= openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) syz_io_uring_submit(r1, r2, &(0x7f0000000100)=@IORING_OP_SEND={0x1a, 0x4, 0x0, r8, 0x0, &(0x7f0000000300)="cee3ddb792180a2a0d07879472e9f66dee9e80060f9628662df29323b49a6bd5aac0615615d6207f5bcf768b99e5873f12ce584c0f4ed8fb08d3bd3533f43cd4769bf8164c80f9cd979b059f00352bbebeb84b", 0x53, 0x845, 0x0, {0x0, r6}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:08 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1413.761852][T17041] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:08 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x13, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1413.856850][T17051] bond0: (slave bridge172): Enslaving as an active interface with an up link 06:27:08 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1413.901743][T17041] bond0: (slave bridge172): Releasing backup interface 06:27:08 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x68d4, &(0x7f0000000480), &(0x7f0000ff7000/0x8000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:08 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:08 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:08 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) sendmsg$AUDIT_LIST_RULES(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x3f5, 0x20, 0x70bd25, 0x25dfdbfe, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x880}, 0x20008010) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socket$tipc(0x1e, 0x5, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1414.298601][T17114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1414.381428][T17051] bond0: (slave bridge172): Enslaving as an active interface with an up link [ 1414.405656][T17114] bond0: (slave bridge172): Releasing backup interface 06:27:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x3000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:09 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$PPPIOCGFLAGS1(r3, 0x8004745a, &(0x7f0000000080)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x500, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:09 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000040)={r5, 0x91d, 0x1, 0x7f}, 0x10) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000240)=""/214) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1414.861336][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1414.923832][T17130] bond0: (slave bridge173): Enslaving as an active interface with an up link [ 1414.977758][T17140] bond0: (slave bridge173): Releasing backup interface 06:27:09 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:09 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:09 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1415.397765][T17130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:09 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:09 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) ioctl$ASHMEM_SET_PROT_MASK(r2, 0x40087705, &(0x7f0000000040)={0x7fffffff, 0x8000}) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:09 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:09 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f00000000c0)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x2, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1415.651675][T17189] bond0: (slave bridge174): Enslaving as an active interface with an up link [ 1415.682872][T17189] bond0: (slave bridge174): Releasing backup interface 06:27:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x3, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1415.847888][T17203] bond0: (slave bridge174): Enslaving as an active interface with an up link [ 1415.883260][T17203] bond0: (slave bridge174): Releasing backup interface 06:27:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r9], 0x4}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, &(0x7f0000000100)=ANY=[@ANYRES64, @ANYRESDEC=r10, @ANYRESOCT, @ANYRES64=r6, @ANYRES32], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x5000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x5, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:10 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_usb_connect(0x0, 0x10b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b24b4a10e60405007701000010010902240001010000000904000002ccb8280009050b02000000000009058a024a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_ep_write(r0, 0x18, 0x8f, &(0x7f0000000080)="44dd2e2988b796a912efda19a6aae996f8059f71f4347d2ec0b4955f54bdba64ba546a7d5b5fc226d0718986eab80249f5282c5131e01e8036b64311ea6be717acb06f8132cc099c6b9283d4be542b252edaa57c7d1d7310fc780c798a24e04afc71ba51c44a59a03740d02a165de534841a02901f39b2dfe3cce795b223532cbfba88f379b875891a09c650551695") exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040)='devlink\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r8], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_VLAN(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f00000002c0), 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x30, r9, 0x100, 0xa800, 0x25dfdbfc, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x81}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @broadcast}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x10000}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000005}, 0x840) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x14, r7, 0xc9647caf603edff5, 0x0, 0x0, {0x17}}, 0x14}}, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(r5, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x6c, r7, 0x300, 0x70bd2c, 0x25dfdbfd, {}, [{@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xf000}}, {@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, {0x8}, {0x6, 0x11, 0x44}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8048040}, 0x8010) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1416.380283][T17235] bond0: (slave bridge175): Enslaving as an active interface with an up link 06:27:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1416.428058][T17235] bond0: (slave bridge175): Releasing backup interface 06:27:10 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) readlink(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)=""/254, 0xfe) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r8, 0x4) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000080)=@sack_info={r8, 0x43a3, 0xa1}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1416.654802][ T2543] usb 5-1: new high-speed USB device number 8 using dummy_hcd 06:27:11 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1416.864603][T17275] __nla_validate_parse: 3 callbacks suppressed [ 1416.887967][T17275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1416.904850][ T2543] usb 5-1: Using ep0 maxpacket: 16 06:27:11 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:11 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200), 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r3) ioctl$SIOCAX25DELUID(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r3}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) rseq(&(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x5, 0xffffffff, 0x7f}}, 0x20, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1416.947964][T17275] bond0: (slave bridge175): Enslaving as an active interface with an up link [ 1416.968403][T17275] bond0: (slave bridge175): Releasing backup interface [ 1417.035290][ T2543] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0xB has invalid wMaxPacketSize 0 [ 1417.059681][ T2543] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 0 06:27:11 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1417.105941][ T2543] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x8A has invalid maxpacket 74 [ 1417.265158][ T2543] usb 5-1: New USB device found, idVendor=04e6, idProduct=0005, bcdDevice= 1.77 [ 1417.293102][ T2543] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=16 06:27:11 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1417.356144][ T2543] usb 5-1: SerialNumber: syz [ 1417.385473][T17244] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1417.405511][ T2543] usb-storage 5-1:1.0: USB Mass Storage device detected [ 1417.430240][ T2543] usb-storage 5-1:1.0: Quirks match for vid 04e6 pid 0005: 1 [ 1417.439231][T17303] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1417.460117][ T2543] scsi host1: usb-storage 5-1:1.0 [ 1417.498297][T17303] bond0: (slave bridge176): Enslaving as an active interface with an up link [ 1417.533505][T17303] bond0: (slave bridge176): Releasing backup interface [ 1417.826890][T17316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1417.853833][T17316] bond0: (slave bridge176): Enslaving as an active interface with an up link [ 1417.884065][T17316] bond0: (slave bridge176): Releasing backup interface 06:27:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400202) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x8, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:12 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x10000, 0x0) r1 = syz_io_uring_setup(0x169a, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ee6000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000680)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) io_uring_register$IORING_REGISTER_BUFFERS(r0, 0x0, &(0x7f0000000440)=[{&(0x7f00000001c0)=""/68, 0x44}, {&(0x7f0000000140)=""/6, 0x6}, {&(0x7f0000000240)=""/242, 0xf2}, {&(0x7f0000000340)=""/241, 0xf1}], 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x2) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r4, 0x89f9, &(0x7f0000000500)={'ip6gre0\x00', &(0x7f0000000480)={'syztnl2\x00', r6, 0x4, 0x1, 0x20, 0x1, 0x0, @dev={0xfe, 0x80, [], 0x2c}, @mcast2, 0x720, 0x80, 0x3, 0x3}}) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000640)={'ip_vti0\x00', &(0x7f0000000540)={'tunl0\x00', r8, 0x40, 0x80, 0x3, 0x7425, {{0x2b, 0x4, 0x0, 0x10, 0xac, 0x68, 0x0, 0x7, 0x29, 0x0, @empty, @remote, {[@lsrr={0x83, 0xb, 0x4d, [@multicast2, @remote]}, @end, @timestamp_prespec={0x44, 0x34, 0xa, 0x3, 0xf, [{@dev={0xac, 0x14, 0x14, 0x3e}, 0x8}, {@private=0xa010101, 0x4}, {@multicast1, 0x4}, {@multicast2, 0x6}, {@remote, 0x2}, {@empty}]}, @noop, @timestamp_prespec={0x44, 0x2c, 0xff, 0x3, 0x0, [{@empty, 0x8000}, {@local, 0x9f5}, {@multicast1, 0x1}, {@multicast2, 0x2}, {@rand_addr=0x64010102, 0x4}]}, @timestamp={0x44, 0x28, 0xcf, 0x0, 0x0, [0xce, 0x400, 0x0, 0x7, 0x6, 0x9, 0x2, 0x80000001, 0x7]}, @end]}}}}}) personality(0x2000000) 06:27:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x9, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x509100, 0x0) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:12 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0xfffffffe, 0x0, 0x3, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) socket$pppoe(0x18, 0x1, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xa, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1418.395492][T17361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:12 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) getsockname$netlink(r2, &(0x7f0000000040), &(0x7f0000000080)=0xc) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1418.485578][T17367] bond0: (slave bridge177): Enslaving as an active interface with an up link [ 1418.526449][T17361] bond0: (slave bridge177): Releasing backup interface 06:27:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) io_uring_enter(r2, 0x450c, 0xb66, 0x3, 0x0, 0x0) 06:27:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1418.724758][T17306] usb 5-1: reset high-speed USB device number 8 using dummy_hcd 06:27:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) getpeername$netlink(r3, &(0x7f0000000040), &(0x7f0000000080)=0xc) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xb, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1418.956654][T17410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1418.991859][T17367] bond0: (slave bridge177): Enslaving as an active interface with an up link 06:27:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xfffffffd, 0x2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dri(&(0x7f0000000080)='/dev/dri/card#\x00', 0x4, 0x220001) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f0000000100)={&(0x7f00000000c0)=[0x7, 0x6, 0xce9, 0x5, 0x7106], 0x5, 0xb6e35ca9, 0x80, 0x9, 0x10001, 0x200, 0xffffff00, {0x4, 0x8, 0x0, 0x20, 0x7, 0x4, 0x8000, 0x2, 0xfffd, 0x1f, 0x5, 0x51a, 0x1000, 0x9, "91181f03c3e54d1ed027eb6e98fcd2c2e1f8b6859862a20d6818ca4072a9b7ba"}}) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x8000, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000003000/0x4000)=nil, 0x4000, 0x2000004, 0x82050, r4, 0x0) 06:27:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1419.024073][T17367] bond0: (slave bridge177): Releasing backup interface 06:27:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x8000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:13 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="49d461713b8a8c729f8d92c9bd7a508201000000937c"], 0x6) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r3 = msgget$private(0x0, 0x20) msgctl$MSG_STAT_ANY(r3, 0xd, &(0x7f0000000080)=""/21) ioctl$KDGETLED(0xffffffffffffffff, 0x4b31, &(0x7f0000000140)) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000000)=@req={0x9, 0xfffffff9, 0x4bd7b97e, 0x10001}, 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r5 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$FIONCLEX(r5, 0x5450) 06:27:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xc, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$SNDRV_PCM_IOCTL_UNLINK(r2, 0x4161, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x7) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:13 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x9, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:13 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) ioctl$SIOCGSTAMP(r1, 0x8906, &(0x7f0000000040)) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xd, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1419.409852][T17458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:13 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000000), 0x4) 06:27:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$EVIOCGVERSION(r3, 0x80044501, &(0x7f0000000080)=""/84) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1419.471109][T17463] bond0: (slave bridge178): Enslaving as an active interface with an up link 06:27:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1419.567365][T17458] bond0: (slave bridge178): Releasing backup interface [ 1419.843182][T17502] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1419.892290][T17463] bond0: (slave bridge178): Enslaving as an active interface with an up link [ 1419.910579][T17463] bond0: (slave bridge178): Releasing backup interface 06:27:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x9000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:14 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x1, 0x7ff, 0x200, 0x0, 0x2, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0x1}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="b08a2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140)=r7, 0x4) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r2, 0x84, 0x78, &(0x7f0000000040)=r7, 0x4) r8 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$USERIO_CMD_SEND_INTERRUPT(r8, &(0x7f0000000000)={0x2, 0x5}, 0x2) 06:27:14 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0xffffffffffffffff, 0xfffffffffffffec9) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1420.180137][T17518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:14 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1, r4}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:14 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$uinput(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_END_FF_UPLOAD(r3, 0x406855c9, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000000)={0x0, {0x0, 0xfffffeff, 0x7fffffff}}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x200000, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$MPTCP_PM_CMD_GET_ADDR(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x154, 0x0, 0x300, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR={0x3c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e20}]}, @MPTCP_PM_ATTR_ADDR={0x48, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_ADDR={0x38, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, [], 0xb}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r6}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x9}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x7fff}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}]}, 0x154}, 0x1, 0x0, 0x0, 0x40090}, 0x2801) ioctl$KDDISABIO(r4, 0x4b37) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xf, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1420.261072][T17527] bond0: (slave bridge179): Enslaving as an active interface with an up link [ 1420.293657][T17518] bond0: (slave bridge179): Releasing backup interface 06:27:14 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x401, 0x0, 0x0, {0x3, 0x0, 0x5}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x44000800) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:14 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:14 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x10, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1420.670427][T17545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1420.708701][T17527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1420.776872][T17527] bond0: (slave bridge179): Enslaving as an active interface with an up link 06:27:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xa000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:15 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000040)) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$CHAR_RAW_ROSET(r4, 0x125d, &(0x7f0000000080)=0x4) 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x11, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:15 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x452903, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) mknodat(r1, &(0x7f0000000040)='./file0\x00', 0x10, 0x8dad) 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1421.076320][T17581] bond0: (slave bridge180): Enslaving as an active interface with an up link 06:27:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x12, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1421.139249][T17594] bond0: (slave bridge180): Releasing backup interface 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:15 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x4b, 0x2, 0x1, 0xffffffff, 0x0, "b9e5beb41cd9d75651fa684fbeca704b213882", 0x0, 0x40}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYRESHEX, @ANYRES32=r2], 0x4}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = syz_open_dev$vbi(&(0x7f00000000c0)='/dev/vbi#\x00', 0x0, 0x2) writev(r4, &(0x7f00000004c0), 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCFLSH(r5, 0x540b, 0x0) syz_init_net_socket$nl_rdma(0xffffffffffffffff, 0x3, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) connect$pptp(r7, &(0x7f0000000000)={0x18, 0x2, {0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x1e) 06:27:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1421.572619][T17594] bond0: (slave bridge180): Enslaving as an active interface with an up link [ 1421.621789][T17594] bond0: (slave bridge180): Releasing backup interface 06:27:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xb000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x48, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:16 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SG_GET_TIMEOUT(r0, 0x2202, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000000240)={0x6, 0x3, "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"}) r3 = dup(r2) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000100)=0x54) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) ioctl$USBDEVFS_CLAIMINTERFACE(r5, 0x8004550f, &(0x7f0000000140)=0x2) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}, 0x7}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000380), 0x4) 06:27:16 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_CROPCAP(r1, 0xc02c563a, &(0x7f0000000040)={0x2, {0x200, 0x0, 0x5, 0x4b}, {0x1f, 0x7f, 0x4, 0x7}, {0x4, 0x3da}}) 06:27:16 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1422.059675][T17643] __nla_validate_parse: 2 callbacks suppressed [ 1422.059685][T17643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:16 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) fcntl$setown(r2, 0x8, r5) 06:27:16 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1422.207515][T17651] bond0: (slave bridge181): Enslaving as an active interface with an up link [ 1422.275187][T17658] bond0: (slave bridge181): Releasing backup interface 06:27:16 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:16 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:16 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(0xffffffffffffffff, 0x3) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) setsockopt$inet_sctp_SCTP_ADD_STREAMS(0xffffffffffffffff, 0x84, 0x79, &(0x7f0000000000)={r3, 0xa154, 0x5}, 0x8) [ 1422.660911][T17651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1422.727043][T17651] bond0: (slave bridge181): Enslaving as an active interface with an up link [ 1422.746193][T17658] bond0: (slave bridge181): Releasing backup interface 06:27:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xc000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:17 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:17 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32], 0x4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) bind$llc(r7, &(0x7f0000000040)={0x1a, 0x7, 0xfd, 0x1, 0x1f, 0x3, @dev={[], 0x1a}}, 0x10) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000300)=ANY=[@ANYRES32=r1, @ANYRESDEC, @ANYRES32=r4, @ANYRES64=r6, @ANYRES64=r6, @ANYRESDEC, @ANYBLOB="69a174608093d995e6ec8e07e858f304a5d9fefac718e9d9702276090000000000000044ddf11ce5d1c3380b4dbdbcda1ca7c284ed93c3b511bb7f7500d4b443c6bb7435bf34d5e7cbd7c768e4b5a7ac740383ee50d2d033e2f763e886cc9f62396fa4725e479642f6de4d42730a4197ae3645eae490cddc69e4aa8d2ceb5a7133f4f0edf7cace8dba931c1a2f7be3cb3c61a371ea99637f0614f66f9e9ccdb0be6b75c7aa419477769ee6efdada52a156bd6d9e54ceacc350c6f8679ac0e0fae051c69e2398a94ae1605f50ebcdc00ac32ec5dc065716b218bb43e419a2902a97a45d7fd6", @ANYBLOB="bcc4dfdb9d6d5fe94b82f1b378b2aa142488f56c82b5c4bc7d670d9fe829cf3bc5184406ecc5097dd3fac6d3bc8ee0aca6608fe1f017208c4e1d6ceee60af617446e375c0e653c9b6d7c3f4635c365c7aeb984d25975e6552c1ad732e7f2f0101323dfe412ee7ce8904643b809ccd7d6f61fc2bf4ea0c904e341b1fe64425f28d160ef93b228672d68e9a3f5ab853019ee38d8bbbe149d7004404abcf450761d3fd5ddca8c25d15b865d15ed0dbd463a18222f4bf7dd7b4b022baeeb485a68be711b511746ffb5e657f6fd324d9dea8b35a2b6f0c7f9d131f395a654c7c09a34e3774e2ff0d7", @ANYRES64=r7], 0x8) r8 = syz_open_dev$vcsa(&(0x7f0000000140)='/dev/vcsa#\x00', 0x80000000, 0x492ac1) connect$rds(r8, &(0x7f00000001c0)={0x2, 0x4e22, @loopback}, 0x10) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x60, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:17 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x410002, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000040)) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nvram\x00', 0x84c00, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000000f00"/20, @ANYRES32=r4, @ANYBLOB="00000000ffffffff000000000900010063616b6500000000640102000c00020000000000000000000800030000000000"], 0x48}}, 0x0) semget$private(0x0, 0x3, 0x20) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000180)={'ip6gre0\x00', &(0x7f0000000100)={'ip6gre0\x00', r4, 0x29, 0x1, 0x6, 0x7, 0x49, @loopback, @local, 0xc8, 0x700, 0x9, 0x800}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_GET_CPUID2(r6, 0xc008ae91, &(0x7f0000000400)={0x4, 0x0, [{}, {}, {}, {}]}) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000200)='/dev/udmabuf\x00', 0x2) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:17 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r2) setfsgid(r2) r3 = getpid() getpgid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r5) setfsgid(r5) sendmmsg$unix(r0, &(0x7f00000025c0)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000200)="6eeee8dceaf8a7e1b2fdb8b7171fc8f69d629b271ef9fa5b147c05614107fcfe3a77475b86e5650453bbf864e5add9dacd090a2167698dfbd2f75c784a49aa947176b3aab5ba8ba1ec62dd9f4432c6988cddd941abbba5fc7d95222eb4431444b95b2018fc2599c3d373c21d3a9ac8b0f8494a1070cbc94b6b37194cf4df3f184e0b26de544f32ae3764ede025a0282b5c2cd84e27cb567ba3049078675081ef402f263ca3a73cb6dfee4c769f33d8472b8461f771", 0xb5}, {&(0x7f00000002c0)="c6fdb67e77a3d3a740020375f39390e22d4e42bac16b8023b1152be574788bcea011fc82862cad7d2d9f67bd030be5c4ebe5af70600178dcfb1304420c8b0ac7f8f997c74cf5a262f31c1c3055ed665eaad47c9921da94a99c137444028bc6fa17d137ed957f86a05e131380f086ba7a1494872ccdc1055c1e59b83a7415778cc61fd0e6746d2ca041b97744bad6747ec1662b3bd20876cf5835b84b83a9a5482c298260ca5b278824ad381fd30bcc2fbf0cdb9f689660d757e164a3b88b47770fbffa16a8a87bfcf984dd2d414d9c10bfe6131d261fac50495cf8b81d", 0xdd}, {&(0x7f0000000140)="00305f6993", 0x5}, {&(0x7f00000003c0)="4710f4ce768843d335e44778b6e542f0a8e467618879eaa06826f08b51f377fa4c48c757b8e41b26bc43dadc33d9d319b2902e6125671966941d1401b5b058808b388cd41afa32bc7f7d1eb014a37fa9378d0a2e4fe12a1c6568373d7b419ea0afb86cf2ba6c7eda34d367a3e835cfe979", 0x71}, {&(0x7f0000000440)="7bf1500b58a4e293e7d845dc3770e79338de124ec7867e063a3568fe99fe9e6e5f072f0a1036fb9cac076dac4eb770ebc8", 0x31}, {&(0x7f0000000500)="ebc446d40371bccbe9e327746383d8a35792d1b2e9bfbde4be4012a3442a8b5745e4e19a809351c5eabfd45718cd66e0acc46d1da664959a4e9f3cea881d909b330823e0c48282490503a64497ce486e071c5f5d67d0b31ec6fd06ad72a8c0a868ddd0a39b5a8a8d4e20519f891b84c1695713fbbcca29fb4cc9fc6386223cbe132a442b251aa4704396583722822f865dd68fcfbc72f222", 0x98}, {&(0x7f00000005c0)="83b0571551ca82fe39a2dedbb4ac6387b3a07076d6c010f686019593bfd85dcaaed58c98090bb2ded6715389ca2411afde65824a45d8ea52df47bcdc10eb7dc9d7c40bd37e599a5ea4fe67fcf6f163555b0bc4adb35fc4080533e7b3969d00bca17944cb1bf0c0a65b9e24e468bf52", 0x6f}], 0x7, &(0x7f00000006c0)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x40, 0x68085}, {&(0x7f0000000700)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000000ac0)=[{&(0x7f0000000780)="814f571c6273297ceca94d3efe33967c332b47f6", 0x14}, {&(0x7f00000007c0)="0d7115b96820e9d592ac6d6e9e24f1ec9e92a9198270cc0ec842b121598e33a0c689cc480517cc76a93709b0427fb6ddbde42ee11450a2988297523a0ad2256536a13367a3d919ea8e6f54a2e8473ea5c4f04607d75d845cc6484a7b334cd3b73a75fb79c5b9809966c66625ccb5d4b6ccf4df18b89bf6fc19a2fb56b9eb320e6769b2b08f9d603e2c0a894774b7b0facda95f14a72e31e0692af379212932778c874d71e75f341fbedc01bde48fb81bcfc9cbbd4e0dec4970635d794be9427721", 0xc1}, {&(0x7f00000008c0)="75ad3d54a232f1ca5c0e38785893a6f1da21b9cd3498e73a0cdc0af35d9100666a48256506b00de544988a67b49b27e8fb580a52d217696749454ccc0bff669423bf3191f411e73673f386460bc3affa827cb509067999eb258e9706c1e68aed2949987029a62cfa664711bbdbfd917719a4da423703f267f24be6efeff7d10880a6d599964d3e8644fbb19f0ccd27985c6afefef6b803aceb05fb4d7ae218f17e7e887f470439cddaef94adf6a34f7849e8", 0xb2}, {&(0x7f0000000980)="a62e3b63831297256d378063ffb872566d188d68fa0761c5ed8ee64673b50208aa3417f3980bb325ecf933a799b66aa128cb7d99c57b4148132915c6e0a166be30100fc3c043d4efc3d0bfebd6987213ccf6297449939574a1bbfa1e1dfa3f62ce76ca51fbd02e64012d55cfcef092bcf4f6d9e2a1804e2db28a7bcb85f7f140f79722f1085f832849037121167483ff338d0d6a2c7c9b020316b99592991fe2f50121819aeb4a9fe8e43f0e31ff02795a18d4e5f7f63f036071d69302d84d1600e602b1d5137f2f1635975c0430efc4865b0eca657562db98450f06b43d51ccc194349292bcbe10218790b8463f91", 0xef}, {&(0x7f0000000a80)="a1d1ddf199df24fb9a624a8c50c1f926925b0e905a36c3eb5490155f8f84f85670bb1a60d07b54", 0x27}], 0x5, &(0x7f0000000b40)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40, 0x4008081}, {&(0x7f0000000b80)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f0000001000)=[{&(0x7f0000000c00)="bf8366cc3fa8f07cfce12d5378614bf98aac7d0d8e3fc805e39c90", 0x1b}, {&(0x7f0000000c40)="e9cf0dd48e72c25c82b452cb2a799b277bfcbc36c13dde0fd6cad178e140e5d617d80c04f221425c698c1437a9d93ecbdf16be5c3803865b0cd9bb1f6bc63c710308517779e648ac16d72735cc56507bb8b9f8b1ea69624b75767607ff43ff7493276bd321da7e5ef8c87534d17ef7ab88ce9128915c4151e838d5a92a232546b9c4700d998f396d00b2730b282247e3265e7b7032c277a739394cb0c464d907da63b6d7381720e06c5059", 0xab}, {&(0x7f0000000d00)="46ad8247674672e7f612a4c486a8d0a424bec15890af919bab2bf294a2b7e37d1685b065b9f824e8b7810cabc41eb71cfcd6d212329c09770c44d6a04dde4b90f0d7205cf029b836b4050702", 