996074da198ddfec7f0bdd26381be8498b474ae2a06ce41862964a1b8db33dbca7313a270bcb83634c9e429b6fd291769dc92b8356f7f9ea14adea238568de6a7185e7aa24e446405985c495fd15b02afa8a5b480d976130bd1a676ad2051901d828c9ab1f42d67e0a800ff477a2df7f29060ed686e43241f49665690cf96f2433f7f63519254c3844dc7636b858f600ecde9f2bec118094030a953323caf43de2f607b59f31bb7ad2903c101eb9e11c18983b3a68e05e18a7d9f8e82f3875a34615f97a5799df826f2a6d81ce07035e2bda91e299a6b9ac5758a0643f854531df98d74e06a1933a08adcf13d245e06110c72bdf01fcd1bfb4e9665faa8478bc847c068df3c6b03abe2bdefffe1b7233db3ce1b15aed766ed7a111cfd31ea999c4dd3fc450984eea48e54e467ff0b6a1619e9d527633d8b6a143987bb7d31fafeebf1e20be14c280c69a600463ced74248e7df4d1c8d67086264be50ed410d568e0f75938c830bcaa1bb19449926edf5f4349d91022256851c20af0a4358d4e916aac181f442ac159aaae5224d971c4ebfc7bb3dcce5550526a5c8621d4282691561b3ec811443746722de7c1422342017607b58f0b42dd02d7861ac96a139b6d2988bdc3de2a31c0413ecccb565b2a53345c890734a9bdeaf11ca271e6cbb8bf57dd9958bcd2c9e3384e6921c25296c03a0f5475850970997f65189f43a2a80b2b15ad21e16b6e3e4f841fd48e7db3d9541912b1eb8894a5713e3eff745a5de8b4112413d33a603dd3433be45c036b0e1096e4ce1de1ae43db762ddd778c16c063fcbb5b30d8ba10537ec82f01fb0ac6cf5931572ece0e0064cb3b97a961d70a3bdc1f8dafc79e7133f8bf76cd68a999ed9f215ff719b6d60ecd7a7f7d6e294272e5ba85c8586a3235fbb1fddd4cf72b3412d1779ee2dc0c385ce6a8a2b018ed3a672df221225af8aeb3bc678cd6d7df470a9c084e244008fcf8cb0822e240d49e00c9b9bc73238503d6cd84f752162bce06e12c16f2397b3697cf9c52489e59d2a7be1b6bf83e0bb2647837f156da86995a9c5a70c612fa9c8b70a5c11630c630b56957813ca6999d4066f42d6574318eeebc2b27d2f5dbcdde17035bd8a21538fbce9c4fe3af974c494b2f6fba4d0b81c23ace8f6dffe5c7e9973438bf21548b85875ed741922910dca3523b7dad234311ecdb185cc3f8b6b97970768dc3428728387dc23279e0ce54cb2d5ecc9f8ad846f1ce6506a5189250f5e1516704f76dd9d"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:04 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000000)=0x7d21) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2910.755287][ T2765] bond509 (unregistering): Released all slaves 10:32:04 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290594) [ 2910.871275][ T2945] EXT4-fs warning (device sda1): ext4_group_extend:1793: can't shrink FS - resize aborted 10:32:04 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x60}, 0x0) 10:32:04 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ffffffff1100090468fe07000000003f0800000045000e070080001419001a0005e15bc793678c0088a946f2ed390b8749dd5a61ad5f57f56818af4567933192489e972bed120edd54d726e7efbfc194d7c4d855e6c4d71ff89f9dc8bbe148bd966af5aad0e30a8ba8f0ca5fd6210b0fba2b783e64d83c75a7cbb2cb2dc9a111126709b0f342fdbba36639942f4216172f97b6b2d906fbaea57cd6dcacb52b0ed3998d4178be6bc1693b815b1388a3d21816a6b59725117a626945e866fffa5008a9d19050523eb642436c184d3f8326f9f5a1441203c67008cc6b30ef8a896d70b77bc96218d2ad9fe19e990ce54752a5", 0xf1}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2911.074389][ T2958] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:04 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290595) [ 2911.377061][ T2960] bond509: (slave bridge2959): Enslaving as a backup interface with an up link 10:32:05 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)="ffffffff1100090468fe07000000003f0800000045000e070080001419001a0005e15bc793678c0088a946f2ed390b8749dd5a61ad5f57f56818af4567933192489e972bed120edd54d726e7efbfc194d7c4d855e6c4d71ff89f9dc8bbe148bd966af5aad0e30a8ba8f0ca5fd6210b0fba2b783e64d83c75a7cbb2cb2dc9a111126709b0f342fdbba36639942f4216172f97b6b2d906fbaea57cd6dcacb52b0ed3998d4178be6bc1693b815b1388a3d21816a6b59725117a626945e866fffa5008a9d19050523eb642436c184d3f8326f9f5a1441203c67008cc6b30ef8a896d70b77bc96218d2ad9fe19e990ce54752a5", 0xf1}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000100)=0x4) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2911.530323][ T2961] bond509: (slave bridge2960): Enslaving as a backup interface with a down link [ 2911.567540][ T2969] bond509 (unregistering): (slave bridge2959): Releasing backup interface 10:32:05 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r3, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r3, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x48, 0x140d, 0x800, 0x70bd28, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x3}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x4}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x5}, @RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$bt_cmtp(0x1f, 0x3, 0x5) sendfile(r1, r4, &(0x7f0000000000)=0x200, 0x80) [ 2911.797460][ T2969] bond509 (unregistering): (slave bridge2960): Releasing backup interface [ 2911.807532][ T37] kauditd_printk_skb: 72 callbacks suppressed [ 2911.807547][ T37] audit: type=1804 audit(1625221925.543:3496): pid=3019 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7414/memory.events" dev="sda1" ino=14757 res=1 errno=0 10:32:05 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r5}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x1f7, {0x0, 0x7fff, 0x8, 0x6, 0x6}, [0x7, 0xcff0, 0xffffffffffffff0d, 0x6, 0x400, 0xe9, 0x81, 0x0]}}, @name="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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2911.986363][ T37] audit: type=1804 audit(1625221925.723:3497): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9248/memory.events" dev="sda1" ino=14802 res=1 errno=0 10:32:05 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) setsockopt$inet_MCAST_MSFILTER(0xffffffffffffffff, 0x0, 0x30, &(0x7f0000000180)=ANY=[@ANYBLOB="d10000000000000002004e247f0000010000000000000000000000000000000000000000000000000000000000000000000000000077b14acad1e9dcff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004000000000000000000000000000000000000000000000000000000000000000100000002004e24ac1414aa00"/272], 0x110) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r0, r0, &(0x7f0000000000)=0x10001, 0x800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2912.040757][ T2969] bond509 (unregistering): Released all slaves [ 2912.112500][ T37] audit: type=1800 audit(1625221925.743:3498): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=14802 res=0 errno=0 [ 2912.150276][ T2958] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2912.150666][ T37] audit: type=1804 audit(1625221925.743:3499): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5876/memory.events" dev="sda1" ino=14834 res=1 errno=0 10:32:05 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290596) [ 2912.250505][ T37] audit: type=1800 audit(1625221925.743:3500): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=14834 res=0 errno=0 10:32:06 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000001580)=""/4096, &(0x7f0000000100)=0x1000) r5 = accept$inet(r0, &(0x7f0000000180)={0x2, 0x0, @private}, &(0x7f00000001c0)=0x10) sendfile(r5, r3, 0x0, 0x1f) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$TIPC_CMD_SET_NODE_ADDR(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r6, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$INCFS_IOC_READ_FILE_SIGNATURE(r7, 0x8010671f, &(0x7f0000000000)={&(0x7f0000000580)=""/4096, 0x1000}) mmap(&(0x7f0000498000/0x4000)=nil, 0x4000, 0x8, 0x30, r4, 0x86638000) [ 2912.401565][ T37] audit: type=1804 audit(1625221925.753:3501): pid=3028 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5876/memory.events" dev="sda1" ino=14834 res=1 errno=0 [ 2912.469569][ T37] audit: type=1804 audit(1625221925.753:3502): pid=3027 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9248/memory.events" dev="sda1" ino=14802 res=1 errno=0 [ 2912.498441][ T37] audit: type=1804 audit(1625221925.923:3503): pid=3055 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9248/memory.events" dev="sda1" ino=14802 res=1 errno=0 [ 2912.525832][ T37] audit: type=1804 audit(1625221925.973:3504): pid=3071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5876/memory.events" dev="sda1" ino=14834 res=1 errno=0 [ 2912.553602][ T37] audit: type=1804 audit(1625221926.033:3505): pid=3074 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7415/memory.events" dev="sda1" ino=14755 res=1 errno=0 10:32:06 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x68}, 0x0) 10:32:06 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) preadv(r1, &(0x7f0000000780)=[{&(0x7f0000000180)=""/99, 0x63}, {&(0x7f0000000200)=""/136, 0x88}, {&(0x7f00000002c0)=""/213, 0xd5}, {&(0x7f00000003c0)=""/154, 0x9a}, {&(0x7f0000000580)=""/248, 0xf8}, {&(0x7f0000000680)=""/206, 0xce}, {&(0x7f0000000480)=""/75, 0x4b}], 0x7, 0xdf4, 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r3, r2, 0x0, 0xffffffff800) sendfile(r3, r2, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:06 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290597) [ 2912.801996][ T3094] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:06 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) r5 = accept$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000100)=0x1c) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r3, 0x5000943f, &(0x7f0000000580)={{r5}, 0x0, 0x0, @inherit={0x88, &(0x7f0000000180)={0x1, 0x8, 0x6, 0x1f7, {0x0, 0x7fff, 0x8, 0x6, 0x6}, [0x7, 0xcff0, 0xffffffffffffff0d, 0x6, 0x400, 0xe9, 0x81, 0x0]}}, @name="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"}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2913.082225][ T3100] bond509: (slave bridge2961): Enslaving as a backup interface with an up link [ 2913.217717][ T3134] bond509: (slave bridge2962): Enslaving as a backup interface with a down link 10:32:07 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290598) [ 2913.292080][ T3094] bond509 (unregistering): (slave bridge2961): Releasing backup interface [ 2913.530137][ T3094] bond509 (unregistering): (slave bridge2962): Releasing backup interface 10:32:07 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000240)="842a8822d0b2263d2f10a6dba0bf618ac52b70d43de2b16e89c0779a8f6b6744b51f88e66367dcec0679c550d19fc366074424229d88e190a346a0bd3f6b721b49a8dceb3b504155b0", 0x49) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) pwrite64(r3, &(0x7f0000000180)="bfaa7b9ea8b18edd82f45ddbbfb204e174f63ca53dfd80191caf28fa14c7f2257e8370759ee9814b05e2b261e80bb7d0a43e3589a125c0220428a4df035850389e12ed1cc9d379d570c3bc9add1ad5bdc08ef28865b38749524a91b812ff657ac723746d1b2dcca4e1b273e6f315b43140e1d7ca79aae768e7448fa18d9f7aa4778c9dbb34d24d2f571b06cf41117fe4620a66744eabb3e1afc25b3778196878d81012dbd176d6", 0xa7, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) writev(r2, &(0x7f0000000380)=[{&(0x7f0000000580)="697ea18f4c54b7f88c027fa7acbf80ca07435aab4cf21c134abbebfa137bfe8286f49ed2d70a53a02b040c38043a66ccb76ed9ea5a3c7d1c98522edeca2cd67c808b507bfe47f38518d777632a1ae31e532a508394f8c798a33cb3e8c9896d320dbcacbb3bb907fa2e2ac96e28f78cf4f8410377404f97f578f2b2aaad0b576046eb00e37ef4e5c0d85ff0b679d0b58ccc2d9b07a5777d15d082d72b85072471a844334dca5276add9827195cdca0324419860e8106f4b6e6094f54240556b6a103306b27ab5a5582ad02112d29f2f84103a", 0xd2}, {&(0x7f00000002c0)="77e5a2cca7990a4c9b15970d7fd0a2c971d3c9255d9096d548ab718563f8777932645bb39febca44ec3c4cd10a1ccae77b04181b89", 0x35}], 0x2) write$cgroup_int(r1, &(0x7f0000000140), 0xff4d) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={&(0x7f00000006c0)='signal_generate\x00', r2}, 0x10) sendfile(0xffffffffffffffff, r5, &(0x7f0000000740)=0x4, 0x5c) sendfile(r4, r2, 0x0, 0xffffffff800) sendfile(r4, r2, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) r6 = socket(0x0, 0x5, 0xfffffff7) sendmsg$nl_route(r6, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x40d1) 10:32:07 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2913.746783][ T3094] bond509 (unregistering): Released all slaves 10:32:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) openat$cgroup_ro(r2, &(0x7f0000000000)='io.stat\x00', 0x0, 0x0) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2913.844895][ T3100] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:07 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP(r3, 0xd0009412, &(0x7f0000000580)={0x0, 0x9}) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:07 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x300, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24040000}, 0x800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r3, &(0x7f0000000100)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:08 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x290599) 10:32:08 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x6c}, 0x0) 10:32:08 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x9f7cf000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2914.392649][ T3222] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:08 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059a) [ 2914.647765][ T3245] bond509: (slave bridge2963): Enslaving as a backup interface with an up link 10:32:08 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x10000000d) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:08 executing program 1: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa00, 0x1fffffffe) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2914.762349][ T3222] bond509: (slave bridge2964): Enslaving as a backup interface with a down link [ 2914.813548][ T3268] bond509 (unregistering): (slave bridge2963): Releasing backup interface [ 2915.064350][ T3268] bond509 (unregistering): (slave bridge2964): Releasing backup interface [ 2915.231352][ T3268] bond509 (unregistering): Released all slaves 10:32:09 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2915.305283][ T3222] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:09 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2915.610342][ T3314] bond509: (slave bridge2965): Enslaving as a backup interface with an up link 10:32:09 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059b) 10:32:09 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x1600, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2915.701066][ T3367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2915.753267][ T3328] bond509: (slave bridge2966): Enslaving as a backup interface with a down link [ 2915.798403][ T3245] bond509 (unregistering): (slave bridge2965): Releasing backup interface [ 2915.949391][ T3245] bond509 (unregistering): (slave bridge2966): Releasing backup interface 10:32:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2916.060176][ T3245] bond509 (unregistering): Released all slaves 10:32:09 executing program 0: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0xa36, 0x100000003) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:09 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059c) 10:32:09 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x6e}, 0x0) 10:32:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059d) [ 2916.309776][ T3424] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:10 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x1600, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) 10:32:10 executing program 0 (fault-call:8 fault-nth:0): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2916.457216][ T3427] bond509: (slave bridge2967): Enslaving as a backup interface with an up link 10:32:10 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)) r2 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$BTRFS_IOC_GET_FEATURES(r2, 0x80189439, &(0x7f0000000040)) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2916.578362][ T3424] bond509: (slave bridge2968): Enslaving as a backup interface with a down link 10:32:10 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059e) [ 2916.652131][ T3427] bond509 (unregistering): (slave bridge2967): Releasing backup interface [ 2916.727607][ T3475] FAULT_INJECTION: forcing a failure. [ 2916.727607][ T3475] name failslab, interval 1, probability 0, space 0, times 0 [ 2916.782351][ T3475] CPU: 0 PID: 3475 Comm: syz-executor.0 Tainted: G W 5.13.0-syzkaller #0 [ 2916.792121][ T3475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2916.802180][ T3475] Call Trace: [ 2916.805462][ T3475] dump_stack_lvl+0xcd/0x134 [ 2916.810079][ T3475] should_fail.cold+0x5/0xa [ 2916.814620][ T3475] ? alloc_pipe_info+0x10a/0x590 [ 2916.819566][ T3475] should_failslab+0x5/0x10 [ 2916.824074][ T3475] kmem_cache_alloc_trace+0x55/0x3c0 [ 2916.829379][ T3475] alloc_pipe_info+0x10a/0x590 [ 2916.834161][ T3475] splice_direct_to_actor+0x6f1/0x8c0 [ 2916.839563][ T3475] ? generic_file_splice_read+0x6c0/0x6c0 [ 2916.845317][ T3475] ? apparmor_file_permission+0x26e/0x4e0 [ 2916.851080][ T3475] ? do_splice_to+0x250/0x250 [ 2916.855774][ T3475] ? security_file_permission+0x248/0x560 [ 2916.861520][ T3475] do_splice_direct+0x1b3/0x280 [ 2916.866400][ T3475] ? splice_direct_to_actor+0x8c0/0x8c0 [ 2916.871957][ T3475] ? security_file_permission+0x248/0x560 [ 2916.877701][ T3475] do_sendfile+0x9f0/0x1110 [ 2916.882225][ T3475] ? do_pwritev+0x270/0x270 [ 2916.886745][ T3475] ? lock_release+0x522/0x720 [ 2916.891437][ T3475] ? __context_tracking_exit+0xb8/0xe0 [ 2916.896914][ T3475] ? lock_downgrade+0x6e0/0x6e0 [ 2916.901771][ T3475] ? lock_downgrade+0x6e0/0x6e0 [ 2916.906633][ T3475] __x64_sys_sendfile64+0x1cc/0x210 [ 2916.911847][ T3475] ? __ia32_sys_sendfile+0x220/0x220 [ 2916.917179][ T3475] ? syscall_enter_from_user_mode+0x21/0x70 [ 2916.923094][ T3475] do_syscall_64+0x35/0xb0 [ 2916.927514][ T3475] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2916.933415][ T3475] RIP: 0033:0x4665d9 [ 2916.937307][ T3475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2916.956958][ T3475] RSP: 002b:00007fb6af379188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2916.965383][ T3475] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 2916.973385][ T3475] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000007 [ 2916.981366][ T3475] RBP: 00007fb6af3791d0 R08: 0000000000000000 R09: 0000000000000000 [ 2916.989355][ T3475] R10: 0000000100000001 R11: 0000000000000246 R12: 0000000000000001 [ 2916.997326][ T3475] R13: 00007ffeae1ec23f R14: 00007fb6af379300 R15: 0000000000022000 [ 2917.070221][ T3427] bond509 (unregistering): (slave bridge2968): Releasing backup interface [ 2917.217812][ T37] kauditd_printk_skb: 60 callbacks suppressed [ 2917.217835][ T37] audit: type=1804 audit(1625221930.953:3566): pid=3481 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir201014941/syzkaller.zGPpOW/9254/cgroup.controllers" dev="sda1" ino=14000 res=1 errno=0 [ 2917.299115][ T3427] bond509 (unregistering): Released all slaves [ 2917.383442][ T3463] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:11 executing program 3: mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0xffffd000) mmap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2, 0x840000000000a132, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000540)='memory.events\x00', 0xb00000000065808, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000140), 0xff4d) sendfile(r2, r1, 0x0, 0xffffffff800) sendfile(r2, r1, &(0x7f0000000040)=0x1600, 0x100000003) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x1000000) [ 2917.678500][ T37] audit: type=1804 audit(1625221931.413:3567): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7422/memory.events" dev="sda1" ino=14051 res=1 errno=0 [ 2917.764907][ T37] audit: type=1800 audit(1625221931.443:3568): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=14051 res=0 errno=0 10:32:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x29059f) [ 2917.821659][ T37] audit: type=1804 audit(1625221931.443:3569): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7422/memory.events" dev="sda1" ino=14051 res=1 errno=0 10:32:11 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x74}, 0x0) 10:32:11 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000001) [ 2917.849013][ T37] audit: type=1804 audit(1625221931.543:3570): pid=3536 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7422/memory.events" dev="sda1" ino=14051 res=1 errno=0 10:32:11 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) [ 2917.960498][ T3540] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:11 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a0) 10:32:11 executing program 3: syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, 0x0, 0x8800) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x23, 0x2a, [@dsss={0x3, 0x1}, @ht={0x2d, 0x1a}]}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r1, 0x100, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x42}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x6e}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1c}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c000}, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r4, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8800) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r4, 0x8, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r5 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000500)='ns/time_for_children\x00') unshare(0x40000000) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, 0x0) [ 2918.137377][ T3542] bond509: (slave bridge2969): Enslaving as a backup interface with an up link [ 2918.215147][ T37] audit: type=1804 audit(1625221931.943:3571): pid=3562 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5884/cgroup.controllers" dev="sda1" ino=13902 res=1 errno=0 [ 2918.244092][ T3588] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2918.273903][ T3540] bond509: (slave bridge2970): Enslaving as a backup interface with a down link [ 2918.299592][ T3582] bond509 (unregistering): (slave bridge2969): Releasing backup interface [ 2918.311313][ T3583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2918.437863][ T3582] bond509 (unregistering): (slave bridge2970): Releasing backup interface [ 2918.578984][ T3582] bond509 (unregistering): Released all slaves [ 2918.639750][ T3593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:32:12 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000002) 10:32:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a1) [ 2918.744826][ T3540] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2918.859327][ T3594] virt_wifi0 speed is unknown, defaulting to 1000 [ 2918.872385][ T3588] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2918.881921][ T37] audit: type=1804 audit(1625221932.613:3572): pid=3643 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5885/cgroup.controllers" dev="sda1" ino=13953 res=1 errno=0 [ 2918.931307][ T3582] bond509: (slave bridge2971): Enslaving as a backup interface with an up link [ 2918.944532][ T3680] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2919.058316][ T3674] bond509: (slave bridge2972): Enslaving as a backup interface with a down link [ 2919.086624][ T3593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2919.142455][ T3594] gre0 speed is unknown, defaulting to 1000 [ 2919.157212][ T3540] bond509 (unregistering): (slave bridge2971): Releasing backup interface [ 2919.272585][ T3540] bond509 (unregistering): (slave bridge2972): Releasing backup interface [ 2919.365643][ T3540] bond509 (unregistering): Released all slaves 10:32:13 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 10:32:13 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a2) [ 2919.412741][ T3597] virt_wifi0 speed is unknown, defaulting to 1000 10:32:13 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000003) 10:32:13 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x7a}, 0x0) [ 2919.476413][ T3597] gre0 speed is unknown, defaulting to 1000 [ 2919.595661][ T3752] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2919.621312][ T3759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2919.723811][ T37] audit: type=1804 audit(1625221933.453:3573): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5886/cgroup.controllers" dev="sda1" ino=14163 res=1 errno=0 [ 2919.763814][ T3761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 10:32:13 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a3) [ 2919.836126][ T3763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2919.969667][ T3766] bond509: (slave bridge2973): Enslaving as a backup interface with an up link [ 2920.057760][ T3795] bond509: (slave bridge2974): Enslaving as a backup interface with a down link [ 2920.084109][ T3803] bond509 (unregistering): (slave bridge2973): Releasing backup interface [ 2920.212215][ T3803] bond509 (unregistering): (slave bridge2974): Releasing backup interface [ 2920.300958][ T3803] bond509 (unregistering): Released all slaves 10:32:14 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a4) [ 2920.405027][ T3759] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:14 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) [ 2920.456042][ T37] audit: type=1804 audit(1625221934.183:3574): pid=3760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5886/cgroup.controllers" dev="sda1" ino=14163 res=1 errno=0 [ 2920.642175][ T3795] bond509: (slave bridge2975): Enslaving as a backup interface with an up link [ 2920.725300][ T3803] bond509: (slave bridge2976): Enslaving as a backup interface with a down link [ 2920.754609][ T3766] bond509 (unregistering): (slave bridge2975): Releasing backup interface 10:32:14 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000004) [ 2920.821029][ T3766] bond509 (unregistering): (slave bridge2976): Releasing backup interface [ 2920.905520][ T3766] bond509 (unregistering): Released all slaves [ 2920.955458][ T3890] __nla_validate_parse: 1 callbacks suppressed [ 2920.955474][ T3890] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2920.988747][ T37] audit: type=1804 audit(1625221934.723:3575): pid=3916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5887/cgroup.controllers" dev="sda1" ino=14163 res=1 errno=0 [ 2921.072486][ T3951] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:14 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x300}, 0x0) [ 2921.190570][ T3969] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2921.328745][ T3971] bond509: (slave bridge2977): Enslaving as a backup interface with an up link [ 2921.416569][ T3969] bond509: (slave bridge2978): Enslaving as a backup interface with a down link [ 2921.441972][ T3971] bond509 (unregistering): (slave bridge2977): Releasing backup interface [ 2921.538276][ T3971] bond509 (unregistering): (slave bridge2978): Releasing backup interface [ 2921.584554][ T3971] bond509 (unregistering): Released all slaves [ 2921.708206][ T3969] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2921.760673][ T3971] bond509 (unregistering): Released all slaves 10:32:16 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="900000001500020026bd7000fbdbdf250a8040fd", @ANYRES32=0x0, @ANYBLOB="14000100fc02000000000000000000000000000014000100fe88000000000000000000000000000114000100ff01000000000000000022000000000114000600f30c000009000000090c00000400000014000200fc0000000000000000000000103a551f96000000011400060008000000020000007f00000002000000ebc79880b9db8dbf2081b55554b139f277690dbe8aaa006cc9894b3a58589b040fb862131f6449fbe611521fa37b3f6f6bf20de20f1ac15df94fc4dcbfd22d5185eb912d4fa01521fd071e635a2e84d33b1a344c8efeda2448e0db185d794cedaf4b216d53bf6a"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x200000d1) r0 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000200), &(0x7f0000000240)=0x4) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="d400000010000384000000000000000000000000f863ecbcd5716eee07db5aa2a8ec36d61c3e7466602b27ca21ceff014544f031e909098a52009e278f5f9e655e50743af5456eb7a1b6b8b26c4db3d38d816b3bc6a4902dd54abd859abb930deb3e01d2d3072225449f45c8b7a55b86f6bce28103a8b6df6ce336257164e581049bb1738c7da02c204d42eb6d32a4e0fba5bd052eb2e58c7904fced3b32fe8099c9d4ed51daa7d1aea9aca021343e4afef209b0b8882669f041a05658cc8865c4f5f62d83df000000000000002202000000000000000000000000000000009e0d31392f4ddf62474f8abfb685581c86df542dc0cfd2e24bbe2dea4120a8d0f8eb562d2c3fea6ee2e461f24f4c27e5ebb09559b4cb6c76499c19ffc401c4746ccc7c8db3cb0d57642304cd6fc39ef496393483b13e537111fbe88cb16a01a6d208769b24b2d02d181305f38c8abe0d4d98e5011db6954867614cd62233b871486e9384240a9d7c4145742c94f9b7948755aff4ae873824b4811fae6c2a62bcdbb9f23db4ab7d6dcdb1ada8442e5ee5d1efa7b2ed498c", @ANYRES32=0x0, @ANYBLOB="0000000000000000a400128009000100766c616e000000009400028006000100000000000c0002000e0000000a0000007c0004800c000100080000001f0000000c00010001000000030000000c0001000104000000fcffffc5ff01002f6a0000080000000c00010020000000010000000c00010002000000060000000c000100c97100000cffffff0c000100000000001f0000000c00010008000000000000000c000100040000000000000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3, @ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x8010}, 0x40408c4) 10:32:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)) 10:32:16 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a5) 10:32:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000005) 10:32:16 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x500}, 0x0) 10:32:16 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a6) [ 2922.541222][ T4155] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2922.555752][ T4157] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2922.617592][ T4158] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2922.629467][ T37] audit: type=1804 audit(1625221936.363:3576): pid=4161 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5888/cgroup.controllers" dev="sda1" ino=14419 res=1 errno=0 [ 2922.647782][ T4157] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 2922.689351][ T4156] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2922.809944][ T4159] bond509: (slave bridge2979): Enslaving as a backup interface with an up link [ 2922.851129][ T4155] bond509: (slave bridge2980): Enslaving as a backup interface with a down link [ 2922.863178][ T4205] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2922.888188][ T4208] bond509 (unregistering): (slave bridge2979): Releasing backup interface 10:32:16 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) r3 = accept4$packet(r2, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000002c0)=0x14, 0x80000) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x52) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000d0700000000ffe70a0000000010", @ANYRES32=r4, @ANYBLOB="00000000e60000001c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=@newtfilter={0x24, 0x66, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xb, 0xffff}}}, 0x24}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$netlink(r5, &(0x7f00000000c0), &(0x7f0000000240)=0xc) 10:32:16 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000006) [ 2923.006467][ T4208] bond509 (unregistering): (slave bridge2980): Releasing backup interface [ 2923.088618][ T4208] bond509 (unregistering): Released all slaves [ 2923.143023][ T4223] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2923.168212][ T4223] bond6 (uninitialized): Released all slaves [ 2923.185445][ T4155] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:16 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a7) 10:32:16 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32, @ANYBLOB="0000400000000002280012000c00010076657468"], 0x48}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2923.193638][ T37] audit: type=1804 audit(1625221936.923:3577): pid=4226 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5889/cgroup.controllers" dev="sda1" ino=14419 res=1 errno=0 [ 2923.249233][ T4274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2923.283945][ T4279] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. 