0x4c}, {&(0x7f0000000d80)="d4f352d63669de807ada2e135ea085656c0ac58e095428f6bd176082a1eedbf664a827c493b29f786c49df8c703a52be669f1c4b7a1ea07e723e8db818ba67f7dacb4a53036310e72f4c038267685d770b21b9ab44430823e36da350359c", 0x5e}, {&(0x7f0000000e00)="eca8be96c5b808dfccbd777521a226a97029aa3eb8d9bca85c687e819c8db1554aeeaafd76f8a3c894d6cdd1b1f6f39e1889106b2e93fcfee0a1f9d0b44fa20302ebe62afe992e40b8290dd1067527c527f97d18094842dfedda849c90a4952a232afc7a109113b025d277473cbc132bc8256822b592d337dfa243dafa3465a22722f554f2d15f444a95d36eedca512e980ad534d9ad5c5ba4ae515beb8e8fe8b5fc7131e833af2487705cb0b2da6706cc00e746eaa4d40888dae05334505bbabac917ea3fd2956bc596f289b9647b0d3b8ff32ab5", 0xd5}, {&(0x7f0000000f00)="b71d535e1934fd23cf83370bfd846dbe1b2f09b5f9e7ba703c1644ddafe11d756e15096504f887adb70b89b818d17ae63ff058a301c74177fc68a47acd86f5e7eea28749ed02e30b7f8701b743aafafe05c6f493b84666f0212a046959affb2924a0af89f11dbc2f101b9261e3a77a44aaf679210580a6f27ebaa5dfdce802908c2e9f83d805b82739ba21e9eb2b22c03ee5a2fad161238dd6acf98da2a2ee54020e0b4cf166df387182ead930", 0xad}, {&(0x7f0000000fc0)="a4e054b7e52257ad864d8171c4", 0xd}], 0x7, &(0x7f0000001680)=ANY=[@ANYBLOB="3400000000129fd7a72de99f7c000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000018000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYBLOB="18000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r0], 0x110, 0x40001}, {&(0x7f00000017c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001dc0)=[{&(0x7f0000001840)="9a0db4d957e09d384c4a9389e665d989f8232f3f5441085259c4be34cf3512f7e1c4154c75cbd2a58232d0599cd1dad9c6db8fc57e4ca793e534b2713b84e4c69ce6cc7451ccb77e5e8cc04f19d8768b43d95db6ba52cea1bc533ae579ee82c87dfd36bd9686cb5d9228af2141a42c9c19c49eab59e23bdcf6be4e142d817ea853d62b045e6bb218e18acc5374", 0x8d}, {&(0x7f0000001900)="eea46df35d31e4cb340d61056ca1aee2910f41cf0ff34a58533118638ae25e5d08d602c178184dd7066145a287bac218bdbd4f0bd06b6a8caf47dd932a0f8706bb00f7040b5c3948cceba6746f4429684f4e120a5e413b2012d2156ed176f9ba9a7d930ac80ff14a5296c29747e3ca5cc96bfdd99084a9784f3cd49e2aa75ffd06f7882277531658f5110af5d68f4e76f4600b877a905294c983ae444244460483b4fc3bc0eab934965b1f243c3395174a4a178351488c41a55119aa0f29719b5f5509d6453037", 0xc7}, {&(0x7f0000001a00)="c07b9b2e8fbdb37c08b17ec05092521d33a9af086b92ab2c891b4edfd51a8acfee3f4be9e9517a9ec9e0adcd8a4f7923d2a6561882680703661a96e27b77689cbb788fbe89bb0a5a94aee3e6ecf9bf12e07b860dfff8a405e91abeba40239caff5eadc3f5358afc61da3720ae7523492e0378cb778c9f7a0047c3de70dae3043affd5d5b4dcbaa223c7438f2f03f163b7e93319df6", 0x95}, {&(0x7f0000001ac0)="f7cd9c801ad5d2920333867f04f6340d83208cdee3be484bec92dd5e4043d7b4e5037d27ad4d7422320a48f9e48091cac8de28ec20806a8f4646ab26ae19cbbb17662d8fc4d925941d", 0x49}, {&(0x7f0000001b40)="9bd5fd3dcbb8d3cdeb8a6f7ef0ceae55fb7a6669894bc6f6ae36a3ee354a58c0b60ca9142f60b7e26884fe261ea6e074b887e1e2bc5cf28712a956115102dfc1ff4d56c078ffe62084574c5a288b1125c2b02c0a64472c546070832b950e2b3bdf1e4fd378b7e74e61d90429ecd450054acc9568104e01b288a94cfaf8596a08d57df6dbc380a18a18d34b4bd1378e09dc6d1d4d717785aee7de1082a70eb80a5fcca023a563e7f000ee38fd962477af233b6f18169aa51cbd254d7740ea35e07f882f481907c1e7d86e06eb", 0xcc}, {&(0x7f0000001c40)="e4dd0dcd37cffb38dab5ea1f8eee734ca076fd0027", 0x15}, {&(0x7f0000001c80)="e8b35d9552b65d19cfffa08189cfd43b6135ec6c1003b58ad48ffd68dec576a869afd6ac3b03efca65863652904893c8c5173e20321638b178b2c4e5644219d06f6ffd73778d60f1b7bebc033136a6b3cd3b5e95091bf4352feaace7ec6937ed451bdb2d0455934725c6820253fc", 0x6e}, {&(0x7f0000001d00)="541bb36c7f65bfa63d0cfa448db58fb99606c19dd6a4379cd63f7358aabde71e03f36ec4a48703e0c3fd499d198f0e5144dbc680a4a761d69b80a97ff7115f77a4a2a23a8b1c20785a560be62e1f440ffd6102e229fd263a7267d0063d3c456368688bf47525e2006a2d9603c6fa8092167d372df3c6f734d8248e1963d7c1020a751dfbd5d1cd693d8dd3eada4106202cea7d00c57a2ac56a6e9d05a4fe9d7c", 0xa0}], 0x8, &(0x7f0000001f80)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0, r0]}}], 0x88, 0x4004000}, {&(0x7f0000002040)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000021c0)=[{&(0x7f00000020c0)="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", 0xfe}], 0x1, &(0x7f0000001080)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r0, @ANYBLOB="000000001c00000000020000010000000200006459f8bdba427057b1b6a980ee00", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=r2, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0xee00, @ANYRES32=r5, @ANYBLOB='\x00\x00\x00\x00'], 0x90, 0x480d0}, {&(0x7f0000002300)=@abs={0x1, 0x0, 0x4e24}, 0x6e, &(0x7f0000002580)=[{&(0x7f0000002380)="663cdfa353fb5cb9e1f59b9dbeece7afd48ddd54134432823b4c5a9dea51e6824aac0638dd4fd3937463d88b65e9459c8fcd76c5eac42224f7da201dd69efcc7b1", 0x41}, {&(0x7f0000002400)="9c97cd04f55981bdcd21c7d2e72d3d742200c30e2da2bb4a3fb15273cf96a1b5af25b7a02bcbbfe0f32fa4f5d67bec0aee8eef78aeafa6a26d1f4b30d58ee51787a64a72da6523f99d59c472987ef51c459ff83777f00ba8013fa1bc4f3c349cbfba1b091d12ac4af8e662b224d428532cad3891623e7e574af2cb8d745d6e8f423ba357ba14b322ba95767275e8b4e516874cfbd96da30bd7c764234a5c9b787f6084ea870fdca4c39360fd98371903fad0b466cc1600e177059ede5982d1f4a88a638d99025fc2f19cd19ec5c1c3f936207a", 0xd3}, {&(0x7f0000002500)="748644c13e5670b58e820da8179eeeea87090151d44e08d7ed1cca613efd5cb1a6e4a4e35633c9b5a7ce3fb63ad7e95ae406c9a662b4e4047f73660c3019ed58ef7dfc", 0x43}], 0x3}], 0x6, 0x10) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r0, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r6 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r6, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x68, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1423.106461][T17706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:17 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x4ad0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1423.189515][T17712] bond0: (slave bridge182): Enslaving as an active interface with an up link 06:27:17 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1423.238911][T17706] bond0: (slave bridge182): Releasing backup interface [ 1423.257763][ T26] audit: type=1804 audit(1597472837.625:4492): pid=17703 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2647/cgroup.controllers" dev="sda1" ino=16375 res=1 errno=0 06:27:17 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) r3 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r3, 0x65dd, 0x0, 0x0, 0x0, 0x0) 06:27:17 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6c, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1423.554358][T17754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1423.630507][T17712] bond0: (slave bridge182): Enslaving as an active interface with an up link [ 1423.642037][T17712] bond0: (slave bridge182): Releasing backup interface 06:27:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xd000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:18 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) connect$nfc_llcp(r2, &(0x7f0000000040)={0x27, 0x1, 0x2, 0x6, 0x81, 0x5, "ff8563f4d12af20c14a5815fc3d4cdef6d67223e3dd00326fd75fd856a611c6e48c6f5b876a3116b094db58ce5b71a8084148e693c4dce8b46f24c3b7a9d43", 0x9}, 0x60) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:18 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:18 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$nfc_llcp(r0, &(0x7f0000000100)={0x27, 0x0, 0x1, 0x7, 0x1, 0x81, "4999575d9c213893b2f757478afea527517c2c9380c36530d0fdc39a4d85cd69dd54da095019db44da5523e0d6153d40d3058d3a851f4bd675768799e9ada2", 0x24}, 0x60) r1 = syz_io_uring_setup(0x508b, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x1}, &(0x7f0000eeb000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x74, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:18 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1423.922609][T17774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1423.958030][T17774] bond0: (slave bridge183): Enslaving as an active interface with an up link [ 1423.964717][T17306] usb 5-1: device descriptor read/64, error -110 06:27:18 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() getpgid(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) setsockopt$inet_int(r1, 0x0, 0x1b, &(0x7f0000000140)=0x5, 0x4) syz_open_procfs(r0, &(0x7f0000000100)='autogroup\x00') r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0xe080, 0x0) ioctl$KVM_ASSIGN_SET_INTX_MASK(r5, 0x4040aea4, &(0x7f00000000c0)={0x7ff, 0x71d2, 0x101, 0x2, 0x4}) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7a, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1424.024803][T17788] bond0: (slave bridge183): Releasing backup interface 06:27:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:18 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1424.304757][T17306] usb 5-1: device descriptor read/64, error -32 06:27:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1424.423898][T17788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1424.464251][T17788] bond0: (slave bridge183): Enslaving as an active interface with an up link [ 1424.489348][T17788] bond0: (slave bridge183): Releasing backup interface [ 1424.574848][T17306] usb 5-1: reset high-speed USB device number 8 using dummy_hcd 06:27:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xe000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:19 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) delete_module(&(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x10000, 0x0) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) fsetxattr(r2, &(0x7f0000000300)=@known='system.advise\x00', &(0x7f0000000340)='cake\x00', 0x5, 0x3) write$P9_RMKDIR(r2, &(0x7f00000002c0)={0x14, 0x49, 0x1, {0x4, 0x3, 0x8}}, 0x14) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=ANY=[@ANYBLOB="4800000024000b0f00"/20, @ANYRES32=r5, @ANYBLOB="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"], 0x48}}, 0x0) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000100)={@ipv4={[], [], @multicast1}, @private2={0xfc, 0x2, [], 0x1}, @local, 0x9, 0x6a0, 0x800, 0x500, 0x712, 0xc10080, r5}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:19 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$sock_ax25_SIOCDELRT(r3, 0x890c, &(0x7f0000000240)={@bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x2, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @null, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default]}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r4 = creat(&(0x7f0000000080)='./file0\x00', 0x88) mmap$xdp(&(0x7f0000290000/0x1000)=nil, 0x1000, 0x1c, 0x810, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) getsockopt$inet_dccp_buf(r5, 0x21, 0xc0, &(0x7f0000000100)=""/80, &(0x7f0000000200)=0x50) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x300, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x500, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1424.752496][T17829] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1424.766215][T17831] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1424.784826][T17306] usb 5-1: device descriptor read/64, error -32 [ 1424.852728][T17844] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. 06:27:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:19 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r3, 0x40a85321, &(0x7f0000000080)={{0x1, 0x8}, 'port1\x00', 0x20, 0xc, 0x0, 0x3, 0x4, 0x0, 0x1000, 0x0, 0x5, 0x9}) [ 1424.923678][T17831] bond0: (slave bridge184): Enslaving as an active interface with an up link [ 1424.953965][T17839] bond0: (slave bridge184): Releasing backup interface 06:27:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1425.114886][T17306] usb 5-1: device descriptor read/64, error -32 06:27:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:19 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_setup(0x3013, &(0x7f0000000200)) r4 = io_uring_setup(0x1, &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_WRITE_FIXED={0x5, 0x3, 0x0, @fd=r4, 0x100000000, 0x4, 0x5, 0x8, 0x1, {0x1, r5}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1425.296716][T17839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1425.359229][T17839] bond0: (slave bridge184): Enslaving as an active interface with an up link [ 1425.384819][T17306] usb 5-1: reset high-speed USB device number 8 using dummy_hcd [ 1425.394123][T17839] bond0: (slave bridge184): Releasing backup interface [ 1425.494848][T17306] usb 5-1: device descriptor read/8, error -32 06:27:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xf000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x600, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000040)=ANY=[@ANYRESOCT=r7, @ANYRES32=r4, @ANYRESHEX=r6], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:20 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000098000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) sendto$phonet(r4, &(0x7f0000000500)="1dbd55147c5ec216ee96d7c1371c6583b58ae017cd94dbfda59f85fb4cc86c1db7b65a30b49d4e67807dab109c8dcef37d4c2a76d969f2599401a6e64b625a90a520780f67c92cb089c66ff873682c1e45fb20822423cbb701b73fb947e7c7876c611565ece2d610e94bcddda69ec88186959d050b3aeab1196be1bd16933a9c23102966e81433c0983c7aca499c5ec27d4295", 0x93, 0x800, &(0x7f0000000100)={0x23, 0x9, 0x0, 0x20}, 0x10) ioctl$PERF_EVENT_IOC_SET_FILTER(r3, 0x40082406, &(0x7f00000000c0)='/-/*+(\x00') io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_GET_IRQCHIP(r6, 0xc208ae62, &(0x7f00000001c0)) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_REFRESH(0xffffffffffffffff, 0x2402, 0x8) socket$rds(0x15, 0x5, 0x0) [ 1425.711466][T17306] usb 5-1: device descriptor read/8, error -32 06:27:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x700, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r3 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x100, 0x10c00) ioctl$USBDEVFS_DROP_PRIVILEGES(r3, 0x4004551e, &(0x7f0000000080)=0x800) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1425.927270][T17924] bond0: (slave bridge185): Enslaving as an active interface with an up link [ 1425.973613][T17931] bond0: (slave bridge185): Releasing backup interface [ 1425.996274][T17306] usb 5-1: reset high-speed USB device number 8 using dummy_hcd 06:27:20 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:20 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1426.135094][T17306] usb 5-1: device descriptor read/8, error -32 06:27:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1426.352280][T17306] usb 5-1: device descriptor read/8, error -32 [ 1426.397787][T17924] bond0: (slave bridge185): Enslaving as an active interface with an up link [ 1426.425002][T17931] bond0: (slave bridge185): Releasing backup interface [ 1426.475208][ T8145] usb 5-1: USB disconnect, device number 8 06:27:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1426.714876][ T8145] usb 5-1: new high-speed USB device number 9 using dummy_hcd 06:27:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x900, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:21 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:21 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1426.909392][T18001] bond0: (slave bridge186): Enslaving as an active interface with an up link [ 1426.934901][ T8145] usb 5-1: device descriptor read/64, error -32 06:27:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xa00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1427.012269][T18012] bond0: (slave bridge186): Releasing backup interface 06:27:21 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) r3 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) dup3(0xffffffffffffffff, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1427.201536][T18001] __nla_validate_parse: 3 callbacks suppressed [ 1427.201545][T18001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1427.255884][T18012] bond0: (slave bridge186): Enslaving as an active interface with an up link [ 1427.264802][ T8145] usb 5-1: device descriptor read/64, error -32 06:27:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1427.320675][T18012] bond0: (slave bridge186): Releasing backup interface 06:27:21 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1427.534862][ T8145] usb 5-1: new high-speed USB device number 10 using dummy_hcd 06:27:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x11000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xb00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) fallocate(r1, 0x1, 0x140000, 0x26b) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1427.754802][ T8145] usb 5-1: device descriptor read/64, error -32 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1427.836321][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1427.912155][T18068] bond0: (slave bridge187): Enslaving as an active interface with an up link [ 1427.946301][T18059] bond0: (slave bridge187): Releasing backup interface 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xc00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1428.084738][ T8145] usb 5-1: device descriptor read/64, error -32 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1428.207450][ T8145] usb usb5-port1: attempt power cycle 06:27:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x12000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:22 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$VHOST_SET_VRING_NUM(r2, 0x4008af10, &(0x7f0000000040)={0x2, 0x2}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) r6 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xbc, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x220c5d25}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b1ec1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdbddab8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe847df9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5986b8b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48840}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_LISTALL(r5, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0x108, r6, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0xd4, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5f882037}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa7}]}, {0x3c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x21ad2d42}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x2e}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5ca945d2}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x263d3813}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x1588a4de}]}, {0x44, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7b}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x22}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x52}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x38828ca1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2d8f1b54}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x123d62a6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4e11f91d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x373667d}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdd}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x17}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x51a0ea94}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x108}, 0x1, 0x0, 0x0, 0x20000001}, 0x4000041) ioctl$KDSKBENT(r1, 0x4b47, &(0x7f0000000000)={0x20, 0x4, 0xfff}) 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendto$inet6(r0, &(0x7f0000000040)="9b5372ba2141ccb015dab511f2477ba48c808c089cdd6eb1f3028c889f3e4dc2d9f3bc79f89366242c20f7135768e0774950750180c982429447dd3f65a52bf424722556b6a533339c8ced266f77d43cd362dcb13bee83", 0x57, 0x48080, &(0x7f0000000100)={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xc6b0}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4e21, 0x0, @ipv4={[], [], @remote}, 0x1}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xd00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1428.406645][T18059] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:22 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) ioctl$SNDCTL_TMR_CONTINUE(r0, 0x5404) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:22 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) flistxattr(0xffffffffffffffff, &(0x7f0000000040)=""/95, 0x5f) [ 1428.627169][T18129] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1428.662373][ T26] audit: type=1804 audit(1597472843.025:4493): pid=18128 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3306/cgroup.controllers" dev="sda1" ino=16316 res=1 errno=0 [ 1428.717272][T18136] bond0: (slave bridge188): Enslaving as an active interface with an up link 06:27:23 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x84402, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:23 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1428.773745][ T26] audit: type=1804 audit(1597472843.065:4494): pid=18118 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3306/cgroup.controllers" dev="sda1" ino=16316 res=1 errno=0 06:27:23 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ttynull\x00', 0x50080, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x567040, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) syz_mount_image$ceph(&(0x7f0000000040)='ceph\x00', &(0x7f0000000080)='./file0\x00', 0x9f8, 0x7, &(0x7f0000000500)=[{&(0x7f0000000100)="23979101c2b47b0a672351488a8a6b43e53f10d42b942a4711fe2640a557c3b358054840cce6470ab83098ed22d5520d2ca44bdd7de724be85591cd6100e7f11b7", 0x41, 0x80000000}, {0xfffffffffffffffe, 0x0, 0x6}, {&(0x7f0000000180)="3a67ad947152adde3c2c6e3a194393b4b45153d5ca24a5cc93928421693ad2065365c2e62b7ece9b5830aee3564db8", 0x2f, 0x8}, {&(0x7f0000000200)="1cfbd14ea7a46718c3093dc74b3ac0583173ddb9a8f89321e744444dae4c515dc71876fb21bb40cd5b652d0dfa97a752abe2e704b626f1544293becc0a916ec906d0c407b4398b228b84e14566d6337d65a9bbe4cbe2facd0ac1e2ad", 0x5c, 0x4}, {&(0x7f0000000280), 0x0, 0x7f}, {&(0x7f0000000340)="f1370887ab7163586f8b297686dd0afa63c4545c520f650dca6239a77e0af169ee857a349dbf5e888bbaca44b4f1674c9f6525c34ec52e238ebf4d08af14294640d3a8876f7a47cb307bd513a67d16986ffd8c59019207be30230959d2a473d584bbd9792bdd2544", 0x68, 0xffffffffffff8001}, {&(0x7f00000003c0)="1911b19d771f090f7e2c0cb168941b599a21279f76b5d388dd9bc560dea7bd517bc3ade636f9fc1876619f6d17bf4912ada5f0a41fd85eadbf0bb0401961a0ba4c5cb81a9661b44aba52b044eb71c3d8b663ad52434f8dbc97703b64c816bae36d2565c9ce0f59b95c473cc4171570f1b850238c6045ef6cd6cc12b1d93bd0c39e91cba721b74666b1e2fd6ae75bf38f58ec74b49027062e73845059de7412d32c79545d104c39aefc678f72c660bb6dd6ee33ef59b2009d58034677505e11e64bcacf047897dea5d0f82bda8e6fc6ed48438753f3340f", 0xd7}], 0x2000010, &(0x7f00000002c0)='/dev/ttynull\x00') [ 1428.823133][T18129] bond0: (slave bridge188): Releasing backup interface [ 1428.934749][ T8145] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 1428.968158][T18165] ceph: No path or : separator in source [ 1429.054908][ T8145] usb 5-1: device descriptor read/8, error -32 [ 1429.173759][T18176] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1429.209403][T18136] bond0: (slave bridge188): Enslaving as an active interface with an up link [ 1429.247629][T18136] bond0: (slave bridge188): Releasing backup interface [ 1429.285133][ T8145] usb 5-1: device descriptor read/8, error -32 06:27:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x20000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:23 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) gettid() exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:23 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:23 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xf00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:23 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f0000000040)={{0x3c, @local, 0x4e23, 0x1, 'fo\x00', 0x10, 0x1}, {@remote, 0x4e22, 0x0, 0x8, 0x323, 0x616}}, 0x44) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:23 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:23 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="00009e97ab4a0730c98dc1c32a4e09aaab50c77b9f3225b249a2079c1f0aca4afdf65b23d78cc84c2c88ee182db3b6ce60ef7d9cd3fd753624986e33349f0f24cc5b340b48fb6578442120c2c2800c157169dee18a6d5bb05972608500b4e056b55d5e5a5071b2121809a1fda6cd26ad2c366547ada4ce5dce1849975d2d41c4454a44e74e0e40798ddc8f8d7948089c94747f743a98dbe249db2cdb", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$TIOCL_SELLOADLUT(r1, 0x541c, &(0x7f0000000080)={0x5, 0x1, 0x1f, 0x40, 0x800}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r4 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x10140, 0x0) write$cgroup_freezer_state(r4, &(0x7f0000000040)='FROZEN\x00', 0x7) 06:27:23 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1429.522947][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1429.554999][ T8145] usb 5-1: new high-speed USB device number 12 using dummy_hcd 06:27:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x1100, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1429.639887][T18205] bond0: (slave bridge189): Enslaving as an active interface with an up link [ 1429.667984][T18212] bond0: (slave bridge189): Releasing backup interface 06:27:24 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1429.684855][ T8145] usb 5-1: device descriptor read/8, error -32 06:27:24 executing program 4: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1429.904869][ T8145] usb 5-1: device descriptor read/8, error -32 [ 1429.977500][T18200] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1430.005578][T18205] bond0: (slave bridge189): Enslaving as an active interface with an up link [ 1430.025845][ T8145] usb usb5-port1: unable to enumerate USB device [ 1430.040030][T18205] bond0: (slave bridge189): Releasing backup interface 06:27:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x20000200, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:24 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) syz_open_dev$rtc(&(0x7f0000000000)='/dev/rtc#\x00', 0x3, 0x4000) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:24 executing program 4: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:24 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x1200, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) pwritev2(r1, &(0x7f0000000140)=[{&(0x7f0000000300)="d7b3d415d18bb14d8615471b4ce2d3e481506a836984025b124ef35e3dbd85bc10964050eb4e244ca13771ad46aff13f9ee8747a3a81fc9dfc770493f0e8685bde23d3305019a35a5fe1292c6a488791c88aa7a010ea986da96a44a106ad21724d50de60159078d9ee8e3b533204a3db5d41b529b546301382199f8616dc4bfac961a5ef649f7ee780027cb1727bc4a3a7a5f14382b1994e87ac5dff6a75becd420475cc5e", 0xa5}, {&(0x7f0000000100)="8c2f1c5fe07df7c4a2f69f1e7d9c2a3de8c0173315293c09ad39cffa5a37fbc57bcf0f450ff1eaa23e8c7230a09bde9edddd0ba8ae6235b231", 0x39}], 0x2, 0xff, 0x40, 0x8) sendfile(r2, r1, 0x0, 0x100000002) bind$l2tp(r1, &(0x7f0000000440)={0x2, 0x0, @loopback, 0x1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) open(&(0x7f00000001c0)='./file0\x00', 0x84880, 0x40) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1f, r7, 0x511, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="6d000700d563b5a229127174528c317253ddba6ebc201d25276e4f8794435b184e1ad27929b670f864ac75b7c2922677ce8100cbecf11e95baff2255b98f3fcefe8b51", @ANYRES16=r7, @ANYBLOB="f5a42cbd7000fedbdf2501000000000000000c410000000c001473797a3100000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000815}, 0x80000d1) 06:27:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x2000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:24 executing program 4: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:24 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0xb2688000) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000000)=0x20, 0x4) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x11e) 06:27:24 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1430.308815][T18263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:24 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e24, 0x80000000, @mcast2, 0x2}, 0x1c) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800100}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, r2, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0xffffffff}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) ioctl$TIOCPKT(0xffffffffffffffff, 0x5420, &(0x7f0000000340)=0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000080)=0x14) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000100)=0x7ff, 0x4) 06:27:24 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1430.426214][T18271] bond0: (slave bridge190): Enslaving as an active interface with an up link [ 1430.468396][T18263] bond0: (slave bridge190): Releasing backup interface 06:27:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x25000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x21bd, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:25 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) syz_open_dev$loop(&(0x7f0000000000)='/dev/loop#\x00', 0x1ff, 0x40) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$sock_TIOCINQ(r1, 0x541b, &(0x7f0000000040)) 06:27:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000500)=ANY=[@ANYBLOB="4604000067986c4e3f051d639c408d44e698dabf50dc3942ad28e93109af1a21f7ec83776858f40da8a0f1bcc5c8a8dfcd647f270f555e572b6e48d2a5d42cd83f1c6be7245c2516a1319dda7c1312fc47d8194b9175be50aa1dad0097d30a44b4a514515c793e86a88e5ab8c5b802e72266f389e078230733b8a19a9a8386b8a29031c7bb74826c42e0ea9f737cc0f9d6f32382f8bf4b4c35cd7aecf0e74f12a48c7e1499cf18041d831930b17b17c3b9d4c5adb7d8ea817cc5d251200765bb8d6378281379ee2f3f8b1005fe5fd39a099d60ddefc02fb318f717f210f05a1fe8aea250b61e814c88c9d984", @ANYRES16=r6, @ANYBLOB="36896c093e60774528a5587afac45a2d76569c9300622de58446704ffec126e61a7bc61d1e0156739d0ac392ef31088ab1981b4c3ea9b2ddce2628cbb3bcf8f0189f69d9299e54ae1bf1361c729da09c6033887dd60dc52dc6392cfc47c65c40161a96f4e3f417b5051e16b2a4aed6ea48144e840f714b609b7e487eb0ffc420db1cf17365317962fc112e6cabee52ed2ba9db3a2ab4055506d01ddd8fb91c097225622962706b5267cbdb12ec01c9721a395c5b54ba2db99dcf25549638ba4885b6d9480a702b618f7d5323df7f9a52d3d82ef16f9a17bae69b5de36a5a356abb9e92e698f48b63b88cacde24391131bf9a5a76cf047861a30a40e3aa", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) r7 = io_uring_setup(0x100369e, &(0x7f0000000240)={0x0, 0x94cb, 0x10, 0x2, 0x163}) ioctl$FICLONE(r1, 0x40049409, r7) r8 = fsmount(r4, 0x1, 0x1) ioctl$UI_DEV_SETUP(r8, 0x405c5503, &(0x7f0000000040)={{0x54, 0x7, 0x40, 0x3}, 'syz0\x00', 0x49}) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$PNPIPE_ENCAP(r8, 0x113, 0x1, &(0x7f0000000100), 0x4) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1430.695225][T18271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:25 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1430.822650][T18313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x3f00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:25 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) ioctl$KDSKBSENT(r5, 0x4b49, &(0x7f0000000500)={0xe8, "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"}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYRESDEC=r4, @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000000)={0x0, @bt={0x9, 0x0, 0x1, 0x0, 0x8, 0x2, 0xe4f, 0x7fffffff, 0x8, 0x0, 0x8001, 0x80000, 0x800, 0x1, 0x0, 0x3c, {0x1f, 0xd4}, 0x0, 0x5}}) [ 1430.903526][T18320] bond0: (slave bridge191): Enslaving as an active interface with an up link 06:27:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1430.962248][T18313] bond0: (slave bridge191): Releasing backup interface [ 1431.176371][ T26] audit: type=1804 audit(1597472845.545:4495): pid=18350 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3313/cgroup.controllers" dev="sda1" ino=16113 res=1 errno=0 [ 1431.212359][T18320] bond0: (slave bridge191): Enslaving as an active interface with an up link [ 1431.230533][ T26] audit: type=1804 audit(1597472845.595:4496): pid=18350 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3313/cgroup.controllers" dev="sda1" ino=16113 res=1 errno=0 [ 1431.272851][ T26] audit: type=1804 audit(1597472845.595:4497): pid=18352 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3313/cgroup.controllers" dev="sda1" ino=16113 res=1 errno=0 [ 1431.297442][T18356] bond0: (slave bridge191): Releasing backup interface [ 1431.354002][ T26] audit: type=1804 audit(1597472845.595:4498): pid=18350 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3313/cgroup.controllers" dev="sda1" ino=16113 res=1 errno=0 06:27:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x40040001002105) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$SNDCTL_SEQ_CTRLRATE(r4, 0xc0045103, &(0x7f0000000080)=0x10001) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r7 = getpid() getpgid(r7) sched_getattr(r7, &(0x7f0000000040)={0x38}, 0x38, 0x0) 06:27:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:25 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/ignore_tunneled\x00', 0x2, 0x0) getdents64(r1, &(0x7f0000000040), 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:25 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000180)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="4d37d1569c699753e78351e12b6262da", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x4e22, 0x7ff, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x7}, {0xa, 0x4e22, 0x9, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xf80000}, 0x4, [0xfffffff8, 0xadb, 0xcc, 0x2, 0x2, 0x1, 0x101, 0x82]}, 0x5c) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_SUBDEV_S_SELECTION(r5, 0xc040563e, &(0x7f0000000140)={0x1, 0x0, 0x101, 0x5, {0x7, 0x4c41998b, 0x8, 0x6}}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mixer\x00', 0x410000, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:25 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4800, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:25 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x2, 0x34400) ioctl$EVIOCREVOKE(r3, 0x40044591, &(0x7f0000000080)=0x7) 06:27:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1431.652897][T18379] bond0: (slave bridge192): Enslaving as an active interface with an up link [ 1431.681884][T18390] bond0: (slave bridge192): Releasing backup interface [ 1431.915392][T18379] bond0: (slave bridge192): Enslaving as an active interface with an up link 06:27:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4c00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1f, r6, 0x511, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000400)=ANY=[@ANYBLOB="6e0a046ed312e20c0debc25d849e653300", @ANYRESHEX=r2, @ANYBLOB="20002cbd7000fddbdf25010000000000000008410000004c00180000040073797a3100"/98], 0x68}, 0x1, 0x0, 0x0, 0x8080}, 0x24000091) 06:27:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x40000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:26 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_RESIZE(r2, 0x5609, &(0x7f0000000100)={0x81, 0x0, 0xe7}) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_tid_address(&(0x7f0000000000)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) 06:27:26 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1432.148424][T18430] bond0: (slave bridge193): Enslaving as an active interface with an up link 06:27:26 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) sigaltstack(&(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000000)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) [ 1432.196879][T18439] bond0: (slave bridge193): Releasing backup interface 06:27:26 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r1 = open_tree(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x181100) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000140)={0x0, 0xc90}, &(0x7f0000000180)=0x8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140)=r7, 0x4) getsockopt$inet_sctp_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f0000000200)={r4, 0x2, 0x20, 0x0, 0x4, 0x5, 0x3, 0x3ff, {r7, @in={{0x2, 0x4e24, @private=0xa010101}}, 0x7fffffff, 0x3, 0x7fff, 0x20, 0x1}}, &(0x7f0000000340)=0xb0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuset.memory_pressure\x00', 0xb00000000065808, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r9], 0x4}}, 0x0) sendfile(r9, r8, 0x0, 0x100000002) ioctl$EVIOCGSW(r8, 0x8040451b, &(0x7f0000000000)=""/169) 06:27:26 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:26 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000340)="688282a0df8ec286069fc84ae7529ac4f01489878b8da5aab4350fdb86f66978387cdc475fa3721a3a1ed409e4672c05009eec2e606e6f7ecd26e80c1d5ea1bc065fc12af1e4f2d4cb833c7e95c95c5f81c64455c295bf3aec1cd31e30fbaef6e01740d43d460c2ba5fb48c80ab0200164cff64ffbddcd3399bd796346adbc38a939", &(0x7f00000006c0)="0d7f4b82ca36ec2dc1e777907f72d79819f4b67534ff2c2274dbb4cbf3517c3de0c009d2f277ddc26c377ceb187f3f92c72a8fb237abf0ab2547f9baf4446efb37048b9f4b5aaf918bf4477f298789f9999e5e1dcb5ca2bee04b8328af3cf52497e88ecaa5e8a03d56fa8df1e4aa09b8436cb83514e270b677b0a894e010f24c7b304eddc98aaf89bbe37a3ee4a5f6e47d56540281247c56f867038c8b25dac364e874821f7928f123ee9c71309ccdae2d2750bb9e6b7c995500d9b17c9b7e46dd9163bf8349f6401ab0dea997f6564059e6e109563ad3b5d937779a"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_delete(r3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:26 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x3f000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1432.547919][T18439] __nla_validate_parse: 4 callbacks suppressed [ 1432.547928][T18439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1432.613541][T18439] bond0: (slave bridge193): Enslaving as an active interface with an up link [ 1432.650610][T18483] bond0: (slave bridge193): Releasing backup interface 06:27:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x48000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6800, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:27 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x52, 0x7, 0x8b13, 0x5, 0x34, "b9e5cf0ce3d9d762ebff00", 0x80000001, 0x40000000}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:27 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000140)=0x1) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00000001c0)=0x101, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setpgid(0x0, 0x0) r3 = dup(r2) ioctl$DRM_IOCTL_MODE_ADDFB2(r3, 0xc06864b8, &(0x7f0000000040)={0x1, 0x1, 0x400, 0x8, 0x0, [0x0, 0xa18, 0x4, 0x6], [0x5, 0xfffffffa, 0xff, 0x3fe000], [0x9, 0x8, 0x80, 0x81], [0x9, 0x6, 0x1, 0x1]}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) fcntl$setstatus(r4, 0x4, 0x40000) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4000, 0x0, @ipv4={[], [], @remote}}, 0x1c) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32], 0x4}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1432.827705][T18486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1432.906798][T18489] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1432.943401][T18491] bond0: (slave bridge2): Releasing backup interface 06:27:27 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000140)={0x0, 0x5, 0x0, 0x0, 0x0, "00e5cf34000000000000684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) socket$inet_udplite(0x2, 0x2, 0x88) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x400, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x34) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000180)=0x20) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r3 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000000), &(0x7f0000000040)=0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0ca4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, &(0x7f0000000080)={0xf5, 0x7, 0x7, 0x7, 0x4, "6ec65fc3dd36daf5ef5e42d7b157d7622113f1"}) 06:27:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1433.200353][ T26] audit: type=1804 audit(1597472847.565:4499): pid=18519 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3320/cgroup.controllers" dev="sda1" ino=16316 res=1 errno=0 06:27:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1433.269109][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6c00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:27 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000340)="688282a0df8ec286069fc84ae7529ac4f01489878b8da5aab4350fdb86f66978387cdc475fa3721a3a1ed409e4672c05009eec2e606e6f7ecd26e80c1d5ea1bc065fc12af1e4f2d4cb833c7e95c95c5f81c64455c295bf3aec1cd31e30fbaef6e01740d43d460c2ba5fb48c80ab0200164cff64ffbddcd3399bd796346adbc38a939", &(0x7f00000006c0)="0d7f4b82ca36ec2dc1e777907f72d79819f4b67534ff2c2274dbb4cbf3517c3de0c009d2f277ddc26c377ceb187f3f92c72a8fb237abf0ab2547f9baf4446efb37048b9f4b5aaf918bf4477f298789f9999e5e1dcb5ca2bee04b8328af3cf52497e88ecaa5e8a03d56fa8df1e4aa09b8436cb83514e270b677b0a894e010f24c7b304eddc98aaf89bbe37a3ee4a5f6e47d56540281247c56f867038c8b25dac364e874821f7928f123ee9c71309ccdae2d2750bb9e6b7c995500d9b17c9b7e46dd9163bf8349f6401ab0dea997f6564059e6e109563ad3b5d937779a"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) timer_delete(r3) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1433.349380][T18510] bond0: (slave bridge194): Enslaving as an active interface with an up link [ 1433.387447][T18517] bond0: (slave bridge194): Releasing backup interface 06:27:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1433.715407][T18500] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7400, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:28 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:28 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4c000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xb) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000040), 0xfffffffffffffdce) 06:27:28 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000080)={0x40, 0x2, 0x3}, 0x10) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:28 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1433.911632][T18568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:28 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1433.963227][T18568] bond0: (slave bridge195): Enslaving as an active interface with an up link [ 1433.979480][ T26] audit: type=1804 audit(1597472848.345:4500): pid=18580 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2666/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 06:27:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7a00, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:28 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040001", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[], 0x4}, 0x1, 0x0, 0x0, 0x20040804}, 0x6c191c27fad451c5) sendfile(r4, r3, 0x0, 0x100000002) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000000)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:28 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1434.069592][T18584] bond0: (slave bridge195): Releasing backup interface 06:27:28 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:28 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet_udplite(0x2, 0x2, 0x88) accept4$bt_l2cap(0xffffffffffffffff, 0xfffffffffffffffd, &(0x7f0000000100), 0x80000) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$BLKIOOPT(r6, 0x1279, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) fstat(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) mount$bpf(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)='bpf\x00', 0x2000, &(0x7f0000000400)={[{@mode={'mode', 0x3d, 0x2}}], [{@fowner_eq={'fowner', 0x3d, r7}}, {@dont_measure='dont_measure'}, {@appraise='appraise'}, {@obj_role={'obj_role', 0x3d, 'q\xe8\r\xab\xa2F]AC\x02\x1d\xec#\x88\x85'}}, {@measure='measure'}, {@fowner_eq={'fowner'}}, {@subj_role={'subj_role', 0x3d, 'dont_measure'}}, {@smackfshat={'smackfshat', 0x3d, 'pcr'}}, {@uid_eq={'uid', 0x3d, r7}}, {@fowner_eq={'fowner'}}, {@subj_role={'subj_role', 0x3d, 'mode'}}, {@subj_role={'subj_role', 0x3d, '){vtM\xcd\x8f90\x12u\xf8:\n\xe0n\x8d\x9d2\xc1i\xf1\x96\xd0=L\x88\x19\x7f\xedx\xbe\xccG\a}\x10y\x15\xd8)$\xd2\xc8\xa3\xcc\xc4Avz\xc0\x0e\xd4eM(\x8e=dT\x92*\xde\x9c^\x8f\xae|Ls\xf1W\xf3\x9b\xdf\x83\x17w\x0fJ\x15\xdd\xf3\xd7\xbd\xc0\x8b\xe3itt\x86\xfe\xb8^\xca\xfb\xb2\xe2n\x06.\x01\x9c\xd1\x91\xd5\xd2}IN\xfa0|R>\xf6 \x01\x13\xb6\x8a\x80\xd4\x11\xec\x95\xfa\x93\xfbuP\xae\xac\xd70x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:28 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1434.415271][T18584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1434.442917][T18584] bond0: (slave bridge195): Enslaving as an active interface with an up link [ 1434.470519][T18584] bond0: (slave bridge195): Releasing backup interface 06:27:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4e135e92, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:29 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xbd21, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) setsockopt$sock_timeval(r3, 0x1, 0x43, &(0x7f0000000040), 0x10) r6 = open_tree(r3, &(0x7f0000000100)='./file0\x00', 0x81001) ioctl$KDSKBSENT(r6, 0x4b49, &(0x7f0000000300)={0x2, "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"}) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:29 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000380)) perf_event_open(&(0x7f0000000300)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_getparam(0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r4, &(0x7f00001f5000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000400)="c4c2318cbd6600000066bad004b05eee0f20d835080000000f22d8b8010000000f01d967400f01c966ba2100ed48b8a3090000000000000f23c80f21f8350000b0000f23f866ba4300b000eec401f9c640f750b9800000c00f3235004000000f30", 0x61}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) r5 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0xfffffffffffffff7, 0x80000) r6 = socket$inet_dccp(0x2, 0x6, 0x0) close(r6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f0000000080)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x101, 0x0, 0x78e0a4f79c3ec98e, 0xe, 0x5, 0xab17}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)={0x14, 0x4, 0x8, 0xf1a}, 0x40) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r7, 0x28, &(0x7f0000000240)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000200)={r8}, 0xc) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={r8, 0x3, 0x24}, 0xc) [ 1434.801916][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe0ff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:29 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1434.877263][T18663] bond0: (slave bridge196): Enslaving as an active interface with an up link 06:27:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000040), 0x4) [ 1434.980950][T18654] bond0: (slave bridge196): Releasing backup interface 06:27:29 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x2, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1435.257950][T18654] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x60000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:29 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:29 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffe0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:29 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x101, 0x0) ioctl$F2FS_IOC_SET_PIN_FILE(r0, 0x4004f50d, &(0x7f0000000100)=0x1) r3 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000001340), &(0x7f0000001380)=0x4) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r2, 0x110, 0x3) r4 = dup(r1) ioctl$USBDEVFS_IOCTL(0xffffffffffffffff, 0xc0105512, &(0x7f0000000080)=@usbdevfs_driver={0x80000000, 0x1f, &(0x7f0000000240)="ec0c95e06ee654421165ccab4b753e6309f10c9cc9ff2730f48135293f9967c0ae2bbea1b3ff75766a66510eda2244dab8aa2dc8cbffcb3f9ca04da7ddce5aa3c36148027884b2a0a6d71996a27aa08356b8be60baf4c16fd029ebb019a8cd5fc911c055be3f6f205b82cece7b30ddc1c128dbf9f222de70fca5e7487f27a9f3f03a22d1f9cf5cb386dbf804d247598c32a692462b47dddca637ae89902e4a0d6c3b2e9285372b6ddfcb86c734dcb5b4b4d8ee0ec75ac63b833925075bd310"}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r5 = getpid() getpgid(r5) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r5, 0x100000001, &(0x7f0000000340)=""/4096) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000140)='cgroup.subtree_control\x00', 0x2, 0x0) fsetxattr$trusted_overlay_opaque(r6, &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000300)='y\x00', 0xffffffffffffff48, 0x3) 06:27:29 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1435.429402][T18717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1435.502529][T18724] bond0: (slave bridge197): Enslaving as an active interface with an up link [ 1435.532345][T18717] bond0: (slave bridge197): Releasing backup interface [ 1435.747015][T18724] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1435.768975][T18724] bond0: (slave bridge197): Enslaving as an active interface with an up link [ 1435.787021][T18724] bond0: (slave bridge197): Releasing backup interface 06:27:30 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x30000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:30 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0xffffffffffffffff, 0x4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r6, 0x541b, &(0x7f0000000080)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) write$ppp(0xffffffffffffffff, &(0x7f0000000040)="8c3157323fca71653837f9f88cec7f370ed52a99cd6c197af7d66325aab2f46a31ac7657f5994a619fbde36cd57d41", 0x2f) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100)='ethtool\x00') setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x65580000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:30 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1436.110867][T18747] bond0: (slave bridge198): Enslaving as an active interface with an up link 06:27:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x34000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:30 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1436.170060][T18759] bond0: (slave bridge198): Releasing backup interface 06:27:30 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:30 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) ioctl$KVM_GET_REGS(r3, 0x8090ae81, &(0x7f0000000300)) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r8, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000040)={r8, 0x2, 0x4ce}, &(0x7f0000000080)=0x8) 06:27:30 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x400300, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1436.515706][T18747] bond0: (slave bridge198): Enslaving as an active interface with an up link 06:27:30 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1436.623603][T18801] bond0: (slave bridge198): Releasing backup interface 06:27:31 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x68000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:31 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x1000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:31 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = pidfd_getfd(r1, r0, 0x0) write$P9_RWSTAT(r4, &(0x7f0000000040)={0x7, 0x7f, 0x1}, 0x7) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:31 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1437.067730][T18829] bond0: (slave bridge199): Enslaving as an active interface with an up link [ 1437.115389][T18829] bond0: (slave bridge199): Releasing backup interface 06:27:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:31 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1437.557391][T18842] __nla_validate_parse: 3 callbacks suppressed [ 1437.557400][T18842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1437.617822][T18842] bond0: (slave bridge199): Enslaving as an active interface with an up link [ 1437.668337][T18879] bond0: (slave bridge199): Releasing backup interface 06:27:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x6c000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:32 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x2000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x8a00, 0x0) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:32 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140)=r7, 0x4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000040)={r7, 0x2, 0xf800, 0x2, 0x4, 0x6}, &(0x7f0000000080)=0x14) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:32 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x3000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1438.068306][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:32 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1438.149453][T18900] bond0: (slave bridge200): Enslaving as an active interface with an up link [ 1438.179966][T18899] bond0: (slave bridge200): Releasing backup interface 06:27:32 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:32 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1438.519141][T18899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x74000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:33 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1438.572186][T18900] bond0: (slave bridge200): Enslaving as an active interface with an up link 06:27:33 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x4}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:33 executing program 1: r0 = openat$drirender128(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/renderD128\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000400)={0xa, &(0x7f0000000380)=[{}, {}, {}, {}, {}, {}, {}, {}, {0x0}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(0xffffffffffffffff, 0x4010641c, &(0x7f0000000540)={r1, &(0x7f0000000440)=""/228}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r0, 0xc010641d, &(0x7f0000000180)={r1, &(0x7f0000000080)=""/255}) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x18f40, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$KVM_GET_MSR_INDEX_LIST(r3, 0xc004ae02, &(0x7f0000000200)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f00000001c0)="d9ee881377c00f874c6c51285423275c", 0x10) r5 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) preadv(r6, &(0x7f0000001480)=[{&(0x7f0000000040)=""/81, 0x51}, {&(0x7f0000000100)=""/107, 0x6b}, {&(0x7f0000000240)=""/248, 0xf8}, {&(0x7f00000001c0)}, {&(0x7f0000000340)=""/33, 0x21}, {&(0x7f0000000380)=""/198, 0xc6}, {&(0x7f0000000480)=""/4096, 0x1000}], 0x7, 0x5, 0xfb7) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:33 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1438.757008][T18946] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:33 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x5000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:33 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7400, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:33 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/timer_list\x00', 0x0, 0x0) sendmsg$DCCPDIAG_GETSOCK(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x3a4, 0x13, 0x20, 0x70bd2a, 0x25dfdbfe, {0x2a, 0x7, 0x7, 0x9, {0x4e21, 0x4e21, [0x0, 0x3f, 0x8, 0x2], [0x6, 0x2, 0xfffffff9, 0x10000], 0x0, [0x75, 0x2]}, 0x400, 0x7}, [@INET_DIAG_REQ_BYTECODE={0xe, 0x1, "e6669015f78d0bc0df92"}, @INET_DIAG_REQ_BYTECODE={0x5f, 0x1, "8e37b4f9ca05bb8c57aca5f04d904a339be2282309717320387b6633f88bd9d0ada144919e2ef58b7436b374005b7e04e9cb40a0283ec94ea91ebd9715e71a337d62d0aa8fd6837c99a74c9dbdcc5b161b5a06bacbaa205527486e"}, @INET_DIAG_REQ_BYTECODE={0xb, 0x1, "ec1ac031267986"}, @INET_DIAG_REQ_BYTECODE={0x7c, 0x1, "756b5a96debdb79dd29ce00363ba431b7c3b8ca2125a5d7f21b2ed74c082cabb6cc38eff8dd63668883ebf1cfb6f9463bb6c96ffcdc5cb04db7925a06d668392b159865f02202713fc44b3551af400eea6e0271f17852c9273d029904eed0cf7572917c7798b5cab54071328d5b0398c2b6c76abff6cba21"}, @INET_DIAG_REQ_BYTECODE={0x9b, 0x1, "71f45ed7b9dbd9521a4b4925931ffcc746ec7deeada2928bbb5766298e018dec82e3f577f61f6ce02665f370dacb217f7376d306d61bb1538cdbb6407f8dd1f0757af7a12ef0a158d3e666b2108eaae0623ed5a1513565ae2272d28904cbd2748bd458f391d8736989aad7de1adafa5b4e021350a5e9e8881dc180d74b74f706a6b4aa40209e717c8e277276db0dc44bf06730d64b27d1"}, @INET_DIAG_REQ_BYTECODE={0xd5, 0x1, "f3e59d14cd8ef8e147107d5522d230bfc031c19c3526142f7930f1f30f7c328d9eed54b1d77f07e4dbda9b6eff3e82d3daee6427978d26e14b419c012c4e3489df6ca8d0bd30e836577ba884ec80f6ba3b200e536276b8560b7e5eb7716e354fec51a979fe048d7908d657c8566675187c63781f15c158d2e052bb7b55444fba16d856d9896ab18ce46cc2c2156c0654a5e21c96e76251616f54d8080f0e31c3618f406e642dcb524f61d3aeb0e44bde909fd3bdc93f267ccce4e147763881ea663cf1c41449bc07e24b5c3c2e32b21b97"}, @INET_DIAG_REQ_BYTECODE={0xeb, 0x1, "2a45d23e6f45362e8abfca48eb9936ae33cd0cf2f990e1b953b2a8f091808457e1643010aa84b3e7ad8e81c4a66f6c19a18bc8fa13bf1ec96f8e8bfa842e000c5bb1f29f54d89f6cd80b5eee8ef84c416f3633fb9c1365a47afcf780813a8186f4fe9c0bc2e786088cb4ffd9dd9d02e7bcc009f839d4c92e38ec9ab0c34cf9bd8b48b2d827a69e6e6b7abeeac9bf2505b8e3e1b5c63faf2e524a5be60c356b9a8d46cda25ba4d08c1586e3e60bd16f48b7d40079ce789af8a4d50ad845806991d0a36a985536e69596a392ef13ee117a18dafab0845c17225a9811c9cd99d0a37651bc1cf58d01"}]}, 0x3a4}, 0x1, 0x0, 0x0, 0x4888}, 0x40) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) [ 1438.852600][T18954] bond0: (slave bridge201): Enslaving as an active interface with an up link 06:27:33 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1438.944861][T18946] bond0: (slave bridge201): Releasing backup interface 06:27:33 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000300)={0xffffff5a, 0x3, "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"}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000440)={0x128, 0x1403, 0x800, 0x70bd25, 0x25dfdbfb, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6_vti0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'geneve0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_to_bond\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'lo\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_hsr\x00'}}]}, 0x128}, 0x1, 0x0, 0x0, 0x4040000}, 