10:32:17 executing program 3: unshare(0x6c060000) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"/494], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0}, 0x78) unshare(0x40000000) sendmsg$nl_route_sched(r0, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000440)={&(0x7f0000000900)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200000009000300f5fff1ff0b0001006d717072696fc46140e383ede99c708786cf4f800000000034050000060005003fea0000dc87d5f083e83b093d9012a25f6ee4cd64023401ac44f083915cc810772232ccb646aa87ac7827d11a677716bb2ec3241280b658ba966e90ae94ed987f9eca431ab7259a77e58113947b73c5d6972b1e5d1ab1ce9d056804f1daf6df18b06faf9d82a1d53be79619b1000000de8df8695486b786457b9f217d2055530000baf088c70c183888bcd7a49258760265"], 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0xfffffc7b, 0x18, &(0x7f0000000880)="d048a852bebe1098f94d88b73803e1d65613e37fb9ee3d5268dfe8b82e6df98cde5d744202d166f480b6a0306a9e31e5e22ffb85396e9ed09cad22f0bc9004741459307525025810e6ba8cb4884bfe18aabf1382e7ecea8a", 0x0}, 0x48) write$binfmt_misc(r1, 0x0, 0xe0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x0, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockopt$inet_sctp_SCTP_INITMSG(r3, 0x84, 0x2, &(0x7f0000000280), &(0x7f0000000300)=0x8) getsockname$packet(r4, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000500)=0x4) r5 = accept4(r2, &(0x7f0000000340)=@alg, &(0x7f00000001c0)=0x80, 0x100000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000007c0)=ANY=[@ANYRESHEX, @ANYRES32=r5], 0x140}, 0x1, 0x0, 0x0, 0x20011}, 0x8084) sendto$inet6(r2, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000006c0)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd7, 0x8001, 0x0, 0x0) splice(r2, 0x0, r0, 0x0, 0x406f408, 0x0) [ 2923.369884][ T4208] bond509: (slave bridge2981): Enslaving as a backup interface with an up link 10:32:17 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000007) [ 2923.486248][ T4295] bond509: (slave bridge2982): Enslaving as a backup interface with a down link [ 2923.526719][ T4155] bond509 (unregistering): (slave bridge2981): Releasing backup interface [ 2923.658604][ T4155] bond509 (unregistering): (slave bridge2982): Releasing backup interface [ 2923.668171][ T37] audit: type=1804 audit(1625221937.403:3578): pid=4340 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5890/cgroup.controllers" dev="sda1" ino=14419 res=1 errno=0 [ 2923.799241][ T4155] bond509 (unregistering): Released all slaves [ 2923.859721][ T4337] virt_wifi0 speed is unknown, defaulting to 1000 [ 2923.896139][ T4338] virt_wifi0 speed is unknown, defaulting to 1000 10:32:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a8) [ 2923.914794][ T4337] gre0 speed is unknown, defaulting to 1000 10:32:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:17 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x600}, 0x0) [ 2924.073067][ T4338] gre0 speed is unknown, defaulting to 1000 10:32:17 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2905a9) [ 2924.131471][ T4404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:17 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000cecffc), 0x4) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:18 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000008) [ 2924.388005][ T4412] bond509: (slave bridge2983): Enslaving as a backup interface with an up link 10:32:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) r3 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2924.483542][ T37] audit: type=1804 audit(1625221938.213:3579): pid=4460 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5891/cgroup.controllers" dev="sda1" ino=14627 res=1 errno=0 [ 2924.545715][ T4416] bond509: (slave bridge2984): Enslaving as a backup interface with a down link 10:32:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2924.593293][ T4442] bond509 (unregistering): (slave bridge2983): Releasing backup interface 10:32:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) ioctl$sock_SIOCSIFBR(r2, 0x8941, &(0x7f0000000400)=@get={0x1, &(0x7f00000004c0)=""/124, 0x9}) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2924.758807][ T4442] bond509 (unregistering): (slave bridge2984): Releasing backup interface 10:32:18 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="540000000206010400090000000000000000000005000400000000000900020073797a3000000000056f4e4ff952caceea000500020000000c00078008001240ffffff657400"/84], 0x54}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2924.930536][ T4442] bond509 (unregistering): Released all slaves [ 2925.009669][ T4461] virt_wifi0 speed is unknown, defaulting to 1000 [ 2925.016505][ T4404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2925.099362][ T4461] gre0 speed is unknown, defaulting to 1000 10:32:20 executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x400300) 10:32:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000009) 10:32:20 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x700}, 0x0) 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2926.461985][ T4588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:20 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r2, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) readv(r1, &(0x7f0000000500)=[{&(0x7f0000000000)=""/16, 0x10}, {&(0x7f0000000040)=""/54, 0x36}, {&(0x7f0000000240)=""/215, 0xd7}, {&(0x7f0000000100)=""/112, 0x70}, {&(0x7f0000000080)=""/59, 0x3b}, {&(0x7f0000000380)=""/251, 0xfb}, {&(0x7f0000000180)=""/3, 0x3}, {&(0x7f0000000480)=""/18, 0x12}, {&(0x7f00000004c0)=""/12, 0xc}], 0x9) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x400086) write$cgroup_int(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) [ 2926.572570][ T37] audit: type=1804 audit(1625221940.303:3580): pid=4589 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5892/cgroup.controllers" dev="sda1" ino=14865 res=1 errno=0 [ 2926.663323][ T4599] __nla_validate_parse: 10 callbacks suppressed [ 2926.663344][ T4599] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:20 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf0ffff) [ 2926.707761][ T4592] bond509: (slave bridge2985): Enslaving as a backup interface with an up link 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2926.864591][ T4588] bond509: (slave bridge2986): Enslaving as a backup interface with a down link [ 2926.927897][ T4632] bond509 (unregistering): (slave bridge2985): Releasing backup interface 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:20 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000000a) [ 2927.090480][ T4632] bond509 (unregistering): (slave bridge2986): Releasing backup interface 10:32:20 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2927.244681][ T37] audit: type=1804 audit(1625221940.973:3581): pid=4656 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5893/cgroup.controllers" dev="sda1" ino=14675 res=1 errno=0 [ 2927.304714][ T4632] bond509 (unregistering): Released all slaves [ 2927.329116][ T4660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2927.369124][ T4588] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:21 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:21 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x900}, 0x0) 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:21 executing program 3: r0 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000080), &(0x7f00000000c0)=0x10, 0x80000) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000100)=0x200, 0x4) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000040)) 10:32:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x1000000) 10:32:21 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000000b) 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:21 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x2000000) [ 2927.838715][ T4727] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:21 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@bcast, @null, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) unshare(0x40000000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES16=r0], 0x85) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) sendfile(r1, 0xffffffffffffffff, 0x0, 0x800000000000c) socket(0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f00000002c0)=[{{&(0x7f0000000180)=@isdn={0x22, 0xbe, 0x5, 0x8, 0x9}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000240)="78a2de92a25fdf5bc1c8bdfb46a6b9e13d722b02e1117e42bf9c17818a9513b156e50d52b031f258e7156d57ef0469e5dc51674c7486489031872b013a9bad87e36abf582af2cf04764363c0", 0x4c}, {&(0x7f0000000040)="29c3dd037eb770fb63613ebbebc9ed0acb76bd3e7af9075d7b642570ebb8a2ce32b0f05bb958ca2d2f289f78053b879789c6af61c0", 0x35}], 0x2}}], 0x1, 0xc085) recvmmsg(r0, &(0x7f0000000540)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x700}}], 0x5dd, 0x40012062, 0x0) unshare(0x4050800) [ 2927.898751][ T37] audit: type=1804 audit(1625221941.633:3582): pid=4720 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5894/cgroup.controllers" dev="sda1" ino=14819 res=1 errno=0 [ 2927.990672][ T4730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) recvmsg(r0, &(0x7f00000003c0)={&(0x7f00000000c0)=@rc, 0x80, &(0x7f0000000300)=[{&(0x7f0000000140)=""/30, 0x1e}, {&(0x7f0000000180)=""/221, 0xdd}, {&(0x7f0000000280)=""/52, 0x34}, {&(0x7f00000002c0)=""/40, 0x28}], 0x4, &(0x7f0000000340)=""/89, 0x59}, 0x40010041) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2928.082863][ T4767] bond509: (slave bridge2987): Enslaving as a backup interface with an up link 10:32:21 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)=ANY=[@ANYBLOB="540000000206000000090000000000000000000005000400000000000900020073797a3000000000050001000600000005000500020000000c00078008001240ffffffff0d000300686173683a6e657400000000670fd93730d92d3e4e1cc9a68df4c3ec9512206d8fc6ad3b1b1f18afa147a72ade5bc584f0767c8bf3d38d993ef4040f09aa"], 0x54}}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2928.203199][ T4765] bond509: (slave bridge2988): Enslaving as a backup interface with a down link [ 2928.228476][ T4727] bond509 (unregistering): (slave bridge2987): Releasing backup interface 10:32:22 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000000c) 10:32:22 executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2928.378637][ T4727] bond509 (unregistering): (slave bridge2988): Releasing backup interface [ 2928.470374][ T37] audit: type=1804 audit(1625221942.203:3583): pid=4796 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5895/cgroup.controllers" dev="sda1" ino=14675 res=1 errno=0 [ 2928.502051][ T4727] bond509 (unregistering): Released all slaves [ 2928.553967][ T4799] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2928.580314][ T4780] virt_wifi0 speed is unknown, defaulting to 1000 [ 2928.601944][ T4765] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2928.712206][ T4780] gre0 speed is unknown, defaulting to 1000 [ 2928.843398][ T4767] bond509: (slave bridge2989): Enslaving as a backup interface with an up link [ 2928.917320][ T4878] bond509: (slave bridge2990): Enslaving as a backup interface with a down link [ 2928.969611][ T4727] bond509 (unregistering): (slave bridge2989): Releasing backup interface [ 2929.110172][ T4727] bond509 (unregistering): (slave bridge2990): Releasing backup interface [ 2929.211726][ T4727] bond509 (unregistering): Released all slaves [ 2929.259920][ T4788] virt_wifi0 speed is unknown, defaulting to 1000 10:32:23 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xa00}, 0x0) 10:32:23 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x3000000) 10:32:23 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000000d) [ 2929.305069][ T4788] gre0 speed is unknown, defaulting to 1000 10:32:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2929.416084][ T4951] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2929.471257][ T37] audit: type=1804 audit(1625221943.203:3584): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5896/cgroup.controllers" dev="sda1" ino=14968 res=1 errno=0 [ 2929.559443][ T4952] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:23 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:23 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x4000000) [ 2929.758773][ T4953] bond509: (slave bridge2991): Enslaving as a backup interface with an up link [ 2929.871926][ T4993] bond509: (slave bridge2992): Enslaving as a backup interface with a down link [ 2929.900010][ T4951] bond509 (unregistering): (slave bridge2991): Releasing backup interface [ 2930.045862][ T4951] bond509 (unregistering): (slave bridge2992): Releasing backup interface [ 2930.119973][ T4951] bond509 (unregistering): Released all slaves [ 2930.214278][ T4953] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2930.336202][ T4953] bond509: (slave bridge2993): Enslaving as a backup interface with an up link 10:32:25 executing program 3: unshare(0x6c060000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) unshare(0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e00003d000505d25a80648c63940d0524fc601000024031000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) splice(r2, 0x0, r3, 