0x2) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) getsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000080), &(0x7f0000000100)=0x4) r7 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) fsetxattr$trusted_overlay_upper(r7, &(0x7f0000000040)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0xbd, 0x1, 0x6e, "544dc4d90813c80d8ba21e6bef22d467", "bb98fbd09c81c4f5b10df6faca820d03b4c9d908fa041bfd2aa47c7c74663c7145ec6aa3a0a1fc9c0978f29b1e2d2061cfee8a80e9411d46aeceb00db9018067b61aadacd3e3b2b258941ffd4602ab4bb67e854cc60a5ab82bec37fbf8b45cf7371484df95270424d6eb50eeb809e1d1675de0a2c4e9986072bb3f333d6903be2e05f7849f25ee038ab854da02794dc81f537c446e3b75165b6702636ef2bab8aff0b4530bea0cb0"}, 0xbd, 0x0) [ 1439.305741][T18954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1439.363033][T18954] bond0: (slave bridge201): Enslaving as an active interface with an up link [ 1439.402676][T18954] bond0: (slave bridge201): Releasing backup interface 06:27:34 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x7a000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:34 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$ASHMEM_PURGE_ALL_CACHES(r0, 0x770a, 0x0) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651f8684fbe01000800"}) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$EXT4_IOC_GROUP_ADD(r2, 0x40286608, &(0x7f0000000000)={0x1, 0x55b, 0x3b, 0x8, 0x136, 0xfffe}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:34 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x10000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:34 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000140)=ANY=[@ANYBLOB="d608ffde3293666247ba2d10edd72857fd", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) ioctl$PIO_UNIMAPCLR(r0, 0x4b68, &(0x7f0000000040)={0x6b, 0x6, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$TIOCGLCKTRMIOS(r4, 0x5456, &(0x7f0000000100)={0x5, 0x1ff, 0x2, 0xfffffff8, 0x18, "6aa075de941efb1f549eb448fdc0bab3435253"}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:34 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1439.772027][T19001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1439.801970][T19000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:34 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1439.862340][T19001] bond0: (slave bridge2): Enslaving as an active interface with an up link 06:27:34 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) dup(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x8) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) [ 1439.927004][T19000] bond0: (slave bridge202): Enslaving as an active interface with an up link [ 1439.951951][T19017] bond0: (slave bridge2): Releasing backup interface 06:27:34 executing program 1: ioctl$TIOCGDEV(0xffffffffffffffff, 0x80045432, &(0x7f0000000000)) r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x4, "b9e5cfb4d25cc37f51fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$TIOCGPTLCK(r2, 0x80045439, &(0x7f0000000080)) dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = fsmount(r3, 0x0, 0x0) bind$can_raw(r6, &(0x7f0000000100), 0x10) writev(r1, &(0x7f00000004c0), 0x0) 06:27:34 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:34 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1440.350478][T19015] bond0: (slave bridge202): Releasing backup interface [ 1440.557194][T19015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1440.593060][T19015] bond0: (slave bridge202): Enslaving as an active interface with an up link [ 1440.616458][T19015] bond0: (slave bridge202): Releasing backup interface 06:27:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x81000000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:35 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) write$P9_RATTACH(0xffffffffffffffff, &(0x7f0000000000)={0x14, 0x69, 0x2, {0x1, 0x0, 0x5}}, 0x14) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) accept$ax25(r2, 0x0, &(0x7f0000000040)) 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x20020, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x8000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:35 executing program 3: r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/ocfs2_control\x00', 0x800, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r0, 0xc028ae92, &(0x7f0000000280)={0x40, 0xffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f00000000c0), 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x100000002) accept$netrom(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@rose, @rose, @null, @netrom, @rose, @netrom]}, &(0x7f0000000340)=0x48) r6 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x420000, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, r8, 0x1, 0x0, 0x0, {0x2}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6}]}]}, 0x20}, 0x1, 0x200000000000000}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r6, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r8, 0x2, 0x70bd28, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x4000080) 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1440.839173][T19063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x9000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1440.917981][T19072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:35 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) ioctl$TIOCL_GETMOUSEREPORTING(r0, 0x541c, &(0x7f0000000000)) [ 1440.961211][T19063] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1440.996616][T19080] bond0: (slave bridge203): Enslaving as an active interface with an up link [ 1441.019782][T19074] bond0: (slave bridge3): Releasing backup interface 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1441.268920][T19072] bond0: (slave bridge203): Releasing backup interface 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:35 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x88470000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:35 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000200)=""/148) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff8db1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @local}}, 0x6, 0x1}, &(0x7f0000000100)=0x90) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) 06:27:35 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x4000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:35 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) r4 = userfaultfd(0x800) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ioctl$FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, &(0x7f0000000240)={0xffffffffffff8000, 0x8, 0x8, 0x0, 0x0, [{}, {{r4}, 0x401}, {{r3}, 0x34}, {{r6}, 0x8}, {{r9}, 0xde32}, {{r1}}, {{r10}}, {{r3}, 0x5}]}) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @private=0xa010102}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:35 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:35 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xa000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1441.567044][T19080] bond0: (slave bridge203): Enslaving as an active interface with an up link [ 1441.763372][T19132] bond0: (slave bridge4): Enslaving as an active interface with an up link 06:27:36 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xb000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:36 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1441.803805][T19135] bond0: (slave bridge204): Enslaving as an active interface with an up link [ 1441.839829][ T26] audit: type=1804 audit(1597472856.205:4501): pid=19147 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3330/cgroup.controllers" dev="sda1" ino=16309 res=1 errno=0 06:27:36 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x20100, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) setsockopt$inet6_IPV6_PKTINFO(r2, 0x29, 0x32, &(0x7f0000000040)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, r6}, 0x14) mmap$fb(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x4, 0x80010, r1, 0x12000) [ 1441.923682][ T26] audit: type=1804 audit(1597472856.245:4502): pid=19151 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3330/cgroup.controllers" dev="sda1" ino=16309 res=1 errno=0 [ 1441.948057][T19148] bond0: (slave bridge4): Releasing backup interface 06:27:36 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:36 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1442.192891][T19145] bond0: (slave bridge204): Releasing backup interface 06:27:36 executing program 4: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) semctl$GETVAL(0x0, 0x1, 0xc, &(0x7f0000000200)=""/148) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff8db1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r9, 0x84, 0x1f, &(0x7f0000000000)={r5, @in={{0x2, 0x4e23, @local}}, 0x6, 0x1}, &(0x7f0000000100)=0x90) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) [ 1442.494544][ T26] audit: type=1804 audit(1597472856.855:4503): pid=19149 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2681/cgroup.controllers" dev="sda1" ino=16308 res=1 errno=0 [ 1442.552691][T19145] bond0: (slave bridge204): Enslaving as an active interface with an up link [ 1442.570225][T19162] __nla_validate_parse: 5 callbacks suppressed [ 1442.570233][T19162] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1442.630602][T19145] bond0: (slave bridge204): Releasing backup interface 06:27:37 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x88480000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:37 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xc000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:37 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x2500, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f0000000080), 0x4) 06:27:37 executing program 1: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) syz_open_dev$rtc(&(0x7f0000000100)='/dev/rtc#\x00', 0x4, 0xc8082) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYRES16, @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) write$binfmt_script(r3, &(0x7f0000000340)=ANY=[@ANYRESHEX=r0, @ANYBLOB="111e711e5c080d972af4d25cbf5ce91456310ce0e8e8e194013ef734330e22711635de476f206e10f54e354765a5a8e146efb847d05d1c16c6924dc590f1baed236fe3bc6436291c792fe06f37581a248b6d60c4c75be2ee086be2cd3532e22804eaa830b285", @ANYBLOB="91277f6e51e4090963b015efb7a0582146cb940e7371cde615fde2152b8219792aa20370b40913d0f526c29bffdcb05a5215ecf7da31e20bfe0c6744762e0a42977b0d6df631270ad3d78f00da6764e67aad79b5212bbfdee807f0646e0aec3b80c687691cd5fcf537bfadeafb223dd0645bdcbe485b04b52b32761d5064e7a6d6e882e41de54b435324f505a2db3d29655adeab2a4442899be2a6d3e84dec37d0d2d8397a8cca0782cc4d5f73654f68", @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f0000000000)={0x5, "c6f35484e34bdae18d3c8babc3c2b98f3a5be9b2788f620b7547a2e3725d6a5e", 0x1, 0x9c06, 0x4, 0xc00000, 0x2020111, 0x2}) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$TCSETS2(r6, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f000038e000/0x1000)=nil, 0x1000, 0x0, 0x28011, r7, 0x0) openat$cgroup_ro(r7, &(0x7f0000000080)='cpuacct.usage_all\x00', 0x0, 0x0) 06:27:37 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) tee(r1, r4, 0x1f, 0x2) 06:27:37 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1442.928264][T19208] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1442.950591][ T26] audit: type=1804 audit(1597472857.315:4504): pid=19210 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3332/cgroup.controllers" dev="sda1" ino=16313 res=1 errno=0 [ 1443.034861][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:37 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xd000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:37 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:37 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) ioctl$NBD_DISCONNECT(r0, 0xab08) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) [ 1443.091094][T19214] bond0: (slave bridge5): Enslaving as an active interface with an up link [ 1443.110740][T19215] bond0: (slave bridge205): Enslaving as an active interface with an up link [ 1443.132554][T19208] bond0: (slave bridge5): Releasing backup interface 06:27:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x88470000, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1443.412848][T19226] bond0: (slave bridge205): Releasing backup interface [ 1443.631794][T19248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1443.661226][T19250] bond0: (slave bridge1): Enslaving as an active interface with an up link [ 1443.695642][T19252] bond0: (slave bridge1): Releasing backup interface [ 1443.864732][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1443.876921][T19226] bond0: (slave bridge205): Enslaving as an active interface with an up link [ 1443.898824][T19259] bond0: (slave bridge205): Releasing backup interface 06:27:38 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x88a8ffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:38 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:38 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x810, r4, 0x10000000) r6 = io_uring_setup(0x3013, &(0x7f0000000200)) r7 = io_uring_setup(0x1, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) ioctl$KDSETMODE(r0, 0x4b3a, 0x1) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r3, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) 06:27:38 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x1200, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:38 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1444.145879][T19269] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1444.198249][T19278] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:38 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = getpid() getpgid(r6) ioctl$TIOCSPGRP(r3, 0x5410, &(0x7f0000000040)=r6) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) 06:27:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xf000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1444.277641][T19269] bond0: (slave bridge2): Enslaving as an active interface with an up link [ 1444.308296][T19288] bond0: (slave bridge206): Enslaving as an active interface with an up link 06:27:38 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = mmap$IORING_OFF_SQES(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x810, r4, 0x10000000) r6 = io_uring_setup(0x3013, &(0x7f0000000200)) r7 = io_uring_setup(0x1, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r1, r5, &(0x7f0000000080)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, {0x0, r8}}, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:38 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1444.366209][T19287] bond0: (slave bridge2): Releasing backup interface 06:27:38 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x10000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1444.661981][T19288] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1444.678348][T19322] bond0: (slave bridge206): Releasing backup interface 06:27:39 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x925e134e, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:39 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:39 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x3) 06:27:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xc00, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x11000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:39 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = accept(r4, &(0x7f0000000040)=@nl=@proc, &(0x7f0000000100)=0x80) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)={0x0}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000240)={r6, 0x8, 0x20}, &(0x7f0000000280)=0xc) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1, &(0x7f00000000c0), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000780)={&(0x7f0000000340)={0x424, 0x3f4, 0x100, 0x70bd2d, 0x25dfdbfb, {0x10, 0x0, 0xe, [0x4, 0x0, 0x40, 0x7, 0x33b7, 0x5, 0x10000, 0x42, 0x7, 0x56, 0xfffffffc, 0x0, 0x5, 0x6, 0x10000, 0x2, 0xfffffff8, 0x4b, 0x8, 0x7, 0x40, 0x2, 0x0, 0x1000, 0xccf, 0xa86, 0x5, 0x17800000, 0x1f, 0xfffffff7, 0xfffffff7, 0x800, 0x10000, 0x8, 0x1, 0x1, 0x6, 0x63a, 0x101, 0x7, 0x0, 0x4375, 0xfffffffb, 0x1000, 0x9, 0x4, 0x9, 0x4, 0xb2c, 0x5, 0x7, 0x80000000, 0xb4ae, 0x4, 0x9, 0x8, 0x6, 0xbfc, 0x0, 0x5, 0x4, 0x0, 0xf2f, 0x9], [0xd987, 0x7, 0xbde, 0x6, 0xffffffff, 0x7, 0xb4, 0x40000, 0x7ff, 0x0, 0x9, 0x7f, 0x5, 0x400, 0x3, 0x1, 0x5, 0x4, 0x3, 0x3, 0x6, 0x79, 0x9, 0x1, 0x8, 0x3f, 0x10001, 0xd5, 0x1f, 0x9, 0x4, 0x4, 0x3, 0x8, 0xffffffff, 0x5, 0x6, 0x6, 0x7f, 0x4, 0x566, 0x1f, 0x7, 0x4, 0x2, 0xfff, 0x74d3, 0x4, 0x401, 0x0, 0x6, 0x1ff, 0x100, 0x7, 0x9, 0x1, 0x1, 0x3, 0xce2, 0x1, 0x4, 0x1, 0x8, 0x9], [0x92, 0x7f, 0x7, 0x0, 0x8, 0x3, 0x7fffffff, 0xfffffe00, 0xc3, 0x7fffffff, 0x7fffffff, 0x1fffc0, 0x3, 0x1, 0x3ff, 0x3ff, 0x81, 0x3, 0x7, 0x8000, 0x9, 0x20, 0x81, 0x8, 0x2, 0x7ff, 0x3, 0x1, 0xfffffffd, 0x2, 0x3, 0x6, 0x101, 0xffffffff, 0xdf, 0x1, 0x7c0, 0x1ff, 0x7, 0x0, 0x6, 0x10000, 0x9, 0x3ae, 0x1ff, 0x400, 0x51, 0x0, 0x7f8000, 0x0, 0x7, 0x1000, 0x2c1e815d, 0xc7c5, 0x9, 0x0, 0x8, 0x1, 0x1, 0x8001, 0xe, 0xffff, 0x3, 0x3], [0x401, 0x6, 0xf7, 0x800, 0x4, 0x8000, 0x16, 0x1, 0xf8, 0x7ff, 0x2, 0x0, 0x81, 0x4, 0x3, 0x9, 0x9, 0xff, 0x7ff, 0x2, 0x2, 0x3, 0x4, 0x0, 0xffffff15, 0xffffff80, 0x9, 0xfffffffd, 0x5733, 0x9, 0x8baa, 0x8000, 0x41d, 0x20, 0xbb, 0x1, 0x1, 0x7b, 0x8001, 0x9, 0x5, 0x3, 0x40, 0x5, 0x80, 0x10, 0x1, 0x7, 0xffffffff, 0x400, 0x100, 0x8, 0xffff8000, 0x3f, 0x9, 0x65ab, 0x4, 0x80, 0x4, 0x80000000, 0x6, 0x3, 0x7fff, 0x8], 0x1, ['\x00']}, ["", "", ""]}, 0x424}, 0x1, 0x0, 0x0, 0x40881}, 0x48010) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$KVM_INTERRUPT(r7, 0x4004ae86, &(0x7f00000002c0)=0x4) 06:27:39 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000280)={0x1, 0x0, {0x7, 0x7fffffff, 0x10000000, 0x40}}) [ 1444.968504][T19347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:27:39 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1445.042066][T19357] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:39 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000280)={0x1, 0x0, {0x7, 0x7fffffff, 0x10000000, 0x40}}) 06:27:39 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x12000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1445.104500][T19358] bond0: (slave bridge6): Enslaving as an active interface with an up link [ 1445.142648][T19347] bond0: (slave bridge6): Releasing backup interface 06:27:39 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x1002}, 0x18) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:39 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000280)={0x1, 0x0, {0x7, 0x7fffffff, 0x10000000, 0x40}}) [ 1445.477690][T19364] bond0: (slave bridge207): Enslaving as an active interface with an up link [ 1445.561201][T19357] bond0: (slave bridge207): Releasing backup interface [ 1445.759882][T19364] bond0: (slave bridge207): Enslaving as an active interface with an up link 06:27:40 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:40 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:40 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x1002}, 0x18) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x2a, &(0x7f00000000c0), 0x4) 06:27:40 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x1c, &(0x7f00000000c0), 0x4) 06:27:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x20000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:40 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f00000003c0)={&(0x7f0000000300), 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042cbd7000e365df25120efe74db9db41abfe6972000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x24000081) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000200)=0x1, 0x85) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000000)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3d}}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r0, 0x29, 0x36, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r2) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000440)={{0x5, 0x6}, {0x7, 0x9}, 0x7fff, 0x2, 0x8}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, 0xffffffffffffffff, 0x0, 0x10000003b) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f00000000c0)={{{@in6=@ipv4={[], [], @broadcast}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@dev}}, &(0x7f00000001c0)=0xe8) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r3, 0x89f6, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000240)={'syztnl0\x00', r6, 0x2f, 0x6, 0x4, 0x8, 0x16, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, [], 0x1}, 0x8, 0x8, 0x6, 0x8ce}}) getsockopt$IPT_SO_GET_REVISION_MATCH(r2, 0x0, 0x42, &(0x7f0000000040)={'icmp\x00'}, &(0x7f0000000080)=0x1e) 06:27:40 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:40 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1446.024231][T19436] bond0: (slave bridge208): Enslaving as an active interface with an up link 06:27:40 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x3f000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:40 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@remote, 0x9, 0x0, 0x0, 0x0, 0x1ff, 0x1002}, 0x18) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1446.067758][T19440] bond0: (slave bridge208): Releasing backup interface 06:27:40 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1446.206955][ T26] audit: type=1804 audit(1597472860.575:4505): pid=19448 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527366050/syzkaller.tfcsqH/2550/cgroup.controllers" dev="sda1" ino=16310 res=1 errno=0 [ 1446.500341][T19440] bond0: (slave bridge208): Enslaving as an active interface with an up link [ 1446.511048][T19440] bond0: (slave bridge208): Releasing backup interface 06:27:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xc3ffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:41 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:41 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x40000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:41 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x48000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:41 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1446.878777][T19500] bond0: (slave bridge209): Enslaving as an active interface with an up link 06:27:41 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1446.948696][T19512] bond0: (slave bridge209): Releasing backup interface 06:27:41 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xefffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:41 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) r5 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$VIDIOC_S_DV_TIMINGS(r5, 0xc0845657, &(0x7f00000001c0)={0x0, @reserved}) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x4c000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1447.266129][T19500] bond0: (slave bridge209): Enslaving as an active interface with an up link 06:27:41 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1447.400066][T19549] bond0: (slave bridge210): Enslaving as an active interface with an up link [ 1447.414248][T19549] bond0: (slave bridge210): Releasing backup interface 06:27:41 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:41 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x60000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:42 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:42 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x3, 0x0) getsockopt$sock_timeval(r4, 0x1, 0x15, &(0x7f0000000100), &(0x7f0000000140)=0x10) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1447.801668][T19576] __nla_validate_parse: 6 callbacks suppressed [ 1447.801677][T19576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1447.876685][T19583] bond0: (slave bridge210): Enslaving as an active interface with an up link [ 1447.946484][T19576] bond0: (slave bridge210): Releasing backup interface 06:27:42 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xf0ffffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x68000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:42 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:42 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x6c000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:42 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:42 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1448.317741][T19626] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:42 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1448.420812][T19633] bond0: (slave bridge211): Enslaving as an active interface with an up link 06:27:42 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x74000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1448.462164][T19626] bond0: (slave bridge211): Releasing backup interface [ 1448.715064][T19633] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1448.738950][T19633] bond0: (slave bridge211): Enslaving as an active interface with an up link [ 1448.789060][T19633] bond0: (slave bridge211): Releasing backup interface 06:27:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffa888, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:43 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:43 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x7a000000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:43 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, 0x0, 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:43 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x9effffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1449.043199][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:43 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1449.143952][T19697] bond0: (slave bridge212): Enslaving as an active interface with an up link [ 1449.203071][T19691] bond0: (slave bridge212): Releasing backup interface 06:27:43 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffff7f, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:43 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:43 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xbd210000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1449.392590][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:43 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:43 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x0, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1449.534137][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:43 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xe0ffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:44 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1449.610795][T19743] bond0: (slave bridge213): Enslaving as an active interface with an up link 06:27:44 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1449.686398][T19752] bond0: (slave bridge213): Releasing backup interface 06:27:44 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffff9e, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:44 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xefffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1449.950809][T19743] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:44 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xf0ffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:44 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1450.097603][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:44 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8640, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:44 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1450.180954][T19804] bond0: (slave bridge214): Enslaving as an active interface with an up link [ 1450.227237][T19798] bond0: (slave bridge214): Releasing backup interface 06:27:44 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1450.515341][T19804] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1450.532075][T19804] bond0: (slave bridge214): Enslaving as an active interface with an up link [ 1450.551591][T19804] bond0: (slave bridge214): Releasing backup interface 06:27:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffc3, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:45 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xfdffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:45 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xfeffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1450.797001][T19853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:45 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1450.898770][T19864] bond0: (slave bridge215): Enslaving as an active interface with an up link [ 1450.973183][T19853] bond0: (slave bridge215): Releasing backup interface 06:27:45 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffef, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:45 