0x0, 0x19404, 0x0) recvmsg$kcm(r2, &(0x7f0000001d00)={&(0x7f0000000a00)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x80, &(0x7f0000001c80)=[{&(0x7f0000000a80)=""/42, 0x2a}, {&(0x7f0000000ac0)=""/4096, 0x1000}, {&(0x7f0000001ac0)=""/235, 0xeb}, {&(0x7f0000001bc0)=""/47, 0x2f}, {&(0x7f0000001c00)=""/123, 0x7b}], 0x5}, 0x20) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r1, 0x0, r4, 0x0, 0x19404, 0x0) socket(0x2b, 0x2, 0x400) sendmsg$kcm(r1, &(0x7f00000009c0)={&(0x7f00000000c0)=@generic={0x25, "85e3f4612f771f9ea3c86d00a29384aa9cd0833f103874b6407f1377716db094667d0409b9f9a8975170261b64a75881141988df5bd11327bfaab4c6d2dc68383aa99a9e495fada1f9eefbac831ca2fc6961192bdbf3798a69dcc6b8154791655ab66e852187b0488e2b11872a7b91f608a72c758d3d4097b6c2dd22010e"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="d19a539c65f155b709b3e0fb1b4d4238c734d01893a7b27370e40b83db6ff1ad2fe3922ce93d46a73e2d5845deffbbd5757be9d3ff705ea9daa68bd0a41fe0f2090daf951dcaeb9ce346fc", 0x4b}], 0x1, &(0x7f0000000200)=[{0xb8, 0x88, 0x8001, "af58599d5966878b0092c844931d37b7d7274a58c7528e1ebb4fdf81fcc22d84bdf0c222cea4fd59b1ef48fa55a837060d617da095d649d21f235e1789bba3b297855912b7668d7838d9ff6ba66b30242c980398b20872a927234f21abc28ef8c4003994a124518ec592426853a8fc957b2a8007a56e92ba0d0459812e400446056dabc44b6db19733138e4137bdfc7bda8d08e2d952e7fff2981b3fa7c5c40d00"}, {0x100, 0x113, 0x7, "7c371c6b0eea4ea76b56bdef2c04601ddc3e3fd6aae28357c397565449ee5b3f55f7f2b1cdb6e3b59df80e9619adcd7dac4524a0a4c3c19f2970c7c09d7034ad1341bbd00d7bb21ff91e94f917947bdf35165dca0b48c5b6959d7a8c231895890df8ced38d3f0ff2b2e494d70e2d8c35bf433d2b8f2bdc4b6f96d2b85f246b98d4783c4a8ccbad2a7837ef342ad28732a879b5ddff0527684c44b002b000f5718e6f55dd1d04559ae69c6dd5812309587dfe9669860d1bdeff873d9bd2bd88137fb66d72ea95d98727542a5d1e9ba1556224ae45c1172eaf64fb079e09daaba721ef2fe398cab00a7b478b7d"}, {0x108, 0x115, 0xff, "85e6e30be0a78ae98b66c3296b658288198da2533e3c52949630fdee487723895105f5064fd9a65a0cd7ebc2f24cdeedb9dcc23148c278c51c1baf07f85f1c3d6b0b7e2f1ec9f55ca8becc4e1b35b9c94755e554fdde08eb70f163bddeb06f94fc45f02e4db4f96d34ed1f11aa066313f9cd65ae5d3bab3d3b8169b3de101b7fe3601477693a16ca7b67816b84d40adb07440b4ea13224dbf67e53e3d55d6fcc0b6b41fce3bfef521e455cfbdaa8c94c08332dbd1ac9bc33361bb8f68d765df2f44d23f8d514ec4deb9b354d40ad5774a552165b56219d091041e4f130da58fc56cc51840f0de39cab0a5cb4532395ce453a45d9"}, {0x30, 0x108, 0x6, "24c3c2e1d403b6c30a55fa7985d35b032f08a78d588c3304f7ab954df5"}, {0xe8, 0x0, 0xc8b, "7ebbe83f2c926a72f82a2ec098af13543227884ddc31c860f7a239268d59645b50b9fcd9182be28667fe17bef27d21b6e435046d82da4f8e35bf8c3fc20e80d2ca85228c5d72a82c58dbebb9351c33aed2d5ab74c4caf42e5d26aa4f22ae9db97b00342d32376ac2c6b878f1f62d2437b7c30fa007252e4574334cce05a9bed6e0371db14e605e877c69eba06458905e9f25697c0f67439f5f5eea83c050d6af53ca2c05ee45369d6810d6882432266249ac9029c6c5791cf9c70a780b7580c2b971824d8c71bdde05d13345007c579740"}, {0x28, 0x10d, 0x4, "f63df5dab29ec73187bab0e6d0b70a602fb7"}, {0xf0, 0x3a, 0x5, "76e12e90e4282a4abb18776202c0df51c8f4c66b549bfdccba27e1e09685eeaa98225c26355ea28abffc5317b83074fc786b72e9c4a378654eae5e0eab078257527bede5facad325aba06f9cc797ee40d1174e4d2e92014bd26661b5207ba5eacbb6a9e0e0c085f5d908dead9636b616d31b17036d816b71157e971ce3352b9686ff32c3f62115f71a936081dcee235be70fbb8931230287c7c15129816f2c10ce1b78aedbceb20d8accd413898db96ea7b2582c4f321d8c82ec8e4c95b9cd56511d4c70eaff8d6c3c2dc51311944a9983f7000c16c6aca8a49eb0efd53061ce"}, {0xe8, 0x100, 0x8a, "725cc20383c795153fb457bf97e6d5e2e97d482644c2ab5783288d69130d072389de22b938eb8681a6407f4ce8c529b846f4f0baa9c44b92bcd9aa0baf56d2eb3c4bd8123f6767976b0f1ccfc2812e30aa99ab91203c2d54bec85a3b70a4a8d7947f6286865a227a3e87fed71c5735bd9283865bdfe8418c2c5faad2ca8e4ea1e2b3e518e2f6e4697990d4d92801912b89c8ff170e75553d91c6e6c6c2ce7b71340f18b1fe8517f0b67342ccdb4f98ce04b73eb191a69bfa4c40a3d5514ce4dd86f3175968a90732e4f80260df607748d7"}, {0xe8, 0x10b, 0xfffffff7, "078320bc7ecc238f1c0a953e671723c524003c651b37c28f0db743cf11c0858389dcbb613d358fe84a9596b0a1cdd342db6c52dae0d99f6162e2b118d6908a06126212dbd02fb3e68f5498337bb64ef0b3c09d31e94e573fb3fff5ff8c1cc0410659487644b8b2cec07af791933930424b3b6c33d49805539e217a5ed461eace6d8ab2b5eb5a807b492a9c5d0b13ef1958f8f839b9a05fd967b5eb07a369d2b9f093b9387d72d44e4fa55396272a2b65faab6ee526d15d7e3a3f1c1ac71b1a93d67c19495bfdc47782815f19e1092c357420dd2779b7"}, {0x100, 0x1, 0x0, "6c4bec6066f3f710c9e0f3ca8c4d8c763cb20205592bdee20f128ae7f369eedc68bd0d0e7f8e6a5503e3d1ca2aba70e4559fa004f1a963aa8f4ece8b5f7d0f3d59858119543e93aa9ec94075f213474c45da053cd069465d04c344727f53db5d0eaf80db6799484714bb0e014bf31c0df2a1aea7949e850503dcc5833309228b1d78d4afc534e7da36b40c0cc539c565dfb6491da7a686de79d0b76cd37675772ba90dde8f969b881a3337b9122b2081b5426c9c333381c43df4822085987d03265f1c8117dc5a98c5ee36924723b6ba7f194c002d6e2c7e129a38106fd236dbbbcc97ab30ffe39de5a2d7882ae3"}], 0x7c0}, 0x4000014) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getpeername$llc(r5, &(0x7f0000001d40)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001d80)=0x10) 10:32:25 executing program 1: r0 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000000f) 10:32:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x4010000) 10:32:25 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xc00}, 0x0) [ 2931.587033][ T5132] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2931.645035][ T5135] virt_wifi0 speed is unknown, defaulting to 1000 [ 2931.663473][ T37] audit: type=1804 audit(1625221945.393:3585): pid=5133 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5897/cgroup.controllers" dev="sda1" ino=14982 res=1 errno=0 [ 2931.700242][ T5133] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x5000000) [ 2931.762632][ T5175] bond510: (slave bridge2994): Enslaving as a backup interface with an up link [ 2931.775306][ T5135] gre0 speed is unknown, defaulting to 1000 [ 2931.787656][ T5132] bond510 (unregistering): (slave bridge2994): Releasing backup interface 10:32:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2931.961697][ T5132] bond510 (unregistering): Released all slaves [ 2932.018847][ T5219] netlink: 'syz-executor.3': attribute type 2 has an invalid length. 10:32:25 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2932.061315][ T5219] netlink: 3740 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2932.107643][ T5163] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:25 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000010) [ 2932.159989][ T5172] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 2932.190995][ T5172] netlink: 3740 bytes leftover after parsing attributes in process `syz-executor.3'. 10:32:25 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x6000000) 10:32:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2932.314197][ T5175] bond510: (slave bridge2995): Enslaving as a backup interface with an up link [ 2932.337984][ T5132] bond510 (unregistering): (slave bridge2995): Releasing backup interface [ 2932.421650][ T37] audit: type=1804 audit(1625221946.153:3586): pid=5282 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5898/cgroup.controllers" dev="sda1" ino=14986 res=1 errno=0 [ 2932.505451][ T5288] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:26 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x50, 0x0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x23, 0x2a, [@dsss={0x3, 0x1}, @ht={0x2d, 0x1a}]}, @NL80211_ATTR_MAC={0xa}]}, 0x50}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0x8, 0x34}}}}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x7}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x5c}, 0x1, 0x0, 0x0, 0x44080}, 0x20000020) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="05ff0f000000000000002e00000008000300", @ANYRES32=r7, @ANYBLOB="0a0034000202020202020000"], 0x28}}, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r8, 0x8912, 0x400308) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r12 = syz_genetlink_get_family_id$nl80211(0x0, r0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f0000000740)={0x220, r12, 0x0, 0x70bd25, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xfffffff9}}}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1f6, 0x33, @probe_request={@with_ht={{{0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x70}, @device_b, @device_a, @random="322881d51fb3", {0x9, 0x1f}}, @ver_80211n={0x0, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x1}}, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x12, 0x1}]}, @val={0x3, 0x1}, @val={0x2d, 0x1a, {0x4000, 0x2, 0x2, 0x0, {0x200, 0x1, 0x0, 0x3fe, 0x0, 0x1, 0x0, 0x3}, 0x1, 0xe9, 0x7}}, @val={0x72, 0x6}, [{0xdd, 0xd7, "4a099fd79662b505200179a951f26c40675ed2013c7a2bc754706c4bce630429e8b34bc268131eb1510310991c490764b839b01206b30484ef7beae121cbbe2fed6e58a3b724236d8a603a6a8f7ddf7a9400dd8f7d60db520b5e2b21bce507546698b89c0325f9851fdea1e8277d549a6249d524cb5b369cfe8e613b9813fddf19f71b106608c8311a30c8d7e101454331fd297012618119a070d9f3c03a01a018307b34e8ce56afb113c15074ce49ca0cc12dc9e2408b86c8f92cd07f84840da26718a09c654020bd0df14279ab6dde243b34d3234b3f"}, {0xdd, 0xc9, "4676629d25e1d6e29e1647be8deb1f6abb8952c7c2cc503b8a4dc4313a6c35922530f1bffb4dde87a537a5411a0def7a7299ffeba95da0d046f440e1303cf6160df8f4dd40f924934c72b3b4439d81eef9117cc1f269081e5a7baa6e3bbedbd6023525912806c522fef45beec48e1599e91cabe493c5155624644de9058a845e54ab88a0bb8616ee11e235f85b76af6c01fa3d27b8a620cb09bbd72339ac90fbc797254e4d85505bc286bc7aeb81b99c767bf5a2a7954435d9a61a60553cf388f2d3637d170cc72c0d"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x220}, 0x1, 0x0, 0x0, 0x4000000}, 0x8005) sendmsg$NL80211_CMD_SET_INTERFACE(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x24, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) [ 2932.572284][ T5132] bond510 (unregistering): Released all slaves 10:32:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:26 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0xe00}, 0x0) 10:32:26 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x7000000) 10:32:26 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000011) 10:32:26 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0x13, &(0x7f0000000180)=0x80, 0x4) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) accept(r0, 0x0, &(0x7f0000000000)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)={0x1, 0x4, 0x1, 0x42, 0x3a8, 0xffffffffffffffff, 0x8, '\x00', 0x0, r2, 0x0, 0x2, 0x2}, 0x40) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendto$packet(r5, 0x0, 0x0, 0x0, 0x0, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700000066a1310b5531ef8e55", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r8, @ANYBLOB="002d000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="480000001000030400"/20, @ANYRES16, @ANYBLOB="00000000000000002000128008000100687372001400028008000100", @ANYRES32=r6, @ANYBLOB="087e9349", @ANYRES32=r8, @ANYBLOB="08000a009116c3224dea168f0857608936b421b2543a49b94100085bad1762d2ec33fd14ac9dfa67772ddf86239ae34df7d0c8c110a2163318c359cc1a349a641b889f8e3c36231e43ef76dbf4a675d2f92ef2caf6891b61f78f5aee43e44c59367854540eb5691263355a6ea8ceceeda20181ad98370ee70c03feb3a0312d40bc816beb1d98f3e67a3f714d7d7571c9", @ANYRES64, @ANYBLOB], 0x48}}, 0x0) 10:32:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2932.918828][ T5336] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2933.019203][ T37] audit: type=1804 audit(1625221946.753:3587): pid=5338 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5899/cgroup.controllers" dev="sda1" ino=14972 res=1 errno=0 [ 2933.073408][ T5365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:26 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.152700][ T5343] bond510: (slave bridge2996): Enslaving as a backup interface with an up link [ 2933.206246][ T5344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:32:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.351682][ T5336] bond510: (slave bridge2997): Enslaving as a backup interface with a down link 10:32:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.413192][ T5381] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:32:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.487911][ T5381] device veth33 entered promiscuous mode [ 2933.520596][ T5380] bond510 (unregistering): (slave bridge2996): Releasing backup interface 10:32:27 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x10000001e) 10:32:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.681369][ T5380] bond510 (unregistering): (slave bridge2997): Releasing backup interface [ 2933.705294][ T37] audit: type=1804 audit(1625221947.433:3588): pid=5410 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5900/cgroup.controllers" dev="sda1" ino=14993 res=1 errno=0 [ 2933.795080][ T5412] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:27 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2933.866571][ T5380] bond510 (unregistering): Released all slaves [ 2933.927320][ T5385] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2933.950000][ T5343] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2933.990772][ T5344] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:32:28 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x161b}, 0x0) 10:32:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8000000) 10:32:28 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$inet(0x10, 0x2, 0x0) r2 = socket$inet(0x10, 0x2, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180007841dfffd946f610500020f81001f038b0f06000800080005004000ff7e280000001100ffffba16a0aa1c0900000000000012", 0x39}], 0x1}, 0x0) r3 = socket$inet(0x10, 0x2, 0x0) sendmsg(r3, &(0x7f0000000000)={0x0, 0x117, &(0x7f0000000040)=[{&(0x7f00000000c0)="24000000180007841dfffd946f610500020f81001f038b0f06000800080005004000ff7e280000001100ffffba16a0aa1c0900000000000012fffff0000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[@ANYRES16=r1, @ANYRESHEX, @ANYBLOB="19f22843231102b61b3085caf6084e59fc23b252b37dc4f4d76810153c3d8b7e1013fc6218cc9fdc829af96e4a1795b11a51bd55f0c6126e46c378953fc23db8ff07222c78532657f62d47704df0736f13d094", @ANYRESOCT, @ANYRES64=r1, @ANYRES32=r1], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000000100)={0xfffffffffffffffe, 0xfffffe7f, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000020001030000000000006cff363100000000"], 0x1c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r5, r4, 0x0, 0x100000002) 10:32:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000023) 10:32:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2934.396155][ T5483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:28 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x8010000) [ 2934.510174][ T37] audit: type=1804 audit(1625221948.243:3589): pid=5496 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5901/cgroup.controllers" dev="sda1" ino=15003 res=1 errno=0 10:32:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2934.630695][ T37] audit: type=1804 