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffff0000, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:45 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r0, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:45 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffffff7f, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1451.377203][T19912] bond0: (slave bridge216): Enslaving as an active interface with an up link 06:27:45 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1451.448248][T19912] bond0: (slave bridge216): Releasing backup interface [ 1451.703194][T19943] bond0: (slave bridge216): Enslaving as an active interface with an up link [ 1451.723692][T19943] bond0: (slave bridge216): Releasing backup interface 06:27:46 executing program 1: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 5: exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:46 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xfffffff0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffffff9e, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 1: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffffffe0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:46 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1452.016636][T19960] bond0: (slave bridge217): Enslaving as an active interface with an up link 06:27:46 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1452.062351][T19960] bond0: (slave bridge217): Releasing backup interface 06:27:46 executing program 1: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:46 executing program 4: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1452.451024][T19999] bond0: (slave bridge217): Enslaving as an active interface with an up link [ 1452.469834][T19999] bond0: (slave bridge217): Releasing backup interface 06:27:46 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0xa, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:46 executing program 5: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:46 executing program 4: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:46 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffffffef, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:46 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 4: exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xfffffff0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:47 executing program 1: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, 0x0, 0x0) [ 1452.799324][T20019] bond0: (slave bridge218): Enslaving as an active interface with an up link 06:27:47 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1452.872452][T20032] __nla_validate_parse: 6 callbacks suppressed [ 1452.872461][T20032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0xc, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:47 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xfffffffd, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:47 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, 0x0, 0x0) 06:27:47 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, 0x0, 0x0) [ 1453.086352][T20053] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:47 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1453.186395][T20062] bond0: (slave bridge219): Enslaving as an active interface with an up link 06:27:47 executing program 4: clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x4) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1453.238253][T20062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:47 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x10, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xfffffffe, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:47 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0), 0x0) 06:27:47 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0), 0x0) [ 1453.407826][T20088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:47 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1453.479285][T20095] bond0: (slave bridge220): Enslaving as an active interface with an up link 06:27:47 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:47 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0xffffffff, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1453.522329][T20095] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:47 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x25, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0), 0x0) 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1453.738631][T20120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) [ 1453.841586][T20129] bond0: (slave bridge221): Enslaving as an active interface with an up link [ 1453.879502][T20120] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x0, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1453.902156][T20140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0xc0, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x2, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x3, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{0x0}], 0x1) [ 1454.076686][T20168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1454.147596][T20168] bond0: (slave bridge222): Enslaving as an active interface with an up link 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1) [ 1454.195515][T20178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0xec0, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1) 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, 0x0, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1454.410433][T20212] bond0: (slave bridge223): Enslaving as an active interface with an up link 06:27:48 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x5, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:48 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:48 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1) 06:27:48 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x33fe0, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:48 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:49 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)}], 0x1) [ 1454.705978][T20252] bond0: (slave bridge224): Enslaving as an active interface with an up link 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x200000e8, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:49 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:49 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x9effffff, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:49 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, 0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x8, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1454.993418][T20297] bond0: (slave bridge225): Enslaving as an active interface with an up link [ 1455.030276][T20301] bond0: (slave bridge1): Enslaving as an active interface with an up link 06:27:49 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x7ffff000, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1455.076744][T20301] bond0: (slave bridge1): Releasing backup interface 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1455.506524][T20345] bond0: (slave bridge226): Enslaving as an active interface with an up link 06:27:49 executing program 3 (fault-call:2 fault-nth:0): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:49 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, 0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:49 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x2, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xa, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:50 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1455.707492][T20399] FAULT_INJECTION: forcing a failure. [ 1455.707492][T20399] name failslab, interval 1, probability 0, space 0, times 0 [ 1455.744323][T20400] bond0: (slave bridge227): Enslaving as an active interface with an up link [ 1455.768871][T20399] CPU: 0 PID: 20399 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0 [ 1455.777205][T20399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1455.787251][T20399] Call Trace: [ 1455.790542][T20399] dump_stack+0x1f0/0x31e [ 1455.794882][T20399] should_fail+0x38a/0x4e0 [ 1455.799307][T20399] ? tty_write+0x308/0x940 [ 1455.803727][T20399] should_failslab+0x5/0x20 [ 1455.808231][T20399] slab_pre_alloc_hook+0x4c/0xe0 [ 1455.813167][T20399] ? tty_write+0x308/0x940 [ 1455.817591][T20399] __kmalloc+0x6c/0x320 [ 1455.821758][T20399] ? mutex_trylock+0x1df/0x2a0 [ 1455.826525][T20399] tty_write+0x308/0x940 [ 1455.830776][T20399] ? n_tty_read+0x1ba0/0x1ba0 [ 1455.835458][T20399] do_iter_write+0x441/0x610 [ 1455.840062][T20399] do_writev+0x23f/0x4a0 [ 1455.844316][T20399] ? lock_is_held_type+0xb3/0xe0 [ 1455.849273][T20399] ? syscall_enter_from_user_mode+0x24/0x190 [ 1455.855257][T20399] ? lockdep_hardirqs_on+0x49/0xf0 [ 1455.860372][T20399] ? syscall_enter_from_user_mode+0x24/0x190 [ 1455.866353][T20399] do_syscall_64+0x31/0x70 [ 1455.870768][T20399] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1455.876667][T20399] RIP: 0033:0x45d239 [ 1455.880561][T20399] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1455.900164][T20399] RSP: 002b:00007fdebc842c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 1455.908576][T20399] RAX: ffffffffffffffda RBX: 0000000000038d40 RCX: 000000000045d239 06:27:50 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1455.916547][T20399] RDX: 0000000000000001 RSI: 00000000200004c0 RDI: 0000000000000003 [ 1455.924521][T20399] RBP: 00007fdebc842ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.932515][T20399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.940486][T20399] R13: 00007fff52779dbf R14: 00007fdebc8439c0 R15: 000000000118cf4c 06:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xb, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:50 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 3 (fault-call:2 fault-nth:1): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:50 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0xa, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:50 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xc, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:50 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(0x0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1456.382514][T20450] bond0: (slave bridge228): Enslaving as an active interface with an up link 06:27:50 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:50 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:50 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:50 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0xb, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:51 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xf, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\b', 0x1}], 0x1) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1456.737184][T20501] bond0: (slave bridge229): Enslaving as an active interface with an up link 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x10, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x29, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:51 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, 0x0, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, 0x0, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\t', 0x1}], 0x1) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\r', 0x1}], 0x1) [ 1457.010231][T20540] bond0: (slave bridge230): Enslaving as an active interface with an up link 06:27:51 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x11, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x73, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:51 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x8}], 0x1) 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x12, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:51 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x300}], 0x1) 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x48, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:51 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1457.390897][T20603] bond0: (slave bridge231): Enslaving as an active interface with an up link 06:27:51 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0xea0, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:51 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x20000301}], 0x1) 06:27:51 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4c, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:52 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1457.673746][T20654] bond0: (slave bridge232): Enslaving as an active interface with an up link 06:27:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x60, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:52 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:52 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1457.970636][T20680] bond0: (slave bridge233): Enslaving as an active interface with an up link 06:27:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x68, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1458.061467][T20690] bond0: (slave bridge233): Releasing backup interface [ 1458.387917][T20719] __nla_validate_parse: 23 callbacks suppressed [ 1458.387925][T20719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:52 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x7ffff000}], 0x1) 06:27:52 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index}, 0x6) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:52 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6c, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1458.446813][T20690] bond0: (slave bridge233): Enslaving as an active interface with an up link [ 1458.467043][T20690] bond0: (slave bridge233): Releasing backup interface 06:27:53 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x2, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x74, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:53 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1458.951312][T20774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1458.997027][T20774] bond0: (slave bridge234): Enslaving as an active interface with an up link [ 1459.054937][T20774] bond0: (slave bridge234): Releasing backup interface [ 1459.286369][T20792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1459.323001][T20792] bond0: (slave bridge234): Enslaving as an active interface with an up link [ 1459.353815][T20792] bond0: (slave bridge234): Releasing backup interface 06:27:53 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0xffffff1f}], 0x1) 06:27:53 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7a, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:53 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:53 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(0xffffffffffffffff, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x3, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:54 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r2}, 0x0) io_uring_enter(0xffffffffffffffff, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1459.809234][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1459.917631][T20849] bond0: (slave bridge235): Enslaving as an active interface with an up link [ 1459.970460][T20845] bond0: (slave bridge235): Releasing backup interface [ 1460.133680][T20845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1460.147525][T20849] bond0: (slave bridge235): Enslaving as an active interface with an up link [ 1460.177870][T20849] bond0: (slave bridge235): Releasing backup interface 06:27:54 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0xffffffffffffffff}], 0x1) 06:27:54 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x300, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:54 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x4, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1460.425807][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:54 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x8) [ 1460.486267][T20878] bond0: (slave bridge236): Enslaving as an active interface with an up link 06:27:54 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x500, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:54 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd, 0x0, 0x0, 0x0, {0x80}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:54 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1460.591827][T20900] bond0: (slave bridge236): Releasing backup interface 06:27:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0xa, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:55 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x300) 06:27:55 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x0, 0x0, 0x0, 0x0, 0x0) 06:27:55 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x7ffff000, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:55 executing program 5 (fault-call:4 fault-nth:0): clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1460.884452][T20933] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1460.913429][T20950] FAULT_INJECTION: forcing a failure. [ 1460.913429][T20950] name failslab, interval 1, probability 0, space 0, times 0 [ 1460.924489][T20941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1460.935648][T20950] CPU: 1 PID: 20950 Comm: syz-executor.5 Not tainted 5.8.0-syzkaller #0 [ 1460.943982][T20950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1460.954034][T20950] Call Trace: [ 1460.957326][T20950] dump_stack+0x1f0/0x31e [ 1460.961665][T20950] should_fail+0x38a/0x4e0 [ 1460.963296][T20945] bond0: (slave bridge3): Enslaving as an active interface with an up link [ 1460.966087][T20950] should_failslab+0x5/0x20 [ 1460.966102][T20950] slab_pre_alloc_hook+0x4c/0xe0 [ 1460.966117][T20950] kmem_cache_alloc_bulk+0x3b/0x2c0 [ 1460.966140][T20950] io_submit_sqes+0x54b/0x25d0 [ 1460.994052][T20950] ? __se_sys_io_uring_enter+0x19d/0x1300 [ 1460.999810][T20950] ? __mutex_lock_common+0x582/0x2fc0 [ 1461.005195][T20950] ? __se_sys_io_uring_enter+0x19d/0x1300 [ 1461.010913][T20950] ? rcu_lock_release+0x5/0x20 [ 1461.015683][T20950] __se_sys_io_uring_enter+0x1af/0x1300 [ 1461.021241][T20950] ? lock_is_held_type+0xb3/0xe0 [ 1461.026180][T20950] ? syscall_enter_from_user_mode+0x24/0x190 [ 1461.032158][T20950] ? lockdep_hardirqs_on+0x49/0xf0 [ 1461.037289][T20950] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1461.042835][T20950] do_syscall_64+0x31/0x70 [ 1461.047270][T20950] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1461.053184][T20950] RIP: 0033:0x45d239 [ 1461.057073][T20950] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1461.076699][T20950] RSP: 002b:00007f6c777fec78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1461.085107][T20950] RAX: ffffffffffffffda RBX: 0000000000008280 RCX: 000000000045d239 [ 1461.093075][T20950] RDX: 0000000000000000 RSI: 000000000000450c RDI: 0000000000000003 [ 1461.101043][T20950] RBP: 00007f6c777feca0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.109011][T20950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.116980][T20950] R13: 00007ffe25eddedf R14: 00007f6c777ff9c0 R15: 000000000118cf4c 06:27:55 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x5, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:55 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x20000301) 06:27:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x600, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:55 executing program 1 (fault-call:5 fault-nth:0): clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:55 executing program 5 (fault-call:4 fault-nth:1): clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1461.137573][T20946] bond0: (slave bridge7): Enslaving as an active interface with an up link [ 1461.162505][T20878] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:55 executing program 4 (fault-call:5 fault-nth:0): clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1461.273609][T20971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:55 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x7ffff000) [ 1461.315396][T20974] FAULT_INJECTION: forcing a failure. [ 1461.315396][T20974] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.325292][T20971] bond0: (slave bridge237): Enslaving as an active interface with an up link [ 1461.364504][T20974] CPU: 0 PID: 20974 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 1461.372847][T20974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1461.382895][T20974] Call Trace: [ 1461.386191][T20974] dump_stack+0x1f0/0x31e [ 1461.390522][T20974] should_fail+0x38a/0x4e0 [ 1461.394943][T20974] should_failslab+0x5/0x20 [ 1461.399450][T20974] slab_pre_alloc_hook+0x4c/0xe0 [ 1461.404403][T20974] kmem_cache_alloc_bulk+0x3b/0x2c0 [ 1461.409609][T20974] io_submit_sqes+0x54b/0x25d0 [ 1461.414375][T20974] ? __se_sys_io_uring_enter+0x19d/0x1300 [ 1461.420105][T20974] ? __mutex_lock_common+0x582/0x2fc0 [ 1461.425490][T20974] ? __se_sys_io_uring_enter+0x19d/0x1300 [ 1461.431225][T20974] ? rcu_lock_release+0x5/0x20 [ 1461.435997][T20974] __se_sys_io_uring_enter+0x1af/0x1300 [ 1461.441549][T20974] ? lock_is_held_type+0xb3/0xe0 [ 1461.446492][T20974] ? syscall_enter_from_user_mode+0x24/0x190 [ 1461.452474][T20974] ? lockdep_hardirqs_on+0x49/0xf0 [ 1461.457589][T20974] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1461.463141][T20974] do_syscall_64+0x31/0x70 [ 1461.467553][T20974] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1461.473440][T20974] RIP: 0033:0x45d239 [ 1461.477339][T20974] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1461.496950][T20974] RSP: 002b:00007fb00df95c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1461.505363][T20974] RAX: ffffffffffffffda RBX: 0000000000008280 RCX: 000000000045d239 06:27:55 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:55 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0xffffff1f) 06:27:55 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0xffffffffffffffff) 06:27:55 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x700, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1461.513855][T20974] RDX: 0000000000000000 RSI: 000000000020450c RDI: 0000000000000003 [ 1461.521827][T20974] RBP: 00007fb00df95ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1461.529798][T20974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1461.537768][T20974] R13: 00007ffe4cc9c46f R14: 00007fb00df969c0 R15: 000000000118cf4c 06:27:55 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1461.565833][T20971] bond0: (slave bridge237): Releasing backup interface [ 1461.835968][T20995] bond0: (slave bridge237): Enslaving as an active interface with an up link [ 1461.859054][T20995] bond0: (slave bridge237): Releasing backup interface 06:27:56 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x6, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:56 executing program 1 (fault-call:5 fault-nth:1): clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:56 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:27:56 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:56 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) socket$inet_udplite(0x2, 0x2, 0x88) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000200)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="000000000000ddffffffbc5dcced6d5ffe72a73aa3c5732db333fad8b6e36dd7ea1caeae156fa67f005e6da45f8e6685c1b6abcabeb011f8e0261989aeb835d622dc739e8d1448b553dd4952bddd1ba1d66a8ae086cbf57f66be78682d74b668d3f85bcbe83fd7023d58dcc600"/118, @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) r8 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$TIOCGPKT(r8, 0x80045438, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_udp_int(r2, 0x11, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f0000000280)=[{&(0x7f0000000300)="d962fc49822b913abadecb9bc275b4bd43e75d482d5dde8c7cef14be9e65e391faf800d8d89f1847b1a06d5387c98adf3a4cb99747e42b46bbc7294f49a5ef7d4d8e7171595ef399705e9ad329160b2db7adfac9f7ae326472a76d55ef8d87fc18a8ee9f8e3d173cf47cffa7a6ace8c20cab4c6251dbd70be76270c47a609440756cb66866cd209b160671a1d12984323d44f5da1d33820c637db1ed6e1dfc4059884900c09742fd00297664d619bea48fae8bfcfc5c46f4d87e404d0179d7a926f9d33098f78c32ccabbc78b6d6b11d0d9fd837d19886ec0737485638ee6f5035", 0xe1}, {&(0x7f0000000000)="c61b790d43e08bc36361f3c3ee34e444baeb2b1dfce34b205a041806fb486e3361601a61dcdf46ce0a9e989b2b491a317b9bd06d6f6516f06a17289e4d42a253bf4e209c", 0x44}, {&(0x7f0000000400)="6b93c24c585cfe94db6a23dae85b0f8e36ec0ed6404f6641b5da482c171b7c35444beba308ca50dc28cc0add31f84b9bd20a120562ccd55d555e31465b04b89918b11b7374a8d78d8246074a2c1b9e476fc7a7c616cc9aa3633b669fbab0eb64e63c452f2f84cf8ab3b3", 0x6a}], 0x3) 06:27:56 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x900, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1462.076774][T21039] bond0: (slave bridge238): Enslaving as an active interface with an up link [ 1462.088269][T21035] FAULT_INJECTION: forcing a failure. [ 1462.088269][T21035] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.117297][T21035] CPU: 0 PID: 21035 Comm: syz-executor.1 Not tainted 5.8.0-syzkaller #0 [ 1462.125643][T21035] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1462.135697][T21035] Call Trace: [ 1462.138993][T21035] dump_stack+0x1f0/0x31e [ 1462.143364][T21035] should_fail+0x38a/0x4e0 [ 1462.147788][T21035] should_failslab+0x5/0x20 [ 1462.152290][T21035] slab_pre_alloc_hook+0x4c/0xe0 [ 1462.157229][T21035] ? __io_queue_proc+0x1b1/0x4e0 [ 1462.162170][T21035] kmem_cache_alloc_trace+0x51/0x2f0 [ 1462.167468][T21035] __io_queue_proc+0x1b1/0x4e0 [ 1462.172237][T21035] ? io_async_buf_func+0x520/0x520 [ 1462.177350][T21035] ? io_async_buf_func+0x520/0x520 [ 1462.182467][T21035] n_tty_poll+0xb4/0x7a0 [ 1462.186710][T21035] ? ldsem_down_read+0x88/0xd0 [ 1462.191475][T21035] ? n_tty_set_termios+0x1080/0x1080 [ 1462.196763][T21035] tty_poll+0x109/0x200 [ 1462.200917][T21035] ? tty_read+0x310/0x310 [ 1462.205252][T21035] __io_arm_poll_handler+0x303/0x8a0 [ 1462.210554][T21035] io_issue_sqe+0x22bd/0xb8c0 [ 1462.215243][T21035] ? slab_post_alloc_hook+0x3e/0x290 [ 1462.220529][T21035] ? kmem_cache_alloc_bulk+0x249/0x2c0 [ 1462.226013][T21035] ? __lock_acquire+0x1161/0x2ab0 [ 1462.231040][T21035] ? io_async_buf_func+0x520/0x520 [ 1462.236164][T21035] ? mark_lock+0x102/0x1b00 [ 1462.240677][T21035] ? trace_lock_release+0x137/0x1a0 [ 1462.245885][T21035] __io_queue_sqe+0x287/0xff0 [ 1462.250560][T21035] ? io_queue_sqe+0x171/0xaf0 [ 1462.255239][T21035] ? rcu_read_lock_sched_held+0x2f/0xa0 [ 1462.260791][T21035] io_submit_sqes+0x14cf/0x25d0 [ 1462.265722][T21035] ? __se_sys_io_uring_enter+0x19d/0x1300 [ 1462.271439][T21035] ? rcu_lock_release+0x5/0x20 [ 1462.276215][T21035] __se_sys_io_uring_enter+0x1af/0x1300 [ 1462.281775][T21035] ? lock_is_held_type+0xb3/0xe0 [ 1462.286720][T21035] ? syscall_enter_from_user_mode+0x24/0x190 [ 1462.292704][T21035] ? lockdep_hardirqs_on+0x49/0xf0 [ 1462.297815][T21035] ? __x64_sys_io_uring_enter+0x1d/0xf0 [ 1462.303383][T21035] do_syscall_64+0x31/0x70 [ 1462.307799][T21035] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1462.313690][T21035] RIP: 0033:0x45d239 [ 1462.317584][T21035] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1462.337186][T21035] RSP: 002b:00007fb00df95c78 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 1462.345594][T21035] RAX: ffffffffffffffda RBX: 0000000000008280 RCX: 000000000045d239 [ 1462.353559][T21035] RDX: 0000000000000000 RSI: 000000000020450c RDI: 0000000000000003 [ 1462.361553][T21035] RBP: 00007fb00df95ca0 R08: 0000000000000000 R09: 0000000000000000 [ 1462.369522][T21035] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.377488][T21035] R13: 00007ffe4cc9c46f R14: 00007fb00df969c0 R15: 000000000118cf4c [ 1462.425086][T21039] bond0: (slave bridge238): Releasing backup interface 06:27:56 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x3, 0x0, 0x0, 0x0) 06:27:56 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3, 0x0, 0x0, 0x0) 06:27:57 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x300, 0x0, 0x0, 0x0) 06:27:57 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x300, 0x0, 0x0, 0x0) 06:27:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xa00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1462.824838][ T26] audit: type=1800 audit(1597472877.185:4506): pid=21063 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16178 res=0 errno=0 06:27:57 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3f00, 0x0, 0x0, 0x0) [ 1462.891444][T21115] bond0: (slave bridge238): Enslaving as an active interface with an up link [ 1462.902025][ T26] audit: type=1804 audit(1597472877.255:4507): pid=21050 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2747/cgroup.controllers" dev="sda1" ino=16178 res=1 errno=0 [ 1462.973575][T21120] bond0: (slave bridge238): Releasing backup interface [ 1463.002598][ T26] audit: type=1800 audit(1597472877.365:4508): pid=21050 uid=0 auid=0 ses=4 subj=_ op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=16178 res=0 errno=0 06:27:57 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x7, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:57 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:57 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x3000000, 0x0, 0x0, 0x0) 06:27:57 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x4000, 0x0, 0x0, 0x0) 06:27:57 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$drirender128(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dri/renderD128\x00', 0x0, 0x0) setuid(r2) r3 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r3, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r4) mount$9p_xen(&(0x7f0000000000)='syz\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x8, &(0x7f0000000500)=ANY=[@ANYBLOB='trans=xen,loose,posixacl,cache=mmap,cache=fscache,loose,access=', @ANYRESDEC=r2, @ANYBLOB="2c6163636573733d616e792c70b51f0c20a1bde0d4ae1ed8272d6f73697861636c2c70726976706f72742c616669643d307830303032303030303030303070303030302c7375626a5f75", @ANYRESDEC=r4, @ANYBLOB=',hash,pcr=00000000000000000046,smackfshat=/dev/ttynull\x00,pcr=00000000000000000054,appraise_type=imasig,obj_type=,fsname=/dev/ttynull\x00,\x00']) 06:27:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xb00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:57 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:27:57 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x800000, 0x0, 0x0, 0x0) 06:27:57 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x3, 0x0, 0x0) [ 1463.401079][T21150] bond0: (slave bridge239): Enslaving as an active interface with an up link 06:27:57 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xc00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:57 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) sendmsg$AUDIT_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x3e8, 0x2, 0x70bd2c, 0x25dfdbfc, "", ["", "", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x800}, 0x800) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1463.479301][T21178] bond0: (slave bridge239): Releasing backup interface 06:27:57 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3000000, 0x0, 0x0, 0x0) [ 1463.745541][T21178] __nla_validate_parse: 4 callbacks suppressed [ 1463.745550][T21178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1463.813279][T21229] bond0: (slave bridge239): Enslaving as an active interface with an up link [ 1463.833837][T21178] bond0: (slave bridge239): Releasing backup interface 06:27:58 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x8, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:58 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x2000007, 0x7, 0x0, 0xff, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0x6}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:58 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x300, 0x0, 0x0) 06:27:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xd00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:58 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3, 0x0, 0x0, 0x0) 06:27:58 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3f000000, 0x0, 0x0, 0x0) 06:27:58 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x800, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r1, 0xc040564b, &(0x7f0000000040)={0x67c, 0x0, 0x2018, 0x3, 0x0, {0xfff, 0x1000}, 0x1}) [ 1464.060098][T21243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:58 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x40000000, 0x0, 0x0, 0x0) 06:27:58 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1464.116738][T21243] bond0: (slave bridge240): Enslaving as an active interface with an up link [ 1464.131902][T21243] bond0: (slave bridge240): Releasing backup interface 06:27:58 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x300, 0x0, 0x0, 0x0) 06:27:58 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x3000000, 0x0, 0x0) 06:27:58 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff75b1764dc0d54d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r1, 0x80045400, &(0x7f0000000040)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="7f92cae3a0199afead029d7b0ed10a", 0xf}], 0x1) [ 1464.372073][T21271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1464.420770][T21271] bond0: (slave bridge240): Enslaving as an active interface with an up link [ 1464.475343][T21271] bond0: (slave bridge240): Releasing backup interface 06:27:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x9, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:59 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0xf5ffffff, 0x0, 0x0, 0x0) 06:27:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xf00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:27:59 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3f00, 0x0, 0x0, 0x0) 06:27:59 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x300000000000000, 0x0, 0x0) 06:27:59 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) prctl$PR_SET_UNALIGN(0x6, 0x0) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:59 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = syz_open_pts(r1, 0x103000) close_range(r2, r0, 0x2) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xfffffffc, 0x5, 0x52117f66, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f0000000500)=[{&(0x7f0000000000)="883fe56c6ddb23f2be5aa6d54a77d6f88f9e24ce4696d3c48cce9d2b33af7ccf0308b6ead0adb831b7302d309cac0405ae16e8629daedad9c395be96cc992c", 0x3f}, {&(0x7f0000000200)="bf271d18394994284dfb56732e9985817eccfed50fb57b1871c6382369844daa4c2b22419ac65085a66e099e036a3133a14b5d7dbcdb250be34130da0ab18f14eeba78eb0c3ffff9f00530f4c698c4b77cf1e657ae3ff53871ef525e2f131f8603b6c7934d81a1cc1c7277b23fd09d4fc474e7b6b1e10b7345c562ddccd7085a9f9e9a55cc99d2c7048dadccc91933d39c2cc88fcfc5af97fb94fdacccbb29860ec9d640d97e29706f75984348a68276135ede66d3518d4d057b66423a68daceb042ee327a4488b75dd6ab52e3e0ff23c2ab364cdd12db9fc8fce2f43de0c2", 0xdf}, {&(0x7f0000000040)="a034ebfb06a6c131252088674597ae0a2ae6c0a9878482547465e7f5db93f224d85da3359599c38cbbdb6c0a9fd0dd14bb37af83ea01259dd62ad9f16a93eeb5e07e50cb650f4d2d70679883", 0x4c}, {&(0x7f0000000300)="0d5c9baea75870a88953c9e3f9d539467f3e7d93790959bf78a1e955ff9dbc82590c10d4668f64b968465a03982717c7d6c81e3ed2ac5e454e64fea6d42be3b8291c83873520b556693386ae113a72e107c63f216eb4d398b07650c38462e887f4dd6a98b8e31f4c48ea7ff75e4c354a7d710cfadf89f582b0c7594967ed652eba7d78931723e2a48f53615c0516d458a59ccd7493e4679c1a4b405df38817d64836dffb3a87be92c494f543fbbad52051fac25f05aeac50318a73ae91c03583e1c4fe0f8e59989802e734368360697da2e5069cdac04e1151aef89db7b1ed", 0xdf}, {&(0x7f0000000400)="f73f8e4acf8ada5f241af54a843d4bf0de296ddd91d77014ac2369908e62344bb443dc99023a81dcec369b8b23d1b0ba15cd65d886a1453658ce9110bd9be42d1957570ec8f08c12ce5cf0df5de39f724559698edd5f10dc75f4881aa6e3c5abd8d3b9eb1d247d71ce83f47e780eda6bb649d8bac6245f0736f0df45dcbe3f85831a467a9714c88a8102529950a300dfe9a998b1d4247d3db018bc15c92730d41f4bef18fae4d40ff66d68eef01cf64ecbf935e340541c419231fa55da48405c4eaf7f072a2cfff718", 0xc9}, {&(0x7f0000000100)="27b5719e0279cd018b4c40905e0f76ce5601e9e0c9870e9ca9414edd572fd817ceff59229d7c39ffc80d314630dab8fa73c85b08b8582a28c5c97894e961788562305bb7443cc746a7a6362c42", 0x4d}, {&(0x7f0000000180)="0c307498cef1040da58db964528de575abdb036836af4982", 0x18}], 0x7) [ 1464.741792][T21341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1464.792283][T21341] bond0: (slave bridge241): Enslaving as an active interface with an up link 06:27:59 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x3) 06:27:59 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x4000, 0x0, 0x0, 0x0) 06:27:59 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0xfffffff5, 0x0, 0x0, 0x0) 06:27:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x1100, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1464.876842][T21341] bond0: (slave bridge241): Releasing backup interface 06:27:59 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000200)={0x0, &(0x7f0000000180)=[&(0x7f0000000000)="1572017b876a91db70d0260227453dd50c15b12030bc78c0a85e", &(0x7f0000000040)="4d931eed4f973b8b4b6099a88ece73be3ff68de0d2a990a706eab29de5042db57d0d6310c0133e569f18d4b60b243f21ffdf70afee0fe3ff7d1ad95096623b9d393a10ae96f65f7356efeb74ed1ca70b6a2eda1da1b4cc3cb4a4847bb2c68339ee53e944aa4f5cb56598d2c774257d5bc763931f87aa05dac3ba34ea6f3507", &(0x7f0000000100)="342c1ea36217301c4579b7e7a85f4de0e35f53ea612847ee1a39c82565c1091fe5ba98594aaaf24af4aabfbd1f0fe7b59b55e3d5d9a7d3c37690f7e5f563a3945b9fe5e5d9144c6d2c31f352f688ca63f2a5d896109744", &(0x7f0000000500)="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", &(0x7f0000001500)="0b0747eafb0da8c2b0c1c25cda29457a4b033171700cc37d9ca5bd5fe212529d814b54801a739970428e04642a6470c69117baa84b4d5e22c6444bb3779acd984f03b2a811cbf437e19d98f097454d718f05b17b6917ac664034b7e8df9fcd6ee9348e351073e1830995733efca8bf3172e80a8472d075c3449ce2d2464cbd30597a6e65a103d8d96593b384f18c5e5bccb19724cc0ac6d5ba840e8603285fee23f9121cf04fc51c68056bd10c76a39551ee8ef39e2288a6932b87edd1a8b94acf6e8eb24780c2129356999ece885a3819f3dea717ff608c52482837234985bccf37db7b8beee71366619c9d44b3736ca1e76a215fb4ca95f64a7f2b44c7ab78ed20b91397a09c8c07a71576f82c36da86b2bd9b58e6ddbdee53d21a4722a97eb652057c9c5858dd4c77e032c9b33a1fd025acd9b0bbc69237e66e14f2f829a53127981c52024fc049ca6f26ea152fc5a44aece91d44e36a53f9fe1282c2c92b26bedc36f53bd3476b31bc0b4f4c157426a9788360973ac54f12b25d4cc60930ec3d50b97dc1d34b57a171a98d273e76ab731d789029705e38345f6387baf51dc46c7a4f5f026a0faacbdb87c2879a9e082408168646a0c9d8bbafc655331c5e6775d66d0c800b65f1996ab3920be7a4633e495d9b17ff66f67a4f97e1bcea5398333d10e07fd73b849209aa1960369e5df61812a6e3df08f89ad5822f1ecccd30bd802bc5a4a66369d83677786cf30c5c1b65a08b2cb6b675e19f2dbebbe68e6228d309d9bca90390292d18323289359729c3db29195506031a4fe4b205de9f965ae31220d240d3b9ea93991f8793a85af571973ddb58de338d8c74a3a8e43bcceb35e8f6c607942c1556d93cc83c152e572f4c43b9b86fed29909e1da2e997bf7b2a93f7f9077d545376dcc1bd8c9a48a6e69c06dbe3998fa354e8435bc08e795e1b2e43846051fbd125f6a9d42c842376e7e4660c68ab4462b4ba2690f684d2965a188a68caaa5e4bfaab6f14658f4672f9483d81444f02d46bb1004f3b411fd2a4eb6074f164f9a9ff41244017b6043057091aa75591bf92190cd2784f5a97701208616bff480d646be2f8d3b41ebbbeb11f4d4e4a3a8ff0c6072032b7c27bebcead204d3e4a0c0f806eb519f4008240cfeb093948fb4bb8615061b7ee596c72a54eca112cbb68a0b8949725718086007c43c7ea67361e3916d861cbff81c814090938da685f86490485a1d9826bed89878dced484f5e8ff2f9dfce546f36734d4cba59b9605e7cd5c5a5258c1babc6b55db4fbd8c3f64c26768d4ea63bec1e0c3389e569b2d63ffca3ffe732064d86648397326efb34afae4a7b872ff534200acdd1f3a54d4dc006d03063c041d2e4b1abbb0c42e1abc10a84672784551cd972b770a10cd9bf1747df8d83fc5e7b53c4a3414d1d22999590d86fc195ddc237e7fb70b84b6ff5d9b1adb946d17587f9f86994f0234d803bd2bc11515321b94922cbda059b33bd3f9a4581307d61a01c54969c420b435c45ca7612aa06c8c33bf50b06ae175cd8e54627ab198554c4f85854b32aa1924563d22e7b364f3a13d072b42e76e4dd00f54b18e4454d85c9c2eb49436ef90dd412676c2408867e593c193604978d7141f151761d0851bde1c2a10fee5faa2991f36b10e5f31f85714a07e75ad8f90462af85c87f06893beb333780114f635cfbaef746de8e3aeed500e4e3f007aba1bc9a1d3206ff5872eab724def96d8aa41fe6c9f8ba6f0d3c49858df11b5b742826d33ed6a03fe138df8b4343252eea95d3e455dc15398cd3f46d06a8eb97522cefbbe4fb65a289d81520a63e6c4742ffb621256416c8bf2eaefd9b8100219ac9324fd699ad57aa5798e8dda693fe4a9b50f3eaaa4a84f49f5eda5b0aadeb585aedfc39ecba2425770bc8bc96b57bf723560a76135f300f2edbc628de7b631f22788c11f1abb6782af60ef27799031a8ddc1d65cd1c1fc1753476adbd5e274399decc1942cdb3488ea2563ac9d9a927323cc80667919bedf8851c179db0f11b60a39d7cb4934d1b17f5891e3465f14c6ae8040d0be52efe95bd2bc3db0dc7c56bb18bf7415466a4e9c77d79b1d138470a31bf93fcf06b6e8ef627f3ef28b2dde910f5bc6f1e367ab902fee332ecf41f7a745d59cc15567bcd56ebcecd289ee1b0d5c08855b3574fca6a68f0adeb4a8296dc8e06608285a7be081ffe8832119490cfbcf165d7e70a82036099568d5303468a4cd44db131acb7311b904e47a0c809a298d3782e46e37fe3237dac57bb1df1e07ec4a9ae4001f7aef3c43d4f00ebfd0d07a83f5a30a58728d42fbdce9eb09f6e4b3823430ed8317418cacc7d2436d7cd6662f6fd99717181891d4a0f597aafefa9422bfcc48c1bcaa7613167e0f6002782ffa17126e0a2e0dd60dac8529360c485bbf7ead2773ef8684d3cab4ade5d60331cf15132a4b858a8651739f6d5a97e28f82b59dae50e25d0a38e595eb988fb8335a0f5521940519737d23ed2ec6fdc8c0692622dbbfbf30ae63e1bd6088229fa25d8c2ae8257008e6bd01c9bebed6fdd0766d3fe4614cb4f5ce0a586fc4f20e9b00d6feb0882652ceef7f5bcb5b47789a5abc4d51344178151b4a2018b2a19b913748da26a8c42745ec57d32469bee0864f8b1bb1ae7ecf9cc5943a9d7fdbdd57a2a5c382817184522307491f0921e227bcef8095f5474b4553fdf6957f2ef34d4e58afd56711a41bf6ecac7bf97dba810bd7bf228d04bec93bb2557a4689c2985fc40223b87e4773e26ad6f144c0a9d965ee17055bc6909abdc4dd7850bfce68767ae530d7d3deadfd63fc5c8aa6ac5f0390112a7e93f0665b33e8d90a475876bb5eea2698754509a8d378090e650f1eac73ce34a9e5c7934e8c34a43900d5930a9ef7d35a175014f4c3f5840e08627061af7b1344f72c4697997d1f7ad69671e6bcd88d80d8245013e28fc912dfeb4d6b078ce69feba590c17bac395d6aa33f8c3d23f9e2642fac43ea8c18bff87737538caf97fb168013187546ee31c6c765e284ff1757540dd97b7a3c640a47bb4360cbff3e6202716dd64421922b05f1f8843a6029b52b51e1ad292e2afe23fb382861737a4878caa90071f82c15230bf204ef45f620bf3b998eb76435994e750c3344c4219da7ba8a48d27996c1153b2dce08f97077e9098c77a6b0e76e3573519da768684718608b75d0a66ad8610cdbcfdc2829439725c40651cb92d705db7b3688a6ace243ec582026e3d80b86950a35bfe2d862b6bcd43fd4b66ab0815c9512b7c66ac2e19b24dea870db5a123a328674dac799ce7e7eba3607d8b75c661827846a286fdee35d36a9ce2758cb12465dc02821ecb95f23b3aea97337262b0d65ae19e2b81312938d004a143a5f9bd4c37d74d40704fc3d14e13304c52e973ed2226960640c4adce4d4ea015619e3bc195e7c8865b4d060ed310f7cdaa4a04bb4d28c946a2e406c2bce42e0cc99b4328002881b3e6fbdb700d49562ebf5aa5a7d1fa0f374ef5c012dc954e31177a618b1f6c6469222fade9291f183b8a43cf71c4e9eeeb7c32e5d8a6e3c2f156283c1a94c7ccf7aeb345777214ca0e793e218b28effb52d026060775ccc111b9a9d3a4038ab5e2a2ab6cec3f7182899b560faf84dc43e9ff3517a991d4d06297eead20ff7e79d3ea18f9987db05fb8207713ec2989f585b8934d9b2a210111f10d3227611aa039eb5e88b30aeb2dc8d68e9bfba2bf4d207b34daeb0e752e2730dba35ab5d8273f9092706568384591d9dd0fc843f91b8cc344a93d79201adda5ba07dfaaab0e939885d5dbe739dfde042674ec3a6451b740b4491db996b6de67de42c89d8cb6ef99ada8356b7e602d944d108be309a8332be83d52c46c2c729b35b8ddf7c37f84882c9d77c6a2d5f2bccbb06e4b13529480390d022b3231d88a99cc1327c78541908a4dc87b8993a52119bac231dc7c547459535c8704e61c3f286e707f8851f74699bef17dc92666091a6d17f05594806e5b5fea03c8dd93ed4e22e03f1be3c27a980c9214905bc3c9cd0877978602eb59f2c04692e45de5c8fe3401beac1e3ef804e3b2b7d35e817fa8b09aa1cbd8d468a0d08b21387be6322721f7e9d045788c3888d8266520364cfa2ccec71c74554952e06afc75edf6b58cf56705e072a874ab205cade6ab9094173c80165d320c81de593068c9bf5c8f389c40eecc731d5d42ef840840da393118b49dba2ba84810b2d6884a1cc2161741995853305a1882ffc98b75f4b88f5c0f12daf48dd9b05925eadab666b84790e89d564613a9bde18647d02322ffec228f45193be11e2825975cfaac99965d407431caeab39063404fc96095dd339576d4d0306a8ebf90fd16ac9b86cbfa3dd06aa58c7464bec6b01c3488f92bf457d7bccfe7da1e075ff56060a375d791a1ebf5e79d4f647da1aeaf6a426b5ce2d723fa796ce1aa0eee550e1c697f78f5182b435cc42557be8b8fd59d0ffca3c2073c31d6b6d43dba34bda3d21aad06d7b824ea2b2c3d40f06e6e32eb5e1b5c2e0e6dd9692ef10b763b4bc2464a7dbf08ac9dd63e9d9ac6971d5b0a91641b969285db2b243ef03becee52282dfdf936781b14d4636a75d15b48ea91284eb09fae9be32709dd417ecd1d5d3c3d42ab80d25e3963debd85f32172462f01d2148634cc7e05d4c7baa7cafa623aa3f166e9f167ca6557e295f2d0a7d5dddcc8791cb72aaa50f024c482f6bc5b8da28ddcc24fcecb2fa2d803ea0337cd8a8e633e6cceb70980c8f0afc6f93f0fbd2e6fcb3b048ef1a3cfe7bf5f6f97ea4328dc3d098cb2cb96b81979bbb8e1fb01fbe1474179120f826ae8e533a1557813ff9a2295defe22985b5d19b9e81cd6dfbfa0d8da47af556f2205d2b7f034dcba35e6bb08ca91852d61c2a2403c4a512e898e327931f6fc91db27db0f4a7e403f74fe2ddc3078455e60d069739affbe2b85b29c977cd4bd0d131e0f45a47926db005453296cb50531933a86ea26a4abcafc24c49e866428e88e1fcdc41731c88d88eb295711667575e3f51ab7ffa340af5f6a9bc3e2c3f50a56c3943db5284d51beac42411332707f03020e4e3af16abc5616d53b22de7c33a953652eab79ac250918728541abddde0a9765ddaa6c6da86544d9f6b45f9f96e71f045984eac5478d4182bb27370e36cd0bd8dd87853f474dd565d366cd36fd61a2dd0a2f0931b46281ce7ad6ffe6efc2d567a4d49e6c24af86662cd3af68d824dfb1c87098391b68b8ccdd222f5c2546fc23da17f5953d6dbbce4cbaa6976ccaa1371fe1daf9bb60e4eb155055e165feccc1d9fdaf7c5c98f46712e45bcba2128628180f1ad55b3b82665eaeb91683b3f75bc98a521cf8f5bd5b2ae181af305dd07b774894d787190770e2acf43d82077f2b43ff63040ec8069a31f3bf3ca4138ebba1c54aadd2037af13e59cdef294956ff712c07506b4fa7d2ba5c2806e3e978d35997258282fb06a683d715f58610fac2224c08a5e967a4a944e38b1fbc9b808a874fe08b6f7a79cb1eb32265746e91c6df53e7157948f42b8422e1ac561962fea9755d630c0fb6f22d0e011e37223635c3b67a86d4423f441e49a22f99b7c6bf7adc9218ea97ede324d3dd3021c8c4a6bb078045577b23f3d15c13d31c1d064b83720238ce199ab54b0f764d4f86346ce001ecdce5acb82654375fe85c5ee400633f75b37bf6bb9a461116f426ff2c401034d5fa94fc045cbe0e0418388986af5bfe571c52efb0b615cc66bf01030010b7c1a9c35"]}) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1465.221909][T21373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1465.236132][T21373] bond0: (slave bridge241): Enslaving as an active interface with an up link [ 1465.262408][T21373] bond0: (slave bridge241): Releasing backup interface 06:27:59 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xa, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:27:59 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x300) 06:27:59 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x800000, 0x0, 0x0, 0x0) 06:27:59 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3, 0x0, 0x0) 06:27:59 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = fsmount(r1, 0x0, 0x2) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) connect$packet(r2, &(0x7f0000000000)={0x11, 0x1f06a5f7852af197, r4, 0x1, 0x40, 0x6, @broadcast}, 0x14) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:27:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x1200, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1465.525516][T21443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:27:59 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x2000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:00 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3000000, 0x0, 0x0, 0x0) 06:28:00 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x300, 0x0, 0x0) 06:28:00 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x3000000) [ 1465.608555][T21468] bond0: (slave bridge242): Enslaving as an active interface with an up link [ 1465.630244][T21443] bond0: (slave bridge242): Releasing backup interface 06:28:00 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x111, 0x2}}, 0x20) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) 06:28:00 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x300000000000000) [ 1466.016811][T21468] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1466.049522][T21468] bond0: (slave bridge242): Enslaving as an active interface with an up link [ 1466.076809][T21468] bond0: (slave bridge242): Releasing backup interface 06:28:00 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xb, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:00 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f00, 0x0, 0x0) 06:28:00 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x3f000000, 0x0, 0x0, 0x0) 06:28:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x21bd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:00 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x80000, 0x0) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000380)='ethtool\x00') r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r8, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000500)={0x8c0, r4, 0x100, 0x70bd29, 0x25dfdbfc, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x194, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x6f, 0x4, "9d4ab7a73d82000a4173043e6999521e1a3fd00ca81a675dac45f6e7a1f2e6591c8ced9fbd89c0a163747a3fd41fb4125f73e2e288ad0c822f9adb1679d88692f44b43c273ac290b43dd44211b205ccfb07598b346295945dcbc7e408e6ce574c9771280829b3d129a8248"}, @ETHTOOL_A_BITSET_VALUE={0x96, 0x4, "50ed711bef8471bd491016024f9a34a282a89bd0528b7067f647ed7292a2a31ffc6940799c438c3445500866e14b7016ed621ea97675ef43507b9e6d6f96abedb5ed59277ee98de3af47f69163c943088e4c7101ae2a020ea63e86fa7d4ad996ab7172cc39996b4f9fb81d92594e90eeabfca158d2688412aa70313b46554aa06eb3a4fa03a384e82f3b74f168619f5790ff"}, @ETHTOOL_A_BITSET_MASK={0x72, 0x5, "ef9cb1545618313847b636c09ca7a5a4bec0ed836e2a030223b305011e384fc01c71262bc62b3d1ddc9aed34bb6a14fb1e095a0ddc218c4b1e4bd6f721bf77d85a6ec2a8a3f84b089bc7f9eab7a826fe99ba53b60fb5b47503b4a530d42596862cdb0b086092ecca3dc566b01f13"}, @ETHTOOL_A_BITSET_VALUE={0x14, 0x4, "1aafa067e739fb8400b998b42b39fb7f"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x94, 0x4, "3803f1323b6e76ea1cf24bfd65db5a5ea7afe86c26ef5bc1aab1d3b4ca22c6cf8906a8cdd1a6cf9db28b2258193bd313a4baf3736798ac4d08806260493c28446eed8ba882692ffce231cf3dc1d4693ab454da7b3d8f2df8a69ed703738b866eb52c11b5fc86d49131a0f2cdedb36ec361f6c334670012e0bbf00c7fe1407a07ff1296218f21d10f31dc2ac7427a8e4c"}, @ETHTOOL_A_BITSET_MASK={0x9c, 0x5, "1fd4aefadf42c70ee4e17827260e490336394d0b7c8017f8c0fc0a47bc939293fb6830144d74e4fe6cfd9101a7a16c8a0f9595c042057cebc2e99a02d723ec092ecff446105cc09731d1db7c137cfdeeb9af78b8dc82ef71c0772703e62326c42d0e1449c9c1a99083e9339041b3d30516bbaf33cd50491173e26d7d240d52973e275fb4a59227be21371a26f077d80c642539bd32564f08"}, @ETHTOOL_A_BITSET_VALUE={0xa6, 0x4, "b1a98762ed9ffd3e489dac915db4d1f6c302cd4ed0b11c32b2d4ac903bb5dafd3a250c4ef84b7149d904619e80055c415c89ff44e609bc8079e97acabe30cb7e259332c1471ffa194bd6415173a9ed559830431b6e07620e2d0c4288ae3d99919edafb68baa24ef600dce6ddecb20d1ac219290d80aa9c38152f92f68ce85962549e4ed7a701af7683ba7ca92c45bcaefbf43252f83054b7d8eedddaed2eb2fbf884"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x1dc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0xab, 0x5, "5bf05b92160d30f3a74b127af8e7f2ee4da33f42282cd78b12a5113e5a85bb96315df4ff4751782c5f1fc0e368075b43a152ea56cb501e56772db807f138727c28d0db1c084bb32a135ad5664c55a764f531f8d76bf92e62fe23e27563bbbe09a0d935bd6049ee49279b813f013660bc96af507a8967bd59ac4e049a5165e5932de8156cb00f29404349d7243463094e69728331b74aaaf6babd86a340b904d166fe9c25f530e4"}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "eae60c661c55ed447e4c9cd068ab4a5651b07639e51cfacdd6de998ae010cb"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x6}, @ETHTOOL_A_BITSET_MASK={0xa1, 0x5, "56e8293080779ace9d2af17ede9fef7a23ae0dd4ee4305af36f753f6dced834f421dc993ec240713397d2f708c5630c4bbf4b2ebbb2bd3e913205fda5f1a145cec43796279e30793bd09fe56900352c4f088faaf828d79d403bf5065995deb43be746661e6de997daaa3cadad375544cbde54ad840fa3b701a6d981e312478722fe7911a71e63f81135436dbe2c1f0c3fffaea6f5d3713e84412c2eb69"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, '*^\x84-\xd9#\xaf%\'\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'devlink\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x20}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'pci\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x15c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x7b, 0x4, "9f71b41a746c43f1878d441254f22842f6a513dd4239dca4198614ee1c19314d8f73fe1416630d5d3f644a86d51dbf6b65c70bff43b35566477476b18b91500a7b937e167786a882d5c001c0e4bb4da8b2e131acf29c2a53c80fe73b422fae3e32d59b1ece3531822e66b0dfd4f27bcbe7454eea12548a"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x80}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x101}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x98}, @ETHTOOL_A_BITSET_MASK={0x23, 0x5, "df04894e81b1fb34945743f95e038337bb3cbdebedd0746137b8b689c43f82"}, @ETHTOOL_A_BITSET_MASK={0x9b, 0x5, "ababb02cc610909aa1441fcce7c2e7626dde4a2fd769bf78ecfb4dbd9e6ce5dd7bba4d66a3d051305c1273e2f8ee7836570113113a411f542ab296ee7b68b24337c3768b41b819ff38e01884093a5e525057a4e23257d23fc4135e515e3393e952ddfea20ebbf2f7cbd86f83ca7e2dff3f246daff477e8ed6bc313d7cf9ae0fa7904e5ca5edabb12c7a44a30a808f565477250e3b0cdb8"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x108, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x10001}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xf6, 0x5, "22a491c0ada79ed1596e4aecb4a420dbb4fa2eba8d4cad17495abec46af5c4d80f6dbef6cdf016915a931c13b47b1a4e015c07af8d8e350cc983cf6421f70647f17aa11b39583ef35129d4dc1d1248e6901f4ad0faab7e039f5fbb4b2c589b6faf26b180edd2b42d64dfa9ad51536c28cc8567aed76913f7e5d3ada0b84034f588134ea8c00e42e9e4783e59f76696e15ea1cf1ea3bc53c2a37c550abd1a2ecc25d1ee0f36838288d9350aeba6ec2eb4833becea203e7d1679d2561a204fa3141ee316d8c121d6ac2999f787c5a0cd2df7849dabe0c6d29b3bd10d013d726721a9b379c532b1395864a4154be6edd5b76338"}]}, @ETHTOOL_A_DEBUG_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x24, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}, @ETHTOOL_A_BITSET_VALUE={0x1a, 0x4, "a7dc8428a6359809c0148c737f8ca59c64e481b1c65d"}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x9f, 0x5, "24e0abab57e0e03c5b15ff03f4cf9c7932980e9250b65af8dede0fe4897aa0909bd5f34b124182422c5a3d2b87f8fd2ad3b2d8b552a0fe4bd0ea3a439c0b9da0ee8b2a34f9a41261bbfe2bfe6a629f6ca5f9cab0ce1f91c7ccaaabce87edaab7879fa51e10c5281159bec4d9cd3b386a7c3fb7e6d314f3bde174a0914b3bfabad839ba3765d5d840430286921bcdefc77ce2ca794171001f61f9c8"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x8c0}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r3, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x124, r11, 0x238, 0x70bd27, 0x25dfdbff, {}, [@pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @pci={{0x8, 0x1, 'pci\x00'}, {0x11, 0x2, '0000:00:10.0\x00'}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x124}, 0x1, 0x0, 0x0, 0x4004}, 0x4805) 06:28:00 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$SNAPSHOT_AVAIL_SWAP_SIZE(r1, 0x80083313, &(0x7f0000000280)) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x100000000, 0x3, 0x1}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x200801, 0x0) renameat2(r1, &(0x7f0000000180)='./file0\x00', r5, &(0x7f0000000240)='./file0\x00', 0x3) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) ioctl$VIDIOC_TRY_DECODER_CMD(r2, 0xc0485661, &(0x7f0000000100)={0x3, 0x2, @start={0x0, 0x1}}) sendfile(r3, r2, 0x0, 0x100000002) r6 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r6, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r7) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB='\x00\x00'], 0x218}, 0x1, 0x0, 0x0, 0x20008000}, 0x40) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)='*', 0x1}], 0x1) 06:28:00 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x3f00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1466.307327][T21543] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1466.346968][T21535] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1466.381525][ T26] audit: type=1804 audit(1597472880.745:4509): pid=21542 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2758/cgroup.controllers" dev="sda1" ino=16306 res=1 errno=0 [ 1466.409966][T21543] bond0: (slave bridge243): Enslaving as an active interface with an up link 06:28:00 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x4000, 0x0, 0x0) 06:28:00 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x40000000, 0x0, 0x0, 0x0) [ 1466.444057][T21570] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1466.482582][T21563] bond0: (slave bridge243): Releasing backup interface 06:28:01 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x800000, 0x0, 0x0) [ 1466.602350][ T26] audit: type=1804 audit(1597472880.965:4510): pid=21542 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2758/cgroup.controllers" dev="sda1" ino=16306 res=1 errno=0 06:28:01 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat$cgroup_int(r2, &(0x7f0000000000)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) 06:28:01 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0xf5ffffff, 0x0, 0x0, 0x0) [ 1466.846403][T21563] bond0: (slave bridge243): Enslaving as an active interface with an up link 06:28:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xc, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:01 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000080)) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000500)) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:01 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3000000, 0x0, 0x0) 06:28:01 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"/293, @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}, 0x1, 0x0, 0x0, 0x4020}, 0x0) ioctl$USBDEVFS_GET_CAPABILITIES(0xffffffffffffffff, 0x8004551a, &(0x7f0000000140)) sendfile(r1, r0, 0x0, 