audit(1625221948.363:3590): pid=5514 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7435/cgroup.controllers" dev="sda1" ino=15007 res=1 errno=0 [ 2934.634793][ T5508] bond510: (slave bridge2998): Enslaving as a backup interface with an up link 10:32:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2934.836930][ T5483] bond510: (slave bridge2999): Enslaving as a backup interface with a down link 10:32:28 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:28 executing program 3: unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x1010, 0xffffffffffffffff, 0x8513b000) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f00000000c0)={'nat\x00'}, &(0x7f0000000080)=0x54) [ 2934.910064][ T5526] bond510 (unregistering): (slave bridge2998): Releasing backup interface 10:32:28 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000025) [ 2935.091873][ T5526] bond510 (unregistering): (slave bridge2999): Releasing backup interface [ 2935.143732][ T37] audit: type=1804 audit(1625221948.873:3591): pid=5546 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5902/cgroup.controllers" dev="sda1" ino=15003 res=1 errno=0 [ 2935.249316][ T5526] bond510 (unregistering): Released all slaves [ 2935.323955][ T5545] virt_wifi0 speed is unknown, defaulting to 1000 [ 2935.332096][ T5483] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2935.437741][ T5571] bond510: (slave bridge3000): Enslaving as a backup interface with an up link [ 2935.468983][ T5587] bond510: (slave bridge3001): Enslaving as a backup interface with a down link [ 2935.478582][ T5545] gre0 speed is unknown, defaulting to 1000 [ 2935.490502][ T5508] bond510 (unregistering): (slave bridge3000): Releasing backup interface [ 2935.610820][ T5508] bond510 (unregistering): (slave bridge3001): Releasing backup interface [ 2935.738169][ T5508] bond510 (unregistering): Released all slaves 10:32:29 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x9000000) 10:32:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) 10:32:29 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000067) 10:32:29 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x1b16}, 0x0) [ 2935.911022][ T5548] virt_wifi0 speed is unknown, defaulting to 1000 [ 2935.956758][ T5548] gre0 speed is unknown, defaulting to 1000 10:32:29 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) [ 2936.006678][ T5691] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2936.080496][ T37] audit: type=1804 audit(1625221949.813:3592): pid=5689 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5903/cgroup.controllers" dev="sda1" ino=15009 res=1 errno=0 10:32:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) [ 2936.263172][ T5694] bond510: (slave bridge3002): Enslaving as a backup interface with an up link [ 2936.318027][ T5714] bond510: (slave bridge3003): Enslaving as a backup interface with a down link [ 2936.337422][ T5691] bond510 (unregistering): (slave bridge3002): Releasing backup interface [ 2936.378570][ T5691] bond510 (unregistering): (slave bridge3003): Releasing backup interface 10:32:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2936.449815][ T5691] bond510 (unregistering): Released all slaves 10:32:30 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa000000) 10:32:30 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000165) [ 2936.568723][ T5694] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2936.722082][ T5714] bond510: (slave bridge3004): Enslaving as a backup interface with an up link 10:32:30 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2936.839010][ T5821] bond510: (slave bridge3005): Enslaving as a backup interface with a down link [ 2936.878925][ T37] audit: type=1804 audit(1625221950.613:3593): pid=5828 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5904/cgroup.controllers" dev="sda1" ino=15009 res=1 errno=0 [ 2936.914709][ T5691] bond510 (unregistering): (slave bridge3004): Releasing backup interface [ 2936.933918][ T5834] __nla_validate_parse: 5 callbacks suppressed [ 2936.933937][ T5834] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2937.050054][ T5691] bond510 (unregistering): (slave bridge3005): Releasing backup interface [ 2937.144934][ T5691] bond510 (unregistering): Released all slaves 10:32:31 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)={&(0x7f0000000040)={0x34, r1, 0x62d, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x18, 0x11d, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x85}]}]}]}, 0x34}}, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$FITRIM(r6, 0xc0185879, &(0x7f0000000180)={0x5, 0x7, 0x5}) ioctl$TUNSETLINK(r5, 0x8912, 0x400308) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r7, r4, 0x0, 0x10000a006) 10:32:31 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0x0, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:31 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000281) 10:32:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa010000) 10:32:31 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x1f00}, 0x0) [ 2938.112084][ T5902] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:31 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xa030000) [ 2938.178436][ T37] audit: type=1804 audit(1625221951.913:3594): pid=5905 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7437/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 10:32:32 executing program 1 (fault-call:3 fault-nth:0): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2938.238905][ T37] audit: type=1804 audit(1625221951.963:3595): pid=5910 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5905/cgroup.controllers" dev="sda1" ino=15016 res=1 errno=0 [ 2938.285853][ T5907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2938.345181][ T5948] FAULT_INJECTION: forcing a failure. [ 2938.345181][ T5948] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2938.357588][ T5908] bond510: (slave bridge3006): Enslaving as a backup interface with an up link [ 2938.358684][ T5948] CPU: 0 PID: 5948 Comm: syz-executor.1 Tainted: G W 5.13.0-syzkaller #0 [ 2938.377045][ T5948] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2938.387191][ T5948] Call Trace: [ 2938.390466][ T5948] dump_stack_lvl+0xcd/0x134 [ 2938.395074][ T5948] should_fail.cold+0x5/0xa [ 2938.399601][ T5948] prepare_alloc_pages+0x17b/0x580 [ 2938.404741][ T5948] ? stack_trace_consume_entry+0x160/0x160 [ 2938.410994][ T5948] ? is_bpf_text_address+0xa9/0x160 [ 2938.416209][ T5948] __alloc_pages+0x12f/0x500 [ 2938.420812][ T5948] ? __alloc_pages_slowpath.constprop.0+0x21b0/0x21b0 [ 2938.427586][ T5948] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 2938.433835][ T5948] ? save_stack+0xbb/0x1e0 [ 2938.438256][ T5948] ? register_early_stack+0xb0/0xb0 [ 2938.443527][ T5948] ? lock_acquire+0x442/0x510 [ 2938.448261][ T5948] ? lock_release+0x522/0x720 [ 2938.452955][ T5948] ? tun_build_skb+0x1d2/0xf30 [ 2938.457742][ T5948] alloc_pages+0x18c/0x2a0 [ 2938.462171][ T5948] skb_page_frag_refill+0x262/0x570 [ 2938.467387][ T5948] tun_build_skb+0x24b/0xf30 [ 2938.471989][ T5948] ? tun_xdp_act+0x890/0x890 [ 2938.476627][ T5948] ? lock_release+0x522/0x720 [ 2938.481337][ T5948] ? fs_reclaim_release+0x9c/0xf0 [ 2938.486397][ T5948] tun_get_user+0x7fc/0x36b0 [ 2938.490997][ T5948] ? aa_file_perm+0x5bb/0x1170 [ 2938.495784][ T5948] ? lock_downgrade+0x6e0/0x6e0 [ 2938.500640][ T5948] ? tun_build_skb+0xf30/0xf30 [ 2938.505410][ T5948] ? lock_acquire+0x442/0x510 [ 2938.510100][ T5948] ? lock_downgrade+0x6e0/0x6e0 [ 2938.514963][ T5948] ? aa_file_perm+0x5e5/0x1170 [ 2938.519731][ T5948] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2938.525995][ T5948] ? _kstrtoull+0x297/0x540 [ 2938.530593][ T5948] tun_chr_write_iter+0xe1/0x1f0 [ 2938.535559][ T5948] new_sync_write+0x426/0x650 [ 2938.540245][ T5948] ? new_sync_read+0x6e0/0x6e0 [ 2938.545025][ T5948] ? lock_downgrade+0x6e0/0x6e0 [ 2938.549899][ T5948] ? apparmor_file_permission+0x26e/0x4e0 [ 2938.555634][ T5948] vfs_write+0x796/0xa30 [ 2938.559883][ T5948] ksys_write+0x12d/0x250 [ 2938.564222][ T5948] ? __ia32_sys_read+0xb0/0xb0 [ 2938.568995][ T5948] ? syscall_enter_from_user_mode+0x21/0x70 [ 2938.574979][ T5948] do_syscall_64+0x35/0xb0 [ 2938.579400][ T5948] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2938.585312][ T5948] RIP: 0033:0x4192bf [ 2938.589204][ T5948] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2938.608817][ T5948] RSP: 002b:00007f12a9c88150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2938.617263][ T5948] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004192bf [ 2938.625233][ T5948] RDX: 0000000000000046 RSI: 0000000020000440 RDI: 00000000000000f0 [ 2938.633205][ T5948] RBP: 00007f12a9c881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2938.641174][ T5948] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2938.649143][ T5948] R13: 00007ffcbfefc6cf R14: 00007f12a9c88300 R15: 0000000000022000 10:32:32 executing program 1 (fault-call:3 fault-nth:1): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2938.731866][ T5911] bond510: (slave bridge3007): Enslaving as a backup interface with a down link 10:32:32 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000300) [ 2938.778830][ T5902] bond510 (unregistering): (slave bridge3006): Releasing backup interface [ 2938.810947][ T5957] FAULT_INJECTION: forcing a failure. [ 2938.810947][ T5957] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2938.872109][ T5957] CPU: 0 PID: 5957 Comm: syz-executor.1 Tainted: G W 5.13.0-syzkaller #0 [ 2938.881977][ T5957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2938.892039][ T5957] Call Trace: [ 2938.895321][ T5957] dump_stack_lvl+0xcd/0x134 [ 2938.899932][ T5957] should_fail.cold+0x5/0xa [ 2938.904451][ T5957] copy_page_from_iter+0x38e/0x880 [ 2938.909610][ T5957] tun_build_skb+0x2c8/0xf30 [ 2938.914227][ T5957] ? tun_xdp_act+0x890/0x890 [ 2938.918842][ T5957] ? lock_release+0x522/0x720 [ 2938.923535][ T5957] ? fs_reclaim_release+0x9c/0xf0 [ 2938.928580][ T5957] tun_get_user+0x7fc/0x36b0 [ 2938.933194][ T5957] ? aa_file_perm+0x5bb/0x1170 [ 2938.938086][ T5957] ? lock_downgrade+0x6e0/0x6e0 [ 2938.942949][ T5957] ? tun_build_skb+0xf30/0xf30 [ 2938.947728][ T5957] ? lock_acquire+0x442/0x510 [ 2938.952435][ T5957] ? lock_downgrade+0x6e0/0x6e0 [ 2938.957300][ T5957] ? aa_file_perm+0x5e5/0x1170 [ 2938.962080][ T5957] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2938.968339][ T5957] ? _kstrtoull+0x297/0x540 [ 2938.972880][ T5957] tun_chr_write_iter+0xe1/0x1f0 [ 2938.977836][ T5957] new_sync_write+0x426/0x650 [ 2938.982531][ T5957] ? new_sync_read+0x6e0/0x6e0 [ 2938.987326][ T5957] ? lock_downgrade+0x6e0/0x6e0 [ 2938.992195][ T5957] ? apparmor_file_permission+0x26e/0x4e0 [ 2938.997970][ T5957] vfs_write+0x796/0xa30 [ 2939.002230][ T5957] ksys_write+0x12d/0x250 [ 2939.006575][ T5957] ? __ia32_sys_read+0xb0/0xb0 [ 2939.011353][ T5957] ? syscall_enter_from_user_mode+0x21/0x70 [ 2939.017259][ T5957] do_syscall_64+0x35/0xb0 [ 2939.021683][ T5957] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2939.027597][ T5957] RIP: 0033:0x4192bf [ 2939.031491][ T5957] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2939.051111][ T5957] RSP: 002b:00007f12a9c88150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2939.059519][ T5957] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004192bf [ 2939.067493][ T5957] RDX: 0000000000000046 RSI: 0000000020000440 RDI: 00000000000000f0 [ 2939.075469][ T5957] RBP: 00007f12a9c881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2939.083561][ T5957] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2939.091536][ T5957] R13: 00007ffcbfefc6cf R14: 00007f12a9c88300 R15: 0000000000022000 10:32:32 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$IPSET_CMD_DEL(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="34dfff000906010110000000000000000000000005000100460000050c0007800800094000f9ff000900020073797a30"], 0x34}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r2, 0x0, 0x100000013) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 2939.147111][ T5902] bond510 (unregistering): (slave bridge3007): Releasing backup interface [ 2939.218289][ T37] audit: type=1804 audit(1625221952.953:3596): pid=5964 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5906/cgroup.controllers" dev="sda1" ino=15016 res=1 errno=0 [ 2939.265222][ T5902] bond510 (unregistering): Released all slaves [ 2939.295394][ T5911] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2939.317360][ T5969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:33 executing program 1 (fault-call:3 fault-nth:2): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc000000) [ 2939.328740][ T37] audit: type=1804 audit(1625221953.063:3597): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7438/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 [ 2939.462723][ T6012] FAULT_INJECTION: forcing a failure. [ 2939.462723][ T6012] name failslab, interval 1, probability 0, space 0, times 0 [ 2939.528520][ T6012] CPU: 0 PID: 6012 Comm: syz-executor.1 Tainted: G W 5.13.0-syzkaller #0 [ 2939.538265][ T6012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2939.548323][ T6012] Call Trace: [ 2939.551602][ T6012] dump_stack_lvl+0xcd/0x134 [ 2939.556224][ T6012] should_fail.cold+0x5/0xa [ 2939.560741][ T6012] ? __build_skb+0x21/0x60 [ 2939.565164][ T6012] should_failslab+0x5/0x10 [ 2939.569678][ T6012] kmem_cache_alloc+0x5e/0x4a0 [ 2939.574449][ T6012] __build_skb+0x21/0x60 [ 2939.578715][ T6012] build_skb+0x1e/0x190 [ 2939.582877][ T6012] __tun_build_skb+0x2c/0x260 [ 2939.587588][ T6012] tun_build_skb+0x614/0xf30 [ 2939.592209][ T6012] ? tun_xdp_act+0x890/0x890 [ 2939.596816][ T6012] ? lock_release+0x522/0x720 [ 2939.601504][ T6012] ? fs_reclaim_release+0x9c/0xf0 [ 2939.606551][ T6012] tun_get_user+0x7fc/0x36b0 [ 2939.611160][ T6012] ? aa_file_perm+0x5bb/0x1170 [ 2939.615941][ T6012] ? lock_downgrade+0x6e0/0x6e0 [ 2939.620807][ T6012] ? tun_build_skb+0xf30/0xf30 [ 2939.625583][ T6012] ? lock_acquire+0x442/0x510 [ 2939.630270][ T6012] ? lock_downgrade+0x6e0/0x6e0 [ 2939.635122][ T6012] ? aa_file_perm+0x5e5/0x1170 [ 2939.639894][ T6012] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 2939.646138][ T6012] ? _kstrtoull+0x297/0x540 [ 2939.650645][ T6012] tun_chr_write_iter+0xe1/0x1f0 [ 2939.655601][ T6012] new_sync_write+0x426/0x650 [ 2939.660289][ T6012] ? new_sync_read+0x6e0/0x6e0 [ 2939.665056][ T6012] ? lock_downgrade+0x6e0/0x6e0 [ 2939.669905][ T6012] ? apparmor_file_permission+0x26e/0x4e0 [ 2939.675634][ T6012] vfs_write+0x796/0xa30 [ 2939.679888][ T6012] ksys_write+0x12d/0x250 [ 2939.684222][ T6012] ? __ia32_sys_read+0xb0/0xb0 [ 2939.689015][ T6012] ? syscall_enter_from_user_mode+0x21/0x70 [ 2939.694917][ T6012] do_syscall_64+0x35/0xb0 [ 2939.699330][ T6012] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2939.705244][ T6012] RIP: 0033:0x4192bf [ 2939.709133][ T6012] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 fd ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 cc fd ff ff 48 [ 2939.728739][ T6012] RSP: 002b:00007f12a9c88150 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2939.737158][ T6012] RAX: ffffffffffffffda RBX: 000000000056bf80 RCX: 00000000004192bf [ 2939.745121][ T6012] RDX: 0000000000000046 RSI: 0000000020000440 RDI: 00000000000000f0 [ 2939.753087][ T6012] RBP: 00007f12a9c881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2939.761050][ T6012] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2939.769018][ T6012] R13: 00007ffcbfefc6cf R14: 00007f12a9c88300 R15: 0000000000022000 10:32:33 executing program 1 (fault-call:3 fault-nth:3): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:33 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000500) 10:32:33 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x2000}, 0x0) [ 2940.034688][ T6027] FAULT_INJECTION: forcing a failure. [ 2940.034688][ T6027] name fail_usercopy, interval 1, probability 0, space 0, times 0 10:32:33 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xc0e0000) [ 2940.062175][ T37] audit: type=1804 audit(1625221953.793:3598): pid=6006 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7438/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 [ 2940.112570][ T6027] CPU: 1 PID: 6027 Comm: syz-executor.1 Tainted: G W 5.13.0-syzkaller #0 [ 2940.122307][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2940.132357][ T6027] Call Trace: [ 2940.135620][ T6027] dump_stack_lvl+0xcd/0x134 [ 2940.140203][ T6027] should_fail.cold+0x5/0xa [ 2940.144694][ T6027] _copy_to_user+0x2c/0x150 [ 2940.149189][ T6027] simple_read_from_buffer+0xcc/0x160 [ 2940.154556][ T6027] proc_fail_nth_read+0x187/0x220 [ 2940.159580][ T6027] ? proc_fault_inject_read+0x220/0x220 [ 2940.165134][ T6027] ? security_file_permission+0x248/0x560 [ 2940.170856][ T6027] ? proc_fault_inject_read+0x220/0x220 [ 2940.176392][ T6027] vfs_read+0x1b5/0x570 [ 2940.180534][ T6027] ksys_read+0x12d/0x250 [ 2940.184771][ T6027] ? vfs_write+0xa30/0xa30 [ 2940.189189][ T6027] ? syscall_enter_from_user_mode+0x21/0x70 [ 2940.195086][ T6027] do_syscall_64+0x35/0xb0 [ 2940.199497][ T6027] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2940.205377][ T6027] RIP: 0033:0x41935c [ 2940.209272][ T6027] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 fc ff ff 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 2f fd ff ff 48 [ 2940.228868][ T6027] RSP: 002b:00007f12a9c88170 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2940.237276][ T6027] RAX: ffffffffffffffda RBX: 0000000000000046 RCX: 000000000041935c [ 2940.245261][ T6027] RDX: 000000000000000f RSI: 00007f12a9c881e0 RDI: 0000000000000004 [ 2940.253209][ T6027] RBP: 00007f12a9c881d0 R08: 0000000000000000 R09: 0000000000000000 [ 2940.261163][ T6027] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2940.269113][ T6027] R13: 00007ffcbfefc6cf R14: 00007f12a9c88300 R15: 0000000000022000 10:32:34 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000600) [ 2940.310446][ T6033] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2940.379143][ T37] audit: type=1804 audit(1625221953.793:3599): pid=5972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir064546811/syzkaller.JVUSfi/7438/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 10:32:34 executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(0xffffffffffffffff, 0x89f7, &(0x7f0000000640)={'syztnl2\x00', &(0x7f0000001680)={'syztnl0\x00', 0x0, 0x4, 0x8, 0x40, 0x10000, 0x79, @private1, @private2={0xfc, 0x2, '\x00', 0x1}, 0x700, 0x1, 0x2, 0xfffffffe}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001780)={&(0x7f0000001700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x6, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x3}}, @restrict={0x4}]}, {0x0, [0x0, 0x0, 0x20, 0x61]}}, &(0x7f0000001ec0)=""/161, 0x42, 0xa1}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000001f80)={0xe, 0x3, &(0x7f0000000000)=@raw=[@jmp={0x5, 0x1, 0x6, 0x5, 0x2, 0xfffffffffffffffc, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10001}], &(0x7f0000000240)='syzkaller\x00', 0x8000, 0xee, &(0x7f0000000540)=""/238, 0x41000, 0x4, '\x00', r1, 0x21, r2, 0x8, &(0x7f0000001ac0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000001d80)={0x5, 0x3, 0x9, 0xffff}, 0x10, 0xffffffffffffffff, r0}, 0x78) accept$alg(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendmmsg$alg(r3, &(0x7f0000001dc0)=[{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000002c0)="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", 0xfb}, {&(0x7f0000000480)="5b5c38878da88124b26cc6637f328cda7d493cec28301cbb77405a5e047c8fece311b58c5eac86f4b8a409b9006fa217bb0efbfb5d3138a4687b8dc3179765570982452511c5c0b62bec4cd5a8dd387e0e6116886518ba3ed4d899cde872f32f67c6e41d8d5f043b643daa4b5727b9cb09a2859e84d7190219d495d0d161d860ba033de32fbdbc3f1d0d4ab35dd2e1ae80a71566dc1b3bc5acec5e4166203572b78e772c0b53ec2e6a85c510669451d72984c9d4659441", 0xb7}], 0x2, &(0x7f0000001940)=ANY=[@ANYBLOB="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"], 0xd0, 0x10004000}, {0x0, 0x0, &(0x7f0000001880)=[{0x0}, {0x0}, {&(0x7f0000000740)="5851542dc8443ae00baa1c1f9e3a8f9de507b05f939fae4091587a68589d3e8bc074145e9c1622f2882ea9f2392896676bf3c63f5717e08c85e92c8a93cd868868fdf807bc4eea688c8d4a8c7a32d5a9e87e0bc26c26df147c8dcd1c3a0ab4d3428d56a8ed984cb743a3906f125a", 0x6e}, {&(0x7f00000007c0)="e0e2d536dc4c6d7f78ef5cf2cb5706fdaab647069160ba1485e5598e08788eb2d9e23ed0f38a706a47c8b2ce99b80c472cba4134ba76f1ba1f0b167126da475d9b86b5805f8ea2081d09d05c6f4d284667bb23d07f0d90422c39fb9aab55497903cd9062eae954a6ce9267c8fdaabbcb5a3de10d6c3367a58301587bf81ee2954f357e0b67db40dd645bea8ba1570a11c37da837de8452794e141c9ba6203d100132b9861d9886e3765896c86b828a6bb2245363c3b748ac918c5d098c4177dc999e8f5a6506169456e8fb67f197f282060d9e3d8266004df35de22ff05f17266ad9f06bf47c5c069dcb6e93b3ff221b733811a2c444445e7e1f873e376a24ac3cecc37e88f8c1952c393367f5ee045bcc6465e5f0ff5d3850097ffe4b7798bfe759bb7e114a0d56205802c75ad5bad5c858aadc7d4fe2cbcff35b3a96885a3484938c7d8669c8aa01ae9c6ca3397a3b8185fac0d7ca4398bde4d24f0ade117874ce0f890902056e0f3e386bb0257a932b80145d843af406b9785dea16e9e0833b96d8616fe1b4a97f68f9d1ee4c43d850f4fd653baf5b588cbeca2e3b632461f7b77f7aec1fd282a312ff5946e4ec32d65d7fe544f11e5ec05f4f4d5c62faa2f4f78250c5f84c720574d1f4361e9037222b6d13102e65ac4ddfb148d8063786420aa305ffc54c87656a53ddf85eb8697a97a235a6d5880622bd6aa92250e429cbd2ccb15004d69cd9e677257dc32b98c19b88daa17a80ef3e1e735bfe5d5af7210cbc7cc67d854765da9c4c84d3df95b7ee15096879d79ba0acd3349d04bd38e08ac4d0bc91cc6f99ec2d65ef6acae88b2c8124c93dac6b3b71c1f7963be05a1e56bbd60d444abc8819d69ea611dbbc2fbcd5a0eac3178b5469cc40e33fd85476695008e7f5a53bce6c46f6a323310c3d7dcb92d8609bd3b495da20ac36aadf5e05755df3deb779625d1a397c63a98c1c1a87ff887d62ffbc9eadaaaf905ef00067bf6acf9998edf027274df8182d55dfd604ef842d9dd0735df0ca1318b4e06ca137d5ef510bca08376a53a0e217fb04eb418189523e9b9b8206fafd356eb99c331ebfce2cb8fe5eb985d62badbc974e1e35906899b1672836ef0366f5a0c43750f6ede0b80ed7d83a8664f3f0e06004c0493fe3c7ca78a447098cac9cf94a6ea85a0a86c47f74660f3f8633bf1f3071f22d891500f04a8e202a65d0131707d44eab091d8bd3d8a56ed8b6e69b97adbf833cacd66a7d9ac5071822153fd0c216ea3ae6ebf81937e3563127159e14a0ad2046ce58c9c0752e29a6dd7ffe57b6a0c9fa51fba00b9d8151027e5926712b6558c64c283776755d35ad25178edc1e5b2ba490018eeb713df4095dd029248a7015c444a5c49f51654d123e37d89b68ecb73774d038d61c396d2ede1657f004d56a0673854baa9888d365a6b6c5440eb283652da15bd5e1ad9bdb4cdeea6845171c1962b1ed8a785eae07e238264fb08ed16ffb88b50cb6dcfa2b2622f62cc2f0a563061b46645bb689835e6a2b77226aa8c54904304e30e2f72502eb650674e210de00df0ecaa231d0b962d618e9ea023da37e8eeb9cca310645a728fbacd8a25d284d849e7a12f718cad7134092b8b97b00022a5bb1e27562549df6f5d488b12cf4a260c293bae4b68bce2bd3d6f42b72f10260253959615c8f95484ae6e3e221eec38fa80b460e424899ba3a809082212fd39173f3fe8e34d35436f34a0bda30cc8f54181940db0a35ed9da97e9af4c01dac394bff6dbdac44b56168e4d8e5b74a0fd46c0c8bb2138eda14c0364f0a4ac8fa513dc40cf6a20ce20a5f5161293982eeaa035a917f5b468add3ddb69acd687e9fb49da7aa085fcfffa657c2e8693c1f32926858014ccc43e3ed7d79964277a535827106d9321dc234182267b0dac294f9b43cce9b3e9f22338591ea2a801d0ad2d970d295bb7a6e51092b0380938cd0c173f53c5002009ab9cc8c0e329994a09059275524c7d7cbec7f3a1977903bae3c9f4d3562a7fef0039f04042310b367a67df37faca233cbf8d4a0348e758fb0602506fc77a8cc160a96051bb318e2b0b4e6281b0b5e6f92f3451e73f13bece053e0e0db906a657e99306b561f51417b8876d4ffd960c324b8bb14a2bbb3a8e7675fac02e97648ac4b3b91e85a2e00945afdf098edcb591e70086ec9ba8d097f132c8b22241a3c72470e67dad8dcdca847c9675988689b917b401c74b7e711b2cad9b9a40c8b2c433d795ce69e6bd07912cff43beee42aadb952fdbac046b9aff9e02bf9940f9c892e88691d8ff73d9cbaa702479858e35d10da09e35bec163819bb80f6bd76399df0c5f433e09783456c124f62fbf2c462ca2c88bb1888d9f66506aee2cdccfdce6e93f160c403f4cbe141725b64e4f81da66406422530f0c1589328269cb838613d7763506858ad789f29f1aa0cdc033e95c5538f4185adcafaac97578c880bd0d70c709a1bb13c0f860eff1831b5a444dde678e668de9b7787b1a2834b321da5e1e62a5759dac3cee9baf54228a27fad20e9a9c01a690a398eebb2617d1254e4b2181166ebcd7a4286426c7405615f7fe17bbf158dd595d1e9c96d750a3bb7656c0329cbb0c9c1d5577ad0858ec0d67269bbc6db42130cddcfe388af6d17c1dbf9bcc7ee6f7cc65ec3c620eb63b4cdbd2f23ae7ba12826184ce0501a4d4cb18130ee8094b0c46aa5fcb7533b0f1d3629444888ec9d1cb6b5d7c46a40afc846a85037a62f0d903e0f88d61d7824db8f31e690fba23b8698ee801e001d89f4072b93484e30c2324bd3aad975bde20726897a687af3e3f5397efc945641bc1d76cd0b21c39628d6364e142201cc1f6453e8500115f83a575f78aed34461b020a5b7d3d1faac072c3641f58b215f258f0e067a822aa8dce98b23f3f0b76ceae4c87a3326055ce8fd19cf2fb6f6cdbfeca54839d09c1292c8adce23772dfcde7adfe8b04cd1ce76df511e48cec936e5cd50702070a5d57f69a12934f38dca0bd76d11bdfb94110942a767dbb07c666ab63631e45876827b78fbe98b4ef84505903714cb96fe77488dc06de1b439d882e8de2cc14d53488bc287258fa66b5fb62b607392912f17587d95c975cc004924da75f00b4df27665b74037efa4dfa177b154bdba4fae7ba9792343858265a8667d511805ad2baa1ce87a658f2bc033341b95174f7e9c6b8b673a95813bf75244708040e993ecec1ef2dc9b54c314cf991d32c27c4171e9fc2f2340ba112eb946a84e5c1bea241fed07ed8ee51da1be076de04b8dede293017a622a5de5aac448ee236e3f96b546d296c8047bc70e8355bbcd7c44aa6ab7c3ced833dd228f5fa282bfbddf29333a9d0246e8cffb520479036342564ad80fb043289ae42a45a67c7b749dfb57cbae8a138c36438e21f978cf9af859f5cf624fe5bb722be7b2fdb6551028807aac8c5cee5fba374f3944144a4e4a3ffb0914024d97dea0603bea209cadca2f697c713a554b55bd0e7b6d60e6a66facd33c51e33c1603fe10904366456e83d158bb4f93cf917033d5acb2f527fe81f68641ec7e779e771ce256df407a34d95fd85b3988422d0269eb7ca72a9b28e0788fb2fa7c5cf25571624b39ab285f195367f3ad60950da35eca2eb8bd5dd3e1946a1af65228db88585acb83b52df75ab408d1c6883af95ebea43756e1cfab2e80032cde2d18e4ec367d932de7a9a42d8d6aa2a50f1347770711844f80583a938fc9d53a56c3543c63f14a87837709edc480f3a4f94b772c8bab97209b34f5b7c3f0b4a4aba3d2bbed3a5be1e62e07c4c8f618523afdb3eee949d49178964dc0655249235badfca878f0761f0174ba7ebae5d0887db376dcd22e2a47b19dae6bc5b38a75b3d1bd27163964e613a7288ac82355a7caef159152e65595d3ad6a3a1adfc003dd642d73347dbe2f9bd354cfdf59decdaef5ad1e2d88421cfab0edd77a8effb3b71e1ba2de6a34a171908b342e6af628a1bc84d20a5113b2eb0fd61958f1e39d2693e89325c46295260e65d98ec01437dedc8e5ab4288dff9f5a4546d950746d3dc2c07a8ab6068bd7720094c27cff4bd109a439af4b3d2c4b1a6c106eff44aec43253f19825dadae7ceb4568db3e9b2424452395a05af51e573c297dbb713f52f6b65c502366fd01ebe93254e7947974b63b85e72fbbda1ada39a5c7f33addc210321810178a9871438442cf9a89cd6259286cc93cb04ef1264b710b982f580cba64e5af727d496b3362ba9b3816204894007f0b53822eda5be9f72808785a58d8651418905e41bfaf3c5eaa4c75c1ce22d1e54c26db1c279ea1d84bae87dd11b46d45d7e697262b9a87b0d30f6f02a090273c8b159c7a598180038076abce954c7c082f29a947a085983b7621441775cb8041c78d28757bd24906c6fd0ac82bf6d43ab4d1af7de69d433951f348a0caf6ad52a66075d21170052792475776b98c36f15abea74d8449a23bf7862acb533d1d5b2cbb6ee8828cbb048b098aa3bdb1ddcba941599648fecde76a0bd7dac2018ba2479499d51afb9ed23387b5774a0204feecc0619a54b41c127b721d8bcff688a38a295b829ef4edbd3e6cee2f3a989defabdee5288662c527b91bd37fedc32c2d9f68e486fcba8edef9a78360da86bfbf53b011a090bbd83686898e9b0a331654a9b5d976ca248c43b4cedeaa7caded59755387cb3372458c87a8b60fb848213b67b98a123f0580430c0cb7cb3fbc62989f2163feb4cb0a2d85b5d0287c87a691379583068176283ae9732182eeb8a3b489a2702233b01e47fc63e9e5b885c7b61238f37f28f57abbe241ee8412acb1da3949aa8cec1a23470e42a9e19281da56966bfad6fe81aa38cb15bffd3592c750b873e5c14969e953f18d4c07908697880e3121538cec523a7c7251abb6ef08344da8fd574c3a05eafa027b7387e4459ff29f92264cfa75230270bc0acef436a125e7d609ff893a55987c08125380bb328f06d40380c28b42e22b5a2575a4207d510666e572e5ede3c68e20f717160ba7ee0f8a2c7bca60a029c16651ac3c4c276b334e4bba4f665cde3d9c4104a51ab69625a278f27ee35125b601c3ca1d2ed0ade503f646a2bf1c7b222cff5f403c6deb22503e5a9ec33235fe0f2900e29bbe2295d642b6bed5d3865f35efa5c09eefda64bf97c0d4896af58341fa9926cb9f9ca95f1e19b0a54eca52438e1439e83cf0d5c4030e6d1da3bdba103f2e0e8909803fb39b5b96bd2159102d35c8b6d48edde0e96093936faf50fb5577fd65c04b5abeaf08f0cf26a42dc5121ca26342af94c37b0fc7516297325178", 0xebe}, {&(0x7f00000017c0)="0f104127bbe7fbb223e5ef8d4f3fba0798fa76f5d955bbdf4cce521b2a7fd605be27d0b6767afda421d1dfc05794d524cc697fceeb67fa89c8c71eab93a7749bd4a078dde59eb84747e4f69a1d92c5ee9fa8293eaa5ad3fe0b22154756a93da278c347c6f0cd9edfc73ea60f57b748b039e5db2271ed5786c6156f5d17718b10185c1d0241e3b66fd487817dc487e3bdaaae922f", 0x94}], 0x5, &(0x7f0000001900)=[@assoc={0x18, 0x117, 0x4, 0x230be0d2}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0x1}, {0x0, 0x0, 0x0, 0x0, &(0x7f0000001b00)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0xffffffff}], 0x30}, {0x0, 0x0, &(0x7f0000001c80)=[{&(0x7f0000001b40)="aa307c824e783597fbbee039828ff27c5515d779adf5d42f39ef82263512786fe9e8e50d78e236b8ff8399f3f3055053fdd1fba3cc8b5e91d3cf68ecdbb49b889d42995cb821ed32e12c61581e9c988339", 0x51}, {&(0x7f0000001bc0)="9f855b5ccbd808a7f248f3128f580a36a7d0ca6192eb701171a9010c1145cd37fa80aa4383b876efa842e57f849408f2f3e300acff", 0x35}, {&(0x7f0000001c00)="928fd5a4bcc6e7aa89f276e06e1f97c7d7dd41ea50e209b2da9d2f70392228b53e6060916783b4987482dd523c3eb438e526016ba194388cf56c1587114a47ab56fa1dd4a2538b9ea797", 0x4a}], 0x3, &(0x7f0000001cc0)=[@op={0x18}, @op={0x18}, @iv={0x68, 0x117, 0x2, 0x4f, "9a62b2b6a9e4ab3ae736eae82aaa84d9bd35491fcb0429077bdfd438386320d5be11a7d883821456dd21d77145ecdf65e9c1a8131afd3cc372a9eb299c58f6717db8ece39e15554da5c43f8b509def"}], 0x98, 0x10}], 0x4, 0x20000090) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r5, r6, 0x0, 0xf03b0000) sendfile(r5, r4, 0x0, 0x8000000000004) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r6, 0x28, &(0x7f0000000180)}, 0x10) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r7, 0x6, 0x21, &(0x7f0000000680)="2753ef6bf3d7c51a93959cd296d5b98c", 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN_UNNAMED(0x11, &(0x7f0000000100)={0x0, r6}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) [ 2940.585406][ T6057] bond510: (slave bridge3008): Enslaving as a backup interface with an up link [ 2940.603426][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2940.614932][ T37] audit: type=1804 audit(1625221954.283:3600): pid=6071 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5908/cgroup.controllers" dev="sda1" ino=14387 res=1 errno=0 10:32:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0xb, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2940.777708][ T6033] bond510: (slave bridge3009): Enslaving as a backup interface with a down link [ 2940.855424][ T6074] bond510 (unregistering): (slave bridge3008): Releasing backup interface 10:32:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0xd, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2941.051520][ T6074] bond510 (unregistering): (slave bridge3009): Releasing backup interface 10:32:34 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x86, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2941.262129][ T6074] bond510 (unregistering): Released all slaves 10:32:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0xfdef, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2941.327632][ T6033] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:35 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xe000000) 10:32:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000700) 10:32:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x20000486, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2941.655430][ T37] audit: type=1804 audit(1625221955.383:3601): pid=6163 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5909/cgroup.controllers" dev="sda1" ino=14315 res=1 errno=0 10:32:35 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x3e7b}, 0x0) 10:32:35 executing program 3: r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001600)=[{&(0x7f0000000000)=@in={0x2, 0x0, @remote}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000040)="d9", 0x1}], 0x1, &(0x7f0000001400)=ANY=[@ANYBLOB="180000000000000084000000070000007f0000010000000018"], 0x30}], 0x1, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) splice(r1, 0x0, r2, 0x0, 0x19404, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x58, &(0x7f0000000140)=[@in6={0xa, 0x4e22, 0x4, @private2, 0x10001}, @in={0x2, 0x4e20, @loopback}, @in6={0xa, 0x4e23, 0x2, @private1, 0x800}, @in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000200)=0x10) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000240)={r3, 0x1f}, 0x8) r4 = socket(0x2, 0x80805, 0x0) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x71, &(0x7f0000000100)={r6}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000080)={0x1, 0x800b, 0x3c, 0xd71, r6}, 0x10) 10:32:35 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0xf000000) [ 2941.697699][ T6154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0xfffffdef, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2941.827515][ T6175] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0xfffffffffffffdef, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:35 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000900) [ 2942.054197][ T6181] bond510: (slave bridge3010): Enslaving as a backup interface with an up link 10:32:35 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x500}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2942.205233][ T6216] bond510: (slave bridge3011): Enslaving as a backup interface with a down link [ 2942.234103][ T6175] bond510 (unregistering): (slave bridge3010): Releasing backup interface [ 2942.266295][ T37] audit: type=1804 audit(1625221956.003:3602): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5910/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 10:32:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x806}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2942.323445][ T6231] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x4305}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2942.389236][ T6175] bond510 (unregistering): (slave bridge3011): Releasing backup interface 10:32:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8035}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2942.548574][ T6175] bond510 (unregistering): Released all slaves 10:32:36 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x10000000) [ 2942.663191][ T6181] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:36 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8102}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2942.836508][ T6284] bond510: (slave bridge3012): Enslaving as a backup interface with an up link [ 2942.943358][ T6318] bond510: (slave bridge3013): Enslaving as a backup interface with a down link [ 2942.981164][ T6175] bond510 (unregistering): (slave bridge3012): Releasing backup interface [ 2943.000613][ T37] audit: type=1804 audit(1625221956.733:3603): pid=6228 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5910/cgroup.controllers" dev="sda1" ino=15013 res=1 errno=0 [ 2943.156440][ T6175] bond510 (unregistering): (slave bridge3013): Releasing backup interface [ 2943.230760][ T6175] bond510 (unregistering): Released all slaves 10:32:37 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x3f00}, 0x0) 10:32:37 executing program 3: sendmsg$inet(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="f533570b3e00ef", 0x7}, {&(0x7f0000000040)="b53781badfaf60876569a43aead490f72a263e7b98a4747c9cc201394347715079ca2008c954f1fd0ae6ccc810ffd078501519d9d225ba955ffca8903cc4619752a6ba", 0x43}], 0x2, &(0x7f0000000100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast2, @rand_addr=0x64010102}}}], 0x38}, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_NAME_TABLE_GET(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[], 0x14}, 0x300}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000005c0)=0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000700)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000bc0)={0x370, 0x7, 0x5, 0x101, 0x70bd2b, 0x25dfdbfd, {0x2, 0x0, 0xa}, [@nested={0x86, 0x7a, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @u32=0x4}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x8, 0x3b, 0x0, 0x0, @uid=0xffffffffffffffff}, @generic="a346ffa9487c55cd12ee1bda4ec2ac070b71003eb91779a11925ff4d7b0eae647f70860761563a978f4c9c1567790da0e211fe2e3b9d4444afcc5de9d302582160ffdcfddaed0e75f9e93ffbe51885efa9e0e440c03f3705be45baea970ad9b2d3a6", @typed={0x8, 0x4a, 0x0, 0x0, @uid=0xffffffffffffffff}]}, @nested={0xdc, 0x1e, 0x0, 0x1, [@generic="3e5f91579a6b0f2f297e3a4055c8927dcc72d3e2c898ad85b7b53059ce4a71fb8a44a9b683478670f81ed4e5c0f9cc2ef52f27cddcc297073b03735258203fa6d8e2a72fbd91ee042b1ccd3b47ee38697c8b68700d9a081e6a023fd2725433dadf01bde334fff79f7fde3b6badc1b32aece9a9d515ddfdf200c15e75ac4dd5703b7534f586fe8583bc6c83ab9622504e75a316d3447ba27414ea178d1de18a559350efab0acdca5151acb19a8ac7bde97e5d9af9f8ac936160783502af6a63d7849b05c265e9a6ad40f8509d4120f9bac3738322a576dc", @generic, @generic='^']}, @nested={0x1f8, 0x7d, 0x0, 0x1, [@typed={0xc, 0x4c, 0x0, 0x0, @u64=0x8}, @generic="5514bb006ca7d4d16a0172ba62dd8e50a319edd47d86f141085e00324231f0131da1331ee78a0a976e78c1bdd080f60f01f8836110b1810ccf97cfc35b720f2023f58d6fa2f10e7bc641f0e904596eb6b832148dc366baf4d923541d19b0995b29731d5d86f028e8f29a4b0825bc96d82ac63ac4", @typed={0x4, 0x3f}, @generic="950662da2143b534625e45ae94fcf72477d9f801d672f535c98633e14f05d0567bb206c73b846a53bad11b0eafff8242f995fe5e9b4ae86e2f99b5e3e027ccf891f40715aae93fe999ef97ec423f851ff025a0ee1a498c3f1317839d00c21dcc9efb44efc660d291b0ad6628921da7101bba52253de6da3c9da622d0f7fb2a9bf94695de4165f9f33f0bcd576612e93b0aec1980375f5c8d6435afb0a3f6ebae6a94673af29dfc185ab6e0bcfe8673de27c20f56b333ab54", @generic="e2a7259b2142c3de8428018ac7e250115bb5ee23b0dd09c4e472eb0a808aef46f518c36c272f76ea1e585d9473e24216289c46ff261e9dae9fa8caa5d6702d91636e70f14850202fa1fbbcd329f0b424bfd0ff48ad7a2d0d9ede94950d55a1051e913b2cb4b566dd231ea3ae3c2401efb06cb876def184d170ca7b56dca7eeacfa0f6de2b741f0357d3cd7b69630e2c4a1cc89fce2d58fe607d7085eec376e60d36277350b1d76a9", @typed={0x8, 0x41, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0x85, 0x0, 0x0, @pid=r2}]}]}, 0x370}, 0x1, 0x0, 0x0, 0xc0}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) splice(r3, 0x0, r4, 0x0, 0x19404, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) splice(r5, 0x0, r6, 0x0, 0x19404, 0x0) r7 = gettid() r8 = getpid() sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=@RTM_GETNSID={0x64, 0x5a, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NETNSA_NSID={0x8, 0x1, 0x4}, @NETNSA_PID={0x8, 0x2, 0xffffffffffffffff}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8, 0x2, r2}, @NETNSA_FD={0x8, 0x3, r3}, @NETNSA_FD={0x8, 0x3, r5}, @NETNSA_FD={0x8}, @NETNSA_NSID={0x8}, @NETNSA_PID={0x8, 0x2, r7}, @NETNSA_PID={0x8, 0x2, r8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000000}, 0x8000) sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x40, 0x0, 0x4, 0x70bd2a, 0x24dfdbfe, {}, [@TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xff}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_LINK={0x18, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x44000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f00000001c0)={0xffffffffffffffff, 0x10001, 0x1211, 0x28}) sendmsg$nl_route(r9, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=@ipv6_deladdr={0x48, 0x15, 0x402, 0x70bd2c, 0x25dfdbfe, {0xa, 0x80, 0x0, 0xfe}, [@IFA_ADDRESS={0x14, 0x1, @private1}, @IFA_ADDRESS={0x14, 0x1, @private2={0xfc, 0x2, '\x00', 0x1}}, @IFA_FLAGS={0x8, 0x8, 0x2}]}, 0x48}, 0x1, 0x0, 0x0, 0x4004}, 0x4000840) 10:32:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8103}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000a00) 10:32:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x12000000) 10:32:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8104}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2943.476358][ T6383] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2943.501406][ T37] audit: type=1804 audit(1625221957.233:3604): pid=6385 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5911/cgroup.controllers" dev="sda1" ino=15028 res=1 errno=0 10:32:37 executing program 3: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r0, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$nl_route(r0, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000000c0)=@ipv4_newnexthop={0x18, 0x68, 0x100, 0x70bd28, 0x25dfdbfc, {0x2, 0x0, 0x2, 0x0, 0x8}}, 0x18}, 0x1, 0x0, 0x0, 0x50800}, 0x4000) r1 = socket(0x1000000010, 0x80002, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r4, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xe}}, [@filter_kind_options=@f_bpf={{0x8}, {0x10, 0x2, [@TCA_BPF_POLICE={0x4}, @TCA_BPF_FD={0x8}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 10:32:37 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x12030000) [ 2943.555328][ T6372] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8105}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b00) [ 2943.696812][ T6387] bond510: (slave bridge3014): Enslaving as a backup interface with an up link [ 2943.730563][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 10:32:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8106}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2943.850557][ T6383] bond510: (slave bridge3015): Enslaving as a backup interface with a down link 10:32:37 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8107}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2943.894002][ T6428] bond510 (unregistering): (slave bridge3014): Releasing backup interface [ 2943.905445][ T37] audit: type=1804 audit(1625221957.633:3605): pid=6447 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5912/cgroup.controllers" dev="sda1" ino=14316 res=1 errno=0 [ 2943.990627][ T6447] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2944.070066][ T6428] bond510 (unregistering): (slave bridge3015): Releasing backup interface [ 2944.208731][ T6428] bond510 (unregistering): Released all slaves [ 2944.275513][ T6423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2944.323528][ T6387] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:38 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x0) 10:32:38 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x14000000) [ 2944.466909][ T6428] bond510: (slave bridge3016): Enslaving as a backup interface with an up link 10:32:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8108}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:38 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x18, 0x16, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x3}, 0x53}, 0x78) 10:32:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000b35) 10:32:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000340)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2c0000c0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001200)=ANY=[@ANYRES16], 0x38}}, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x200cc494) sendmsg$ETHTOOL_MSG_LINKINFO_GET(r0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000001400)=ANY=[@ANYRESDEC, @ANYBLOB="3c3de9988a5d091a5afabdc59c8d37e6fa65a856b0a8685d2fb4db78246906f2d404d5f0c028fe7952c66bac3604433379d77db809c7cd5110d7b9719a924f81720c70a835877b9dcda20000", @ANYRESDEC, @ANYRES64], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$bt_rfcomm(0x1f, 0x3, 0x3) bind$bt_rfcomm(r3, &(0x7f0000000100)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x3}, 0xa) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) sendfile(r4, r2, 0x0, 0x100000001) getpeername$packet(0xffffffffffffffff, &(0x7f0000004580)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000045c0)=0x14) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r5, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x1000}], 0x1, 0x800000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) socket$bt_bnep(0x1f, 0x3, 0x4) [ 2944.623294][ T6541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8134}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:38 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x14030000) [ 2944.693587][ T37] audit: type=1804 audit(1625221958.423:3606): pid=6545 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5913/cgroup.controllers" dev="sda1" ino=14314 res=1 errno=0 10:32:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000c00) [ 2944.884857][ T6541] bond511: (slave bridge3017): Enslaving as a backup interface with an up link 10:32:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8138}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2944.999102][ T37] audit: type=1804 audit(1625221958.733:3607): pid=6597 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5914/cgroup.controllers" dev="sda1" ino=15029 res=1 errno=0 [ 2945.016788][ T6546] bond511: (slave bridge3018): Enslaving as a backup interface with a down link 10:32:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8160}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2945.086116][ T6598] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2945.119504][ T6591] bond511 (unregistering): (slave bridge3017): Releasing backup interface 10:32:38 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8847}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2945.227493][ T6591] bond511 (unregistering): (slave bridge3018): Releasing backup interface [ 2945.348113][ T6591] bond511 (unregistering): Released all slaves [ 2945.441521][ T6541] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2945.609782][ T6591] bond511: (slave bridge3019): Enslaving as a backup interface with an up link 10:32:39 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4c00}, 0x0) 10:32:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8848}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000d00) 10:32:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x18010000) [ 2945.772442][ T6699] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8864}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2945.811992][ T37] audit: type=1804 audit(1625221959.543:3608): pid=6693 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5915/cgroup.controllers" dev="sda1" ino=14065 res=1 errno=0 [ 2945.898572][ T6702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:39 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) splice(r3, 0x0, r5, 0x0, 0x19404, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x4e20, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) setsockopt$packet_int(r2, 0x107, 0x9, &(0x7f00000004c0)=0x2c28, 0x4) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r6, &(0x7f0000000040)=[{&(0x7f0000000140)="390000001100090468fe0700000000000700ff3f0800000045000e070000001419001a00", 0x24}], 0x1) write$binfmt_misc(r6, &(0x7f00000002c0)=ANY=[], 0x15) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_getlink={0x108, 0x12, 0x400, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, 0x0, 0xa005, 0x5000}, [@IFLA_PORT_SELF={0x1c, 0x19, 0x0, 0x1, [@IFLA_PORT_REQUEST={0x5, 0x6, 0x1}, @IFLA_PORT_VF={0x8, 0x1, 0x5}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x81}]}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}, @IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_HSR_SEQ_NR={0x6, 0x5, 0x794}, @IFLA_HSR_SLAVE2={0x8}, @IFLA_HSR_VERSION={0x5, 0x6, 0x40}]}}}, @IFLA_VF_PORTS={0x78, 0x18, 0x0, 0x1, [{0x74, 0x1, 0x0, 0x1, [@IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "616232f45a1bc21e01429038594bad23"}, @IFLA_PORT_VF={0x8, 0x1, 0x1}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "b88a64dd15a207bd5841c6edc6b45a52"}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "d6bdaed438583645a725e24217beb286"}, @IFLA_PORT_VF={0x8, 0x1, 0xff}, @IFLA_PORT_INSTANCE_UUID={0x14, 0x4, "00faf1986e94e617d973540f766d5366"}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x2}, @IFLA_PORT_VF={0x8, 0x1, 0x7fff}]}]}, @IFLA_OPERSTATE={0x5, 0x10, 0x2}, @IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_PROMISCUITY={0x8, 0x1e, 0x1ff}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x8}]}, 0x108}, 0x1, 0x0, 0x0, 0x100}, 0x800) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f0000003cc0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1}, 0xfffffffffffffde2, &(0x7f0000003c80)={&(0x7f0000003c00)={0x54, 0x0, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x60b}, @NBD_ATTR_CLIENT_FLAGS={0xc}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x2}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x1}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000000}, 0x24004400) close(r4) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4800000010000104fcffe1ff000000000000000001738bdc4f86e87df98190fc1a59eb66c85737ccd5014130f019a5442a968c2d42a1ec26cf19ff0f09d16dc4f557b2e6a19b763687ec63daed2db414f0421836e9", @ANYRES32=r7, @ANYBLOB="0000000000000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="0108000004010000"], 0x48}}, 0x0) 10:32:39 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x18020000) 10:32:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8906}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2946.101584][ T6704] bond512: (slave bridge3020): Enslaving as a backup interface with an up link 10:32:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000e00) 10:32:39 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2946.194406][ T6710] bond512: (slave bridge3021): Enslaving as a backup interface with a down link [ 2946.227286][ T6742] bond512 (unregistering): (slave bridge3020): Releasing backup interface 10:32:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x2}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2946.358468][ T37] audit: type=1804 audit(1625221960.093:3609): pid=6760 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5916/cgroup.controllers" dev="sda1" ino=14003 res=1 errno=0 [ 2946.385275][ T6742] bond512 (unregistering): (slave bridge3021): Releasing backup interface 10:32:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2946.449506][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 2946.543021][ T6742] bond512 (unregistering): Released all slaves [ 2946.650625][ T6751] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 2946.703407][ T6699] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 2946.818215][ T6710] bond512: (slave bridge3022): Enslaving as a backup interface with an up link [ 2946.930431][ T6807] bond512: (slave bridge3023): Enslaving as a backup interface with a down link [ 2946.971336][ T6699] bond512 (unregistering): (slave bridge3022): Releasing backup interface [ 2947.065524][ T6699] bond512 (unregistering): (slave bridge3023): Releasing backup interface [ 2947.125595][ T6699] bond512 (unregistering): Released all slaves 10:32:40 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000858600"/20, @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) r6 = socket(0x1000000010, 0x80002, 0x0) sendmmsg$alg(r6, &(0x7f0000000200), 0x10efe10675dec16, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x425, 0x0, 0x0, {0x10, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x5865}, 0x0) 10:32:40 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x4}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:40 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000001300)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r2, 0x8912, 0x400308) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000000b06010306000000004000000000000005000100070000000900020073797a3000000000100007800c000180"], 0x38}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r3, r1, 0x0, 0x100000f00) 10:32:40 executing program 3: r0 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x2710}, 0x10, 0x80800) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)={0x3, 'sit0\x00', {0x1}, 0x101}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="8c9adfb5f8018f4bcd59e5059c188ef383795f9096bdc5735c487816409642518e3440b2c70638bfb168fa3a73ba174c941eaf6c3a9a15818a1440d832234aafc00ae75dbebc744038aa5f5e64d1569da27f7aa1d517e1ee7333c06846f00ca1b6390434f9ef0805bbad0eb7036e888da3", @ANYRES16=r3, @ANYBLOB="170100000000000000000600000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}}, 0x0) 10:32:40 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x18030000) 10:32:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x5}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2947.281629][ T6887] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 10:32:41 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000080)={{0x6, @rose}, [@default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) listen(r0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) unshare(0x40000000) listen(r1, 0x36a82fb8) r2 = accept$ax25(r1, &(0x7f0000000000)={{0x3, @default}, [@remote, @remote, @netrom, @rose, @netrom, @default, @rose, @rose]}, &(0x7f0000000100)=0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r4, 0xc15, 0x0, 0x0, {{}, {}, {0x8, 0x11, 0x7f}}}, 0x24}}, 0x0) close(r3) bind$ax25(r2, &(0x7f0000000140)={{0x3, @default}, [@default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @bcast, @null, @default]}, 0x48) accept4$bt_l2cap(r1, &(0x7f0000000300)={0x1f, 0x0, @none}, &(0x7f0000000340)=0xe, 0x0) socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$can_j1939(0x1d, 0x2, 0x7) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) bind$can_j1939(0xffffffffffffffff, 0x0, 0x0) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) write(r0, 0x0, 0x0) [ 2947.396615][ T37] audit: type=1804 audit(1625221961.133:3610): pid=6888 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir745294820/syzkaller.2SFTxP/5917/cgroup.controllers" dev="sda1" ino=14243 res=1 errno=0 [ 2947.463246][ T6895] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. 10:32:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x6}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) 10:32:41 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x38, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}]}, 0x38}}, 0x0) sendmmsg(r1, &(0x7f00000002c0), 0x40000000000009f, 0x1a020000) [ 2947.570847][ T6892] bond512: (slave bridge3024): Enslaving as a backup interface with an up link 10:32:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void, {0x8100, 0x7}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2947.697284][ T6923] bond512: (slave bridge3025): Enslaving as a backup interface with a down link [ 2947.730392][ T6887] bond512 (unregistering): (slave bridge3024): Releasing backup interface 10:32:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2947.875661][ T6887] bond512 (unregistering): (slave bridge3025): Releasing backup interface 10:32:41 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000440)={@local, @remote, @val={@void}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00', 0xc, 0x11, 0x0, @dev, @mcast2, {[], {0x0, 0xe22, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) [ 2947.968142][ T6939] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 2947.980001][ T6939] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 2947.988408][ T6939] CPU: 0 PID: 6939 Comm: syz-executor.3 Tainted: G W 5.13.0-syzkaller #0 [ 2947.998122][ T6939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2948.008184][ T6939] RIP: 0010:do_raw_spin_lock+0x69/0x2b0 [ 2948.013737][ T6939] Code: 5b 81 48 8d 14 03 c7 02 f1 f1 f1 f1 c7 42 04 04 f3 f3 f3 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4c 24 60 31 c9 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 db [ 2948.033348][ T6939] RSP: 0018:ffffc9001967fba8 EFLAGS: 00010047 [ 2948.039440][ T6939] RAX: dffffc0000000000 RBX: 1ffff920032cff76 RCX: 0000000000000000 [ 2948.047422][ T6939] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 2948.055404][ T6939] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8deb0797 [ 2948.063382][ T6939] R10: fffffbfff1bd60f2 R11: 0000000000000001 R12: 0000000000000246 [ 2948.071376][ T6939] R13: 0000000000000000 R14: ffff88809aedb880 R15: ffffc9001967fd00 [ 2948.079355][ T6939] FS: 00007fc29791d700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2948.088318][ T6939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2948.094907][ T6939] CR2: 0000000000541198 CR3: 000000009d9db000 CR4: 00000000001506f0 [ 2948.102900][ T6939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2948.111008][ T6939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2948.119003][ T6939] Call Trace: [ 2948.122285][ T6939] ? rwlock_bug.part.0+0x90/0x90 [ 2948.127237][ T6939] ? lock_downgrade+0x6e0/0x6e0 [ 2948.132099][ T6939] ? do_raw_spin_lock+0x120/0x2b0 [ 2948.137139][ T6939] _raw_spin_lock_irqsave+0x41/0x50 [ 2948.142350][ T6939] ? prepare_to_wait+0x43/0x370 [ 2948.147209][ T6939] prepare_to_wait+0x43/0x370 [ 2948.151898][ T6939] ? __local_bh_enable_ip+0xa0/0x120 [ 2948.157204][ T6939] ? trace_hardirqs_on+0x5b/0x1c0 [ 2948.162247][ T6939] nr_accept+0x201/0x640 [ 2948.166562][ T6939] ? nr_sendmsg+0xa10/0xa10 [ 2948.171064][ T6939] ? aa_af_perm+0x230/0x230 [ 2948.175579][ T6939] ? do_raw_spin_unlock+0x171/0x230 [ 2948.180786][ T6939] ? finish_wait+0x270/0x270 [ 2948.185391][ T6939] ? alloc_fd+0x2e6/0x660 [ 2948.189727][ T6939] ? nr_sendmsg+0xa10/0xa10 [ 2948.194228][ T6939] __sys_accept4_file+0x3b2/0x5b0 [ 2948.199252][ T6939] ? __ia32_sys_listen+0x70/0x70 [ 2948.204187][ T6939] ? lock_acquire+0x442/0x510 [ 2948.208891][ T6939] ? lock_release+0x522/0x720 [ 2948.213572][ T6939] ? __fget_files+0x288/0x3d0 [ 2948.218256][ T6939] __sys_accept4+0xb0/0x100 [ 2948.222761][ T6939] __x64_sys_accept+0x71/0xb0 [ 2948.227436][ T6939] ? syscall_enter_from_user_mode+0x21/0x70 [ 2948.233338][ T6939] do_syscall_64+0x35/0xb0 [ 2948.237759][ T6939] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 2948.243663][ T6939] RIP: 0033:0x4665d9 [ 2948.247557][ T6939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 bc ff ff ff f7 d8 64 89 01 48 [ 2948.267171][ T6939] RSP: 002b:00007fc29791d188 EFLAGS: 00000246 ORIG_RAX: 000000000000002b [ 2948.275596][ T6939] RAX: ffffffffffffffda RBX: 000000000056c038 RCX: 00000000004665d9 [ 2948.283565][ T6939] RDX: 0000000020000100 RSI: 0000000020000000 RDI: 0000000000000003 [ 2948.291536][ T6939] RBP: 00000000004bfcb9 R08: 0000000000000000 R09: 0000000000000000 [ 2948.299508][ T6939] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000056c038 [ 2948.307475][ T6939] R13: 00007fff36cce01f R14: 00007fc29791d300 R15: 0000000000022000 [ 2948.315457][ T6939] Modules linked in: [ 2948.319352][ T6939] ---[ end trace 468fbf7200fe853c ]--- [ 2948.324803][ T6939] RIP: 0010:do_raw_spin_lock+0x69/0x2b0 [ 2948.330355][ T6939] Code: 5b 81 48 8d 14 03 c7 02 f1 f1 f1 f1 c7 42 04 04 f3 f3 f3 48 89 fa 65 48 8b 0c 25 28 00 00 00 48 89 4c 24 60 31 c9 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 db [ 2948.349961][ T6939] RSP: 0018:ffffc9001967fba8 EFLAGS: 00010047 [ 2948.356028][ T6939] RAX: dffffc0000000000 RBX: 1ffff920032cff76 RCX: 0000000000000000 [ 2948.363990][ T6939] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000004 [ 2948.371961][ T6939] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8deb0797 [ 2948.379937][ T6939] R10: fffffbfff1bd60f2 R11: 0000000000000001 R12: 0000000000000246 [ 2948.387906][ T6939] R13: 0000000000000000 R14: ffff88809aedb880 R15: ffffc9001967fd00 [ 2948.395877][ T6939] FS: 00007fc29791d700(0000) GS:ffff8880b9c00000(0000) knlGS:0000000000000000 [ 2948.404893][ T6939] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2948.411498][ T6939] CR2: 0000000000541198 CR3: 000000009d9db000 CR4: 00000000001506f0 [ 2948.419476][ T6939] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 2948.427440][ T6939] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 2948.435503][ T6939] Kernel panic - not syncing: Fatal exception [ 2948.442823][ T6939] Kernel Offset: disabled [ 2948.447139][ T6939] Rebooting in 86400 seconds..