0x100000002) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2008100}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c000000000b0500000000000000000001000001070001002e250000080003400000000008000240003a31a109750000024454f4bdf75963609f8227f8b1b746ea535815d1f29c7a093477ffb15bfda66a5cdc8171dd57513a88b9675b6f15eddd94cbbc57124fbc501eb813bc044ad43ee6a9a30bcda0e5015518e29716910ebdc3c06614f64ff00280fcb73bf13581a02d4bbc1d1c9748a4dcde077340498b97da1bd581bbea760db1a36f6d70532800"/190], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000084) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x4005) sendfile(r7, r6, 0x0, 0x100000002) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000380)=ANY=[@ANYRESOCT, @ANYRESOCT=r7, @ANYBLOB="bd5e3ab2854fb49275f029c4000066d1fe251675b0067673b1a84f804b8b9ed7b6e3f7ecfaf9ffffffffffffff6aabe0c459eae8e726a6c20fefe01bd3366c5aa55c4c8a0880445f65f84387b229338b634fb8c3574234999b2a2aff", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x400000000000000) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x7fffffff, 0x0, "b9e5cfb41cd9c65651fafc61beca702b211a82", 0x101}) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:01 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0xfffffff5, 0x0, 0x0, 0x0) 06:28:01 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x2000, 0x0) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4081010}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x48, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x8000) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:01 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3, 0x0, 0x0) 06:28:01 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f000000, 0x0, 0x0) 06:28:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4800, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1467.112554][T21648] bond0: (slave bridge244): Enslaving as an active interface with an up link [ 1467.162270][T21671] bond0: (slave bridge244): Releasing backup interface 06:28:01 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TCSETS2(r2, 0x402c542b, &(0x7f00000001c0)={0x5ce, 0x5, 0x200000, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x8001, 0xfffffffe}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:01 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x20}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1467.503575][T21648] bond0: (slave bridge244): Enslaving as an active interface with an up link 06:28:01 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xd, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:01 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x40000000, 0x0, 0x0) 06:28:01 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x300, 0x0, 0x0) 06:28:01 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4c00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:01 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x90000, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000100)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KDGETMODE(r6, 0x4b3b, &(0x7f0000000000)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:02 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$gtp(&(0x7f0000000680)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="256100000000000000000000000008000500ac1e000108000100", @ANYRES32=0x0, @ANYBLOB="0800020001001000080004"], 0x3c}}, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = dup(r8) ioctl$PERF_EVENT_IOC_ENABLE(r9, 0x8912, 0x400200) r10 = openat2(r9, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)={0x8440, 0x54, 0xa}, 0x18) sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r7, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @private=0xa010102}, @GTPA_NET_NS_FD={0x8, 0x7, r10}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000814}, 0x4040024) 06:28:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1467.780344][T21732] bond0: (slave bridge245): Enslaving as an active interface with an up link 06:28:02 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = dup3(r2, r0, 0x80000) ioctl$UFFDIO_ZEROPAGE(r3, 0xc020aa04, &(0x7f0000000000)={{&(0x7f0000ffd000/0x1000)=nil, 0x1000}, 0x1}) modify_ldt$read(0x0, &(0x7f00000000c0)=""/115, 0x73) 06:28:02 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f00, 0x0, 0x0) 06:28:02 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xf5ffffff, 0x0, 0x0) [ 1467.875232][T21751] bond0: (slave bridge245): Releasing backup interface 06:28:02 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xfffffff5, 0x0, 0x0) 06:28:02 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x4000, 0x0, 0x0) [ 1468.178693][T21751] bond0: (slave bridge245): Enslaving as an active interface with an up link [ 1468.202503][T21751] bond0: (slave bridge245): Releasing backup interface 06:28:02 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xe, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:02 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6800, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:02 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e54fb41cd9d75651fa684fbeca7000211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$IPSET_CMD_PROTOCOL(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8da69bb2771ccf27}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x1, 0x6, 0x3, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4090}, 0x5) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_PREPARE(r2, 0x4140, 0x0) r3 = getpid() getpgid(r3) setpriority(0x1, r3, 0x3) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:02 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x800000, 0x0, 0x0) 06:28:02 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x1000000000000, 0x0, 0x0) 06:28:02 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setregid(0xffffffffffffffff, r3) setfsgid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000000140)=0xc) setregid(r6, 0x0) setfsgid(r5) setregid(r3, r5) getpeername$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1}, &(0x7f00000000c0)=0x1c) r7 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r7, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x80000000000000, 0x0, 0x0) [ 1468.632344][T21837] bond0: (slave bridge246): Enslaving as an active interface with an up link [ 1468.669577][T21837] bond0: (slave bridge246): Releasing backup interface 06:28:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6c00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:03 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000000)={{0x0, 0x92, 0xcfe5, 0x1}, 'syz1\x00', 0x43}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:03 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3000000, 0x0, 0x0) 06:28:03 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x300000000000000, 0x0, 0x0) 06:28:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7400, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1469.013491][T21914] __nla_validate_parse: 10 callbacks suppressed [ 1469.013500][T21914] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1469.040566][T21914] bond0: (slave bridge246): Enslaving as an active interface with an up link [ 1469.105654][T21914] bond0: (slave bridge246): Releasing backup interface 06:28:03 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xf, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:03 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f000000, 0x0, 0x0) 06:28:03 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x6, 0x80000000, 0x0, 0x0, 0xfc, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0xfffffffc}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r1) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000200)="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"/273, 0x111}], 0x1) 06:28:03 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000080)={0x5, 0x7, 0x8201, 0x0, 0x3, 0x2, 0x6, 0x3, r3}, &(0x7f00000000c0)=0x20) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x4, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200)=r4, 0x4) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r5 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r8, 0xffffffffffffffff, 0x0, 0x100000002) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000240)='cpuset.cpus\x00', 0x2, 0x0) 06:28:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7a00, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:03 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f00000000000000, 0x0, 0x0) 06:28:03 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x4000000000000000, 0x0, 0x0) 06:28:03 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x0, 0xe25, 0x3}}, 0x28) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x50001, 0x0) [ 1469.332562][T21938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1469.358644][T21938] bond0: (slave bridge247): Enslaving as an active interface with an up link 06:28:03 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:03 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xbd21, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1469.429239][T21938] bond0: (slave bridge247): Releasing backup interface 06:28:03 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x40000000, 0x0, 0x0) 06:28:03 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x8000000000000000, 0x0, 0x0) [ 1469.721860][T21993] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:04 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x10, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:04 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x311082, 0x0) r4 = ioctl$LOOP_CTL_GET_FREE(0xffffffffffffffff, 0x4c82) ioctl$LOOP_CTL_REMOVE(r3, 0x4c81, r4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe0ff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:04 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000500)={0x284, r1, 0x0, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_MEDIA={0x50, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7fff}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK={0x88, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x471}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x163c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffff801}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x35b8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x2}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x1}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9}]}, @TIPC_NLA_MEDIA={0x2c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}]}, 0x284}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:04 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 06:28:04 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xf5ffffff, 0x0, 0x0) [ 1469.826482][T22003] bond0: (slave bridge247): Enslaving as an active interface with an up link [ 1469.936285][T22024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:04 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffe0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:04 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) setsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000280)=0x1, 0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r7, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00d\x00\'\t\x00'/20, @ANYRES32=r7, @ANYBLOB="0000000000000000000000000b000100666c6f77657200000c00020008001d007f000001"], 0x3c}}, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r8 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$RTC_UIE_OFF(r8, 0x7004) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1469.976848][T22024] bond0: (slave bridge248): Enslaving as an active interface with an up link [ 1470.001649][T22024] bond0: (slave bridge248): Releasing backup interface 06:28:04 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xfffffff5, 0x0, 0x0) 06:28:04 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x4}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:04 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3) 06:28:04 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) sendmsg$sock(r0, &(0x7f0000000440)={&(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @multicast2}, 0x0, 0x2}}, 0x80, &(0x7f0000000700)=[{&(0x7f0000000300)="9922cf6dcdb2232f49ce2c9170a5e236b7cb66be7cd7753c78509bfc26ebd8e1b5146c0938bc14c1f6b017013209cca3091ab5743de552caa25f363c6e9e6f1c9486a13d68cb9a403254c76186234c58ff2493515ec0f421070462f044f496322e8d177533ac8b506bcf2e8c452e3a1d0820852fe3878f3d638a771d0e8edf4f04319c925810f973a9574d1be7b897d1", 0x90}, {&(0x7f00000003c0)="499bc5826affe297e3ec566862d660d28fe073088cb532510b13f1c1a239fcfefa70721d4277b805f7a81fafc81764892a737596062eda32793704", 0x3b}, {&(0x7f0000000500)="4adcf87030639ce67347b63d7c447e0de72956e3b392057aaa545ed35b77fa160c9c6f9933a87dcd18195f2dd09df2404d6b8cca42970dee8ebe1360c6e261c0dd0372e91443ec8ca78126c3be099931b426af09b022693e46dd27b8bd1caf4992869d194fdf8bc6af3d562f3b33060f100410d4f4b8d37745996068ced41165272ada7909d05ed9f6766acdd212cd5ead8739ca83abc4d51ddd38222029290de09363f15e46a9d251793771221ef206724a46bd594e00b1ae3518575336e159273c8d6aa64f17a1470d57bccd8cf27f255a750797ffebf82108064a4bdee99c9a9b1c428afcfd5986ed4bcdc63e", 0xee}, {&(0x7f0000000600)="6d4878d8b6231676316fcd3d24329aa21956b00502f0d87edd7696f344bfe84038402d5aa28916ae5feb743d45cb730b1b39a39f68edbe54e1e0c5f16203ec905f1c48149386cbd595a0f0d76efd29cf36c960c7aaa136e5a040d98c7e86f4e273e1dd365a39f2d7edc3284102210dea7e42ddbcce1c8b91529605e3d139ef3b5d53928589fc31558a8201b3acd169a80f329b44d0836748a2f5faba5e6e343495f78c9c381a2d0688e60fb008ca99c46b031140bf2315711a0324fb01de3e7aeacb", 0xc2}, {&(0x7f0000000400)="3d59ea52ab403ec6270dbce6872c1024f15fe7eaa4b6c770ca68fb65a55904e7", 0x20}], 0x5, &(0x7f0000000780)=[@mark={{0x14, 0x1, 0x24, 0xe2a}}, @timestamping={{0x14, 0x1, 0x25, 0x80000000}}, @txtime={{0x18, 0x1, 0x3d, 0x5}}, @mark={{0x14, 0x1, 0x24, 0xd3c}}, @txtime={{0x18, 0x1, 0x3d, 0x401}}, @timestamping={{0x14, 0x1, 0x25, 0x3f}}, @mark={{0x14, 0x1, 0x24, 0x1f}}, @txtime={{0x18, 0x1, 0x3d, 0x40}}, @txtime={{0x18, 0x1, 0x3d, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x7}}], 0xf0}, 0x40050) ioctl$VIDIOC_S_JPEGCOMP(r2, 0x408c563e, &(0x7f00000001c0)={0x6, 0xf, 0x3, "429684e962ed1456e5057807418188cb0dddcd152e0f1b9abdbe54a6b617b640fb2dfdc6d47577ad93eb7341367fc5f8f9ccf70896d1d0ceaac10879", 0x28, "55cbb78b19fb54d33181c00aff67b93e1517434ceae4a864546089e101190628ed0da6d42c1eae19883b73a3ff368e3800dfe50f9133fb0b89fb1ef6", 0x80}) ioctl$EVIOCGPROP(r1, 0x80404509, &(0x7f0000000080)=""/103) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$CHAR_RAW_IOMIN(r6, 0x1278, &(0x7f0000000100)) r7 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r7, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1470.370423][T22066] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1470.469221][T22093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1470.486760][T22100] bond0: (slave bridge248): Enslaving as an active interface with an up link [ 1470.499311][T22056] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1470.544059][T22093] bond0: (slave bridge248): Releasing backup interface 06:28:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x11, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:05 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x1000000000000, 0x0, 0x0) 06:28:05 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x300) 06:28:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x30000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:05 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x49c641, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:05 executing program 5: clone(0x20062804f7c, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x1234, &(0x7f0000000480)={0x0, 0x5f8}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) ioctl$ASHMEM_GET_SIZE(r3, 0x7704, 0x0) 06:28:05 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x140e, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0xfffffffe}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x3}]}, 0x58}}, 0x8000) [ 1470.813050][T22129] IPVS: ftp: loaded support on port[0] = 21 06:28:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x34000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1470.857783][T22140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:05 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f00) 06:28:05 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x80000000000000, 0x0, 0x0) 06:28:05 executing program 3: r0 = semget(0x2, 0x2, 0x20) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000180)={0xffffffffffffffff, 0x6}) semctl$IPC_STAT(r0, 0x0, 0x2, &(0x7f0000000000)=""/135) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ttynull\x00', 0x2841, 0x0) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) ioctl$PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, &(0x7f0000000100)) [ 1470.929526][T22158] bond0: (slave bridge249): Enslaving as an active interface with an up link [ 1470.967317][T22140] bond0: (slave bridge249): Releasing backup interface 06:28:05 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x4000) [ 1471.214820][T22158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:05 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x12, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:05 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x300000000000000, 0x0, 0x0) 06:28:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x400300, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:05 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_SET_PIT(r2, 0x8048ae66, &(0x7f0000000000)={[{0x20, 0x2, 0x3, 0xe0, 0x6, 0xfb, 0x5, 0x8, 0x7f, 0x7, 0x47, 0x2, 0x8}, {0xbf0, 0x80, 0x20, 0x0, 0x3, 0x7, 0x9, 0x3, 0x6, 0x9, 0x5, 0x7f, 0x2}, {0x80, 0x8, 0x5, 0x7f, 0x4, 0x2, 0x1, 0x5, 0xe3, 0xff, 0x1, 0x42, 0xb72}], 0x1}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:05 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x1000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1471.434982][T22218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1471.522196][T22228] bond0: (slave bridge250): Enslaving as an active interface with an up link [ 1471.575821][T22218] bond0: (slave bridge250): Releasing backup interface 06:28:07 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x800000) 06:28:07 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x300000, 0x5, 0x0, 0x2, 0x0, "b9e5cfb41ed9d75651fa684fbeca702b211a82", 0x7f, 0x6}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$IMCLEAR_L2(r1, 0x80044946, &(0x7f0000000000)=0x3e4) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:07 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x3f00000000000000, 0x0, 0x0) 06:28:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x2000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x25, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:07 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x4000000000000000, 0x0, 0x0) [ 1472.770322][T22244] bond0: (slave bridge251): Enslaving as an active interface with an up link 06:28:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x3000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1472.828316][T22244] bond0: (slave bridge251): Releasing backup interface 06:28:07 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) timer_create(0x7, &(0x7f00000001c0)={0x0, 0x15, 0x2, @thr={&(0x7f0000000340)="688282a0df8ec286069fc84ae7529ac4f01489878b8da5aab4350fdb86f66978387cdc475fa3721a3a1ed409e4672c05009eec2e606e6f7ecd26e80c1d5ea1bc065fc12af1e4f2d4cb833c7e95c95c5f81c64455c295bf3aec1cd31e30fbaef6e01740d43d460c2ba5fb48c80ab0200164cff64ffbddcd3399bd796346adbc38a939", &(0x7f00000006c0)="0d7f4b82ca36ec2dc1e777907f72d79819f4b67534ff2c2274dbb4cbf3517c3de0c009d2f277ddc26c377ceb187f3f92c72a8fb237abf0ab2547f9baf4446efb37048b9f4b5aaf918bf4477f298789f9999e5e1dcb5ca2bee04b8328af3cf52497e88ecaa5e8a03d56fa8df1e4aa09b8436cb83514e270b677b0a894e010f24c7b304eddc98aaf89bbe37a3ee4a5f6e47d56540281247c56f867038c8b25dac364e874821f7928f123ee9c71309ccdae2d2750bb9e6b7c995500d9b17c9b7e46dd9163bf8349f6401ab0dea997f6564059e6e109563ad3b5d937779a"}}, &(0x7f0000000040)=0x0) timer_settime(r3, 0x0, &(0x7f0000000180)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) write$char_usb(r4, &(0x7f00000000c0)="e887f6464e5f24fe2cd82dc3bc1e15a82883f29a15803eb623a32fce6b74c307ce009c7d863c67fa2e71176255206f8a5aade0dfebf9f9f9776e417f78908416dd1cb026", 0x44) timer_gettime(r3, &(0x7f0000000080)) 06:28:07 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x8, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x7, 0x1}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:07 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3000000) 06:28:07 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x8000000000000000, 0x0, 0x0) 06:28:07 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r2, 0xc02c5341, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) ioctl$VT_GETSTATE(r2, 0x5603, &(0x7f0000000080)={0x52c, 0x140, 0x3}) 06:28:07 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f000000) 06:28:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:07 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) writev(r3, &(0x7f00000004c0)=[{&(0x7f0000000000)='\n', 0x1}], 0x1) 06:28:07 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x48, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:07 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0xf5ffffff00000000, 0x0, 0x0) 06:28:07 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x40000000) 06:28:07 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x5000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1473.417887][T22342] bond0: (slave bridge252): Enslaving as an active interface with an up link [ 1473.457937][T22342] bond0: (slave bridge252): Releasing backup interface [ 1473.709315][T22342] bond0: (slave bridge252): Enslaving as an active interface with an up link [ 1473.740134][T22378] bond0: (slave bridge252): Releasing backup interface 06:28:10 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3) 06:28:10 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xf5ffffff) 06:28:10 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000000)={[0x6]}, 0x8, 0x80000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000080)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="0000000000078e9892a7cd3f8f060000000000", @ANYRES32=r2], 0x4}}, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000180)={@private, @multicast1, 0x0}, &(0x7f00000008c0)=0xc) sendmsg$BATADV_CMD_SET_HARDIF(r1, &(0x7f00000009c0)={&(0x7f0000000040), 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x64, r3, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x40}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x6a7}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1ff}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3a6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x20}]}, 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x44) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) close(r1) 06:28:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x95d4, 0x1, 0x0, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfffffff9}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0xffffffff}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 06:28:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x4c, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1476.004840][T22399] __nla_validate_parse: 5 callbacks suppressed [ 1476.004849][T22399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:10 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x300) 06:28:10 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xfffffff5) 06:28:10 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000080)) [ 1476.102111][T22418] bond0: (slave bridge253): Enslaving as an active interface with an up link [ 1476.139757][T22399] bond0: (slave bridge253): Releasing backup interface 06:28:10 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000540)=ANY=[@ANYBLOB="460400006c753813d867ca88aeb6af9cff36988cd8afb9d08dce9af175d781e6506c5a8b1305b70dd37271a14a6f00742bed16fb9dc99f179c5c2f84a1b48ed26ef94a69f6d9e8", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYBLOB="b27aa4e4514ea95adcb094b2f149ebc4fd33137278b5afe590bf68683ef862ac40d3aaf4aa0e280b1fad8f22fac780e3f2ae4517b1dcd5bd5d9e7340d7f4295f8e88b04edcd1dacf2e5e4bda41a4c229f1ed726c0af7d4d0870a4e8500cf7969f1a3c8c2925ca5519e5608ae4e46b1e351ad9db50a04c70e679845e084ba958e797d4157e18186d806518fc572b7d62e717a49d7b0f00b6d1540150016cb722ee58c42d63c5f363b082085060000000000000057c44947"], 0x4}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000080)='NLBL_MGMT\x00') sendmsg$NLBL_MGMT_C_REMOVEDEF(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="4ceaff00", @ANYRES16=r7, @ANYBLOB="000400000000fedbdf2505000000140006002001000000000000000000000000000106000b000600000014000500fe8000000000000000000000000000000800080064010102"], 0x4c}}, 0x0) sendmsg$NLBL_MGMT_C_LISTDEF(r4, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x78, r7, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x7}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @remote}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @loopback}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast2}, @NLBL_MGMT_A_DOMAIN={0xd, 0x1, '-@!-*.!(\x00'}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x78}, 0x1, 0x0, 0x0, 0x880}, 0x4000898) sendfile(r2, r1, 0x0, 0x100000002) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$KVM_IOEVENTFD(r8, 0x4040ae79, &(0x7f0000000080)={0x100000, &(0x7f0000000040), 0x1, r10}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) 06:28:10 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f00) 06:28:10 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x1000000000000) 06:28:10 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x2, [0x0, 0x0]}, &(0x7f00000001c0)=0xc) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000200)={r4, 0x101}, &(0x7f0000000240)=0x8) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES16=r7, @ANYRES32, @ANYRES32=r6], 0x4}}, 0x4004000) setsockopt$bt_BT_VOICE(r5, 0x112, 0xb, &(0x7f0000000080)=0x3, 0x2) r8 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r9, r10, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r8, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x8000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1476.425313][T22418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:10 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000040)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:10 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x60, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1476.571885][ T26] audit: type=1804 audit(1597472890.935:4511): pid=22480 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir525723940/syzkaller.AQOdmL/3391/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 06:28:11 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x4000) [ 1476.655029][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:11 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)="0c5254fd5f0b3d46964c0953ace233da77489970f73741429ecc743efa5c1a06eb457aef3b0bec5808e2c970e466172fefd457faa9db32f927f64d24a0", 0x3d}, {&(0x7f0000000200)="ad4463d7e2ee536591180aee35fe894f32f40e6a80376869c5973808f30f1167f6fa3a37aa1827c2b7c1d0f7227d7a2048bb00a77b88ec3d1539db0c9266b8a126c4c8fe0dbf4c9e04c00477bd2d37fbb85f8ee7ca656d46564d6a4eeda446edfb58360c0279a3ca760ae4746897324a1e010d49dbe2c15e3566d76d7802b37b737a1d1e588bb0e83a1e3456467ec333242e6d920e3790ed4c3b5b7443cd02a92800a70872ae455933e08febbb74b188138e823828250239da83cea5000b04ff20bb72832686030faa2746f8234000eae5fe02f888216fa89ab56520592e", 0xde}, {&(0x7f0000000100)="dcc00a170756208612b7b040cf53f6cf2d0aa2ff812e56ccff8e1b045bf8468fb75c3ed6d4ad28b0cc8007d7a225122520cc1da4e94bc5864e2d18c46fbe49c3d75f79a2ae42f1267d829379a8e5a884f4f68257e6cf271287688709d5fe7726e0d7dd9f20db52e0e80f8198b21151e38d75778d0a61e356714eeb5375882cde11141683be85b26f2adb569536e0f144e3b311ec574ab55a17b9a40c6dae27dcace7386f7ad120e90a050e157d3dea2c", 0x100}], 0x3) 06:28:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x9000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1476.700494][ T26] audit: type=1804 audit(1597472891.005:4512): pid=22480 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir525723940/syzkaller.AQOdmL/3391/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 06:28:11 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x80000000000000) [ 1476.789898][T22517] bond0: (slave bridge254): Enslaving as an active interface with an up link 06:28:11 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x20, 0x10000, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) syz_open_dev$ndb(&(0x7f0000000040)='/dev/nbd#\x00', 0x0, 0x800) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_S_FREQUENCY(r2, 0x402c5639, &(0x7f0000000000)={0x5, 0x1, 0x7fff}) [ 1476.874112][ T26] audit: type=1804 audit(1597472891.015:4513): pid=22480 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir525723940/syzkaller.AQOdmL/3391/cgroup.controllers" dev="sda1" ino=16290 res=1 errno=0 [ 1476.908500][T22512] bond0: (slave bridge254): Releasing backup interface 06:28:11 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x800000) 06:28:11 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x300000000000000) 06:28:11 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000500)=""/4096, &(0x7f0000000080)=0x1000) exit_group(0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r2, 0x0) r3 = syz_io_uring_setup(0x6845, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x3, 0x2, 0x0, r2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r6 = io_uring_setup(0x3013, &(0x7f0000000100)={0x0, 0xffffffff, 0x20, 0x1, 0x3}) r7 = io_uring_setup(0x1, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_REMOVE_BUFFERS={0x1f, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x1, {0x1, r8}}, 0x0) r9 = io_uring_register$IORING_REGISTER_PERSONALITY(0xffffffffffffffff, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, r9) mount(&(0x7f00000002c0)=ANY=[@ANYBLOB="000000000000000000a777eb4c882b845a1ac1ca54e850bc5e1f622231f87879ff27465a4b30097b74cf8982e8d4315be833bceead762bd764932c4f09eee28716d3106a27d673bbf8cb5f"], &(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='autofs\x00', 0x980082, &(0x7f0000000280)='cgroup.controllers\x00') io_uring_register$IORING_UNREGISTER_PERSONALITY(0xffffffffffffffff, 0xa, 0x0, 0x0) io_uring_enter(r3, 0x450c, 0x0, 0x0, 0x0, 0x40) 06:28:11 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3000000) 06:28:11 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f00000000000000) 06:28:11 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xa000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1477.280560][T22512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1477.347751][T22522] bond0: (slave bridge254): Enslaving as an active interface with an up link [ 1477.392339][T22517] bond0: (slave bridge254): Releasing backup interface 06:28:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x68, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = open(&(0x7f0000000140)='./file0\x00', 0x38402, 0x130) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000001c0)=@assoc_id=r3, &(0x7f0000000200)=0x4) exit_group(0x0) r4 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x4000, 0x0) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000300)=0x1, 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1f, r9, 0x511, 0x0, 0x0, {{}, {}, {0x14}}}, 0x30}}, 0x0) sendmsg$TIPC_CMD_ENABLE_BEARER(r7, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000010", @ANYRES16=r9, @ANYBLOB="080025bd7000fcdbdf25010000000000000001410000001c00170000001c000010006574683a73797a6b616c6c657230000084348f46d95c542f20bdb55de65f7b894ce66f4d03d563693ab96931f23f38a0a0544789b09944005d81c3ebd7f84503d1dada836b2bec006c52dd8c50b82ba05c085e84915b858c35e2a69278f92b98395d7c969c37b8628dbe0441cdae1a2cdc6ac33f58721bc56eb2f2b92b07198310bf48a6f846e9b783f5f89418f03651fdde36d0d751bc0ad9f3"], 0x38}, 0x1, 0x0, 0x0, 0x8181}, 0x10) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0xff7}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:12 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f000000) 06:28:12 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x4000000000000000) 06:28:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xb000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1477.722420][T22632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000080)={0x0, 0x0, 0x10, 0x2}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd=r2, 0x0, 0x0, 0x0, {0xa152}}, 0x0) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/pfkey\x00', 0x200, 0x0) r3 = syz_open_dev$vcsn(&(0x7f0000000140)='/dev/vcs#\x00', 0x6, 0x2000) io_uring_enter(r3, 0x112d, 0x0, 0x2, 0x0, 0x0) 06:28:12 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x40000000) 06:28:12 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) open_tree(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x1101) [ 1477.810024][T22647] bond0: (slave bridge255): Enslaving as an active interface with an up link 06:28:12 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x8000000000000000) [ 1477.878505][T22632] bond0: (slave bridge255): Releasing backup interface 06:28:12 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$FBIOBLANK(r2, 0x4611, 0x2) 06:28:12 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xf5ffffff) [ 1478.181138][T22647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1478.226516][T22647] bond0: (slave bridge255): Enslaving as an active interface with an up link [ 1478.241244][T22647] bond0: (slave bridge255): Releasing backup interface 06:28:12 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x6c, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:12 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 06:28:12 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x80d}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xc000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:12 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x4, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0xfffffffe}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:12 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xfffffff5) 06:28:12 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xd000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1478.560602][T22741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:13 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r1}, 0x8) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x1000, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0x7fff}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1478.614432][T22767] bond0: (slave bridge256): Enslaving as an active interface with an up link 06:28:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x800, 0x0) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) ioctl$CHAR_RAW_DISCARD(0xffffffffffffffff, 0x1277, &(0x7f0000000080)=0xffffffff) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1478.674305][T22741] bond0: (slave bridge256): Releasing backup interface 06:28:13 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x1000000000000) 06:28:13 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x3}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1479.031230][T22767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1479.047343][T22767] bond0: (slave bridge256): Enslaving as an active interface with an up link [ 1479.068815][T22767] bond0: (slave bridge256): Releasing backup interface 06:28:13 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x74, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000080)={0x0, 0x0}) syz_open_procfs(r3, &(0x7f0000000100)='attr/fscreate\x00') r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x49f2, 0x20, 0x1, 0x16b, 0x0, r4}, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:13 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x80000000000000) 06:28:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:13 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x4002, 0x0) fsmount(r1, 0x0, 0x2) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:13 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttynull\x00', 0x80, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)="0a5cd4db4faa842858cd04f89b33f5703ac9", 0x12}], 0x1) [ 1479.279189][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:13 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xf000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:13 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1479.329448][T22842] bond0: (slave bridge257): Enslaving as an active interface with an up link 06:28:13 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x300000000000000) 06:28:13 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1, 0x28011, r3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x0, &(0x7f00000029c0)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/173, 0xad}, {&(0x7f00000015c0)=""/163, 0xa3}, {&(0x7f0000001680)=""/248, 0xf8}, {&(0x7f0000001780)=""/4096, 0x1000}, {&(0x7f0000002780)=""/131, 0x83}, {&(0x7f0000002840)=""/167, 0xa7}, {&(0x7f0000002900)=""/145, 0x91}], 0x9) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000100)={0x800, 0x7, 0x0, 0x0, 0xc0000000}, 0x14) r8 = getgid() mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='fuse\x00', 0x1040000, &(0x7f00000002c0)={{'fd', 0x3d, r3}, 0x2c, {'rootmode', 0x3d, 0xa000}, 0x2c, {'user_id', 0x3d, r6}, 0x2c, {'group_id', 0x3d, r8}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x400}}], [{@fowner_lt={'fowner<'}}]}}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1479.415983][T22863] bond0: (slave bridge257): Releasing backup interface 06:28:13 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb45651fa686fbeca702b311a8200", 0xfffffff9}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000000100)={0x0, r5, 0x5, 0x7, 0x80000000, 0xffffffff}) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r1, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000), 0x0, 0x800}) 06:28:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x7a, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:14 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2, 0x10, r3, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000080)=""/96, &(0x7f0000000100)=0x60) getsockopt$IP6T_SO_GET_ENTRIES(r4, 0x29, 0x41, &(0x7f0000000200)={'mangle\x00', 0x79, "7b499cbd11212edb34397f23e10791e89c95398de1f74b5ae5a4a6450fc20cc5fb3f9deeb1e5ea861c60b93543dac61eddb9df6a563d39372bf2a109d26ca34a89ac459bc9da886eef3eab67ac9fe2158fb4f65c2a92bdc74cc94c107192a4124f8d3ac8272661907ef57fafe53cd22aaac367c8f7787e6dbf"}, &(0x7f0000000140)=0x9d) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:14 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) ioctl$CHAR_RAW_FLSBUF(0xffffffffffffffff, 0x1261, &(0x7f0000000000)=0x6) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:14 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x3f00000000000000) 06:28:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x10000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1479.743835][T22842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:14 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000b01000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, 0xffffffffffffffff, 0x0, 0x100000002) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, r6, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r3, &(0x7f00000005c0)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x20, r6, 0x10, 0x70bd26, 0x25dfdbfb, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x24040090) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) r8 = socket$key(0xf, 0x3, 0x2) recvmsg(r8, &(0x7f00000004c0)={&(0x7f0000000200)=@isdn, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)=""/231, 0xe7}, {&(0x7f0000000380)=""/126, 0x7e}, {&(0x7f0000000400)=""/172, 0xac}], 0x3}, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23, 0x5, @private2={0xfc, 0x2, [], 0x1}, 0xa000}, 0x1c) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r7, 0x4112, 0x0) 06:28:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x11000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1479.893668][T22922] bond0: (slave bridge258): Enslaving as an active interface with an up link [ 1479.911553][T22922] bond0: (slave bridge258): Releasing backup interface 06:28:14 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x4000000000000000) 06:28:14 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$rds(r0, &(0x7f0000000140)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffcdf) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) bpf$ENABLE_STATS(0x20, &(0x7f0000000080), 0x4) setsockopt$SO_TIMESTAMP(r2, 0x1, 0x3f, &(0x7f0000000040)=0x88, 0x4) ioctl$TCSETS2(r1, 0x402c542b, &(0x7f0000000100)={0x80000000, 0x0, 0x7ffffffe, 0x1, 0x3, "742b211a82000800000000e89900", 0x1d1}) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:14 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x8000000000000000) 06:28:14 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x12000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:14 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TCGETS(r1, 0x5401, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:14 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x300, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1480.438987][T22980] bond0: (slave bridge259): Enslaving as an active interface with an up link [ 1480.507673][T22980] bond0: (slave bridge259): Releasing backup interface 06:28:15 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r0) ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY_ALL_USERS(r0, 0xc0406619, &(0x7f0000000100)={{0x3, 0x0, @reserved="daab5675a6cf8bbae7d5ca29beff43dede649fa52b8c59885ff068349371f9de"}}) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x20450c, 0x0, 0x0, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) sendto$rose(r5, &(0x7f0000000080)="0a13832559cc111ce7f9ca1b225af97e5d1bf78053e3b43949c23207cf49918553e5383ed9ea8bbd3539a4fd41f91e", 0x2f, 0x841, &(0x7f00000000c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, 0x1, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, 0x1c) 06:28:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x20000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1480.854029][T22989] bond0: (slave bridge259): Enslaving as an active interface with an up link [ 1480.872532][T22989] bond0: (slave bridge259): Releasing backup interface 06:28:15 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xf5ffffff00000000) 06:28:15 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x101202, 0x0) ioctl$RAW_CHAR_CTRL_SETBIND(r0, 0xac00, &(0x7f0000000040)={0x1, 0x7, 0x0}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, 0x3, 0x3, 0x3, 0x0, 0x0, {0x2, 0x0, 0x7}, [@NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x99}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x80}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0xff}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x7ff}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x4}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$BLKFRASET(r2, 0x1264, &(0x7f0000000200)=0x5) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:15 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x0) bind(r5, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000080)={r6, 0x1, 0x6, @remote}, 0x10) 06:28:15 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_setup(0x7c69, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x40, &(0x7f0000000140)=0x307e, 0x0, 0x4) syz_io_uring_setup(0x7c69, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r6, r5, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000100)=@IORING_OP_TIMEOUT_REMOVE={0xc, 0x5, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r8}}, 0xd0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:15 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x671b, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x3, 0x258, 0x0, r1}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) mmap$perf(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x200000f, 0xbd6ebf5ddfb83056, r1, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x20450c, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(r1, 0x5, 0x0, 0x0) 06:28:15 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$KVM_GET_LAPIC(r4, 0x8400ae8e, &(0x7f0000000500)={"4cc6a3da3a78f143a35ff619659d272a54eda1538cd1cde6a9cca2b0c5ff6602ce9ffa69aa06cdd7881884a237b90ca730d2f9be5479af312782882cc49f1134abf73ab95d0f6c6d65d0c61560e3dd2d2ce6e9a59a205895c711fbaecf866e215063896ffc89256f7e9190482981b29d0913a7dc32c02cc48ac72407a624ae547750ae7d1bfbc5e88de70b15dcef5e3c3f22726be19b971ed893b79841fa968ea516fd282203477923d10479f0d244c884ab2b940fe69a70c5c6979644ea2491811745b66fea192f2e52c5428e6f09e7db22a66432162c270971d8aef196a147be8240859a843461479b62463ca7c8ee12f1af52dcc6553d29268cf724fa183e5c3179be91d145033941309057401d0b7d4ffb60b5471dbd59cff63b4b613041de4ddef7396fb950d096cd171bfe4415e788a43a5eb65f0116e2313d916cf984142c0763630d1347311b93f02adae7e48b5d617c11e30f13eb5e58f212af8c9209ea195fb82848eb3d7c3c683b3486243e1350ef26c2b3337c37eb258f3c1dbc9cbabf384d7a0626b2398e01cd92f27ac18e8f59c031a37f31237897501d091c54ff2eaa77a705113844993a303f87c67a84b870a150b08fa509d1c7c3736902b69b2b160966de73dae103e858cf6a62e34e6955f697e93dadcedddb653ac2cda452d646c1c511ea39b067b8717dc52a2a1f9dea4439739b4d9726c4ae49670a8d940d1d56a86bab21cc4ce00962d93128afe1217bd7228256944a6934788ccd88679ca13bb6e553205f2d9507fa67ac433f0a6139edfc7cd4c1a2d32b4cc84236beb4cf7e1320f194818fcacd2c2e2e0df0ed7e219cb26d1902149817ba8233ab2e379bf50226b373e177be8f3adae080aa3da630860ef2b8df2c0168a13654c3387cfaf6f49a3b4c01da23df9ce44d8e967913b2fcac2ea93b6652a1dfc69d72fb48ec682c9f094ff738d97b2e4b36023ea5c8cad03ccd2234f268c19f60d82a03f4b4f9c7bf2e203552fa48761073165e775ed6352a693afee8aa0c0624e2b292cc8550bb7f7724b9e3bacac47702f016bdb8e159e3ea7ef049a9b2080b6b402847bfed8cb2966c51101797f312ebb6b8291d04f0183171b86291cb2df35a486e66500c940651d51cd6d8d93e5f67f02ecbcfb868ddeec5f90e1f2ba942252f84c4a5e66e4f43173707df7af33bda34e5109196d45049182079b4c5e66a8a5f87af7f4f67a0ecaf4a926cd835c6ff82a78fede312c07f82691dc320c07cb82d5ea17716ead7de8886f747ffacb71edd6872dbb155f5b11e7d3f6b8fd920f87a96f9dc21c543dd493d2b902d89c351fad37759cf78408a67a7e94b8907c054201c9e5ef013bc7a4a5f9d2d9d47c39eeb7af31a77adfa3c660c5be1376532ad2dd597c5d8dd5cdda3c900b63cfe81e57041eb8cb6f33ab09a9d5034d8d4e0cc"}) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000100)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff839e144da3b2db02dae2e6fe27ed3e2c18901dd815663b3a291bc630b71a04ada3a72c593ab874495db2aac9f58b6ec58c6fba5b56421aae5770a488f2154c3cfa7d1bc00ba6e00024b0838de90f6bd14915656ce7c5161df5d8b0e6c1eb95aaac48453957efddf4256f4865c007f6ceb13477a390b807158cfd82b3ecae", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) 06:28:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x3f000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1481.221230][T23040] __nla_validate_parse: 4 callbacks suppressed [ 1481.221240][T23040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:28:15 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x500, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) [ 1481.302981][ T26] audit: type=1804 audit(1597472895.665:4514): pid=23050 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2797/cgroup.controllers" dev="sda1" ino=16324 res=1 errno=0 [ 1481.352714][T23068] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:15 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x40000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1481.397981][T23068] bond0: (slave bridge260): Enslaving as an active interface with an up link [ 1481.410136][T23078] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1481.448621][ T26] audit: type=1804 audit(1597472895.745:4515): pid=23072 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2797/cgroup.controllers" dev="sda1" ino=16324 res=1 errno=0 06:28:15 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0x0, 0x2a2243) r1 = dup(r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f00000001c0), &(0x7f0000000200)=0x4) clone(0x800, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r2 = syz_io_uring_setup(0x6ad5, &(0x7f0000000480)={0x0, 0x2, 0x0, 0x10000000}, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet6_sctp(0xa, 0x0, 0x84) r6 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r5, 0x84, 0x78, &(0x7f0000000140)=r7, 0x4) bind(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800150600"/20, @ANYRES32=r8, @ANYBLOB="00000000ffffffff000000000900010063616b6500000000640102000c00020000000000000000000800030000000000"], 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000300)={'syztnl0\x00', &(0x7f0000000280)={'syztnl0\x00', r8, 0x29, 0x40, 0xd3, 0x1ff, 0x3, @remote, @private0={0xfc, 0x0, [], 0x1}, 0x7, 0x8000, 0x0, 0x5}}) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000340)={@mcast1, 0x80, r10}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={r7, 0xfff, 0x20}, &(0x7f0000000100)=0xc) r11 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r11}, 0x0) io_uring_enter(r2, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1481.508720][T23068] bond0: (slave bridge260): Releasing backup interface 06:28:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) setsockopt$inet_udp_int(r1, 0x11, 0x1, &(0x7f0000000140)=0x80000000, 0x4) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) r6 = openat$cgroup_ro(r5, &(0x7f0000000180)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r6, 0xc0405665, &(0x7f0000000080)={0x7, 0x1, 0x4, 0x80, 0x9, 0x7fffffff, 0xe}) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x2000, 0x0) setsockopt$inet6_MRT6_ADD_MIF(r7, 0x29, 0xca, &(0x7f0000000100)={0x7f, 0x0, 0x0, 0x7f, 0x1c2425f3}, 0xc) sendto$x25(r0, &(0x7f0000000000)="bf49a4e4a747f6", 0x7, 0x800, &(0x7f0000000040)={0x9, @remote={[], 0x1}}, 0x12) ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:16 executing program 1: clone(0x20022a46ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1481.641915][ T26] audit: type=1804 audit(1597472895.795:4516): pid=23050 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2797/cgroup.controllers" dev="sda1" ino=16324 res=1 errno=0 06:28:16 executing program 5: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000005380)='/dev/ubi_ctrl\x00', 0x404100, 0x0) setsockopt$inet_tcp_buf(r0, 0x6, 0x21, &(0x7f00000053c0)="2ee523f1ba7088c7c37b2d56d2fb8375de3c06c3f0174bc976b2892587908021a48404d699ab1ebf8247285f5d80f88446f9844802fa6cab167b44274add4595449b971b56b147d797274ff1dee08a5bbc59c81715364e1983a0dec79f3aa8903f35f38ca6f0fa49e09331c40bce11026f09b7dd5952356b1f3cf986cc704358fae0cc8088", 0x85) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r1, 0x84, 0x78, &(0x7f0000000140)=r3, 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={r3, 0xa962, 0x10, 0x8000, 0x1}, &(0x7f00000000c0)=0x18) exit_group(0x0) r4 = syz_io_uring_setup(0x6ad6, &(0x7f0000000280)={0x0, 0x3, 0x10}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00004f9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r4, 0x450c, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) sendmsg$NFQNL_MSG_VERDICT_BATCH(r7, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2000000003030102000e0000000000000006034000000400"], 0x1c}, 0x1, 0x0, 0x0, 0x4040090}, 0x9) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ocfs2_control\x00', 0x450140, 0x0) [ 1481.770945][ T26] audit: type=1804 audit(1597472896.055:4517): pid=23111 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2798/cgroup.controllers" dev="sda1" ino=16380 res=1 errno=0 06:28:16 executing program 1: clone(0x20022046ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x48000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1481.944137][T23130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1481.961680][T23130] bond0: (slave bridge260): Enslaving as an active interface with an up link [ 1481.997828][T23130] bond0: (slave bridge260): Releasing backup interface 06:28:16 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) ioctl$DRM_IOCTL_DROP_MASTER(r3, 0x641f) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000080)={0x1, 0x5, 0x10f, 0x20, 0x3e6, 0x20, 0xa}) 06:28:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x4c000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:16 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x600, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:16 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x400000, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = io_uring_setup(0x3013, &(0x7f0000000080)={0x0, 0x5e1f, 0x0, 0x0, 0x0, 0x0, r3}) r5 = io_uring_setup(0x1, &(0x7f0000000500)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1482.352553][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:16 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x60000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:16 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) ioctl$SNDCTL_SEQ_OUTOFBAND(r1, 0x40085112, &(0x7f0000000080)=@raw={0xfe, 0x0, "8e2e95467212"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) ioctl$RTC_UIE_OFF(r2, 0x7004) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f0000000100)={0x4, 0x5, 0x1, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x80800001, 0x8001}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) msync(&(0x7f0000909000/0x1000)=nil, 0x1000, 0x5) ioctl$SOUND_MIXER_READ_VOLUME(r3, 0x80044d12, &(0x7f0000000040)) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_MAKE_EQUIV(r4, &(0x7f0000000840)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x28, 0x3f7, 0x4, 0x70bd2a, 0x25dfdbfc, {0x7, 0x7, './file0', './file0'}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000800}, 0x84) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1482.402553][T23164] bond0: (slave bridge261): Enslaving as an active interface with an up link [ 1482.427725][T23164] bond0: (slave bridge261): Releasing backup interface [ 1482.589866][T23164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1482.614344][T23188] bond0: (slave bridge261): Enslaving as an active interface with an up link 06:28:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x68000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:17 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttynull\x00', 0x1141, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) [ 1482.658769][T23188] bond0: (slave bridge261): Releasing backup interface 06:28:17 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:17 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x700, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x6c000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:17 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x66d8, 0xfdffff1e, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0xffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) timerfd_gettime(r6, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1483.169474][T23218] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:17 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x74000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:17 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1483.274305][T23226] bond0: (slave bridge262): Enslaving as an active interface with an up link [ 1483.309195][T23218] bond0: (slave bridge262): Releasing backup interface 06:28:17 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r0, @ANYBLOB="0e7e9f0e8835eb85c2c6650453938df765d47576bee3f20ced36e41c696d55a1a0ea24e11fd3a0d3389ccf7f1b70715d0f100d5d615307b45d5f91693ec71796bcfd718b2f09a13d7abca034569df2038317550ab79f63da472e592d7e6ac8ffd172f5147c9f16372c3f62ffe7f7b7009b84f3ac5134346333eacc912420be9cfa411575958ef380228150ffeac26e0ce6acb34ecc4ff61ed0534b39e03ac51fef9bfed0e68514d33458dff79c19a6b178293e445fbed2e556abc872a1c9b8442ecb6f7e8c400dd544", @ANYRES32=r2, @ANYRES32=r0], 0x4}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) sendfile(r1, r0, 0x0, 0x2) r3 = dup(r0) ioctl$SIOCRSGCAUSE(r3, 0x89e0, &(0x7f0000000440)) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e566754e61fc197b67684fbeca702b211a82"}) syz_open_dev$char_usb(0xc, 0xb4, 0x6) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000000)) 06:28:17 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = getpid() getpgid(r0) userfaultfd(0x80000) r1 = syz_open_procfs(r0, &(0x7f0000000080)='stack\x00') r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x4c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@SMC_PNETID_IBPORT={0x5, 0x4, 0x2}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4020010}, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x20450c, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) write$P9_RAUTH(r6, &(0x7f0000000240)={0x14, 0x67, 0x1, {0x80, 0x1, 0x5}}, 0x14) 06:28:17 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000080)={0xffffffffffffffff}, 0x106, 0x3}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000100)={0x4, 0x8, 0xfa00, {r1, 0xd27a}}, 0x10) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = io_uring_setup(0x3013, &(0x7f0000000200)) r7 = io_uring_setup(0x1, &(0x7f0000000500)) r8 = io_uring_register$IORING_REGISTER_PERSONALITY(r7, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0xa, 0x0, r8) io_uring_setup(0x3013, &(0x7f0000000200)) io_uring_setup(0x1, &(0x7f0000000500)) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x1000) 06:28:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x7a000000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1483.728521][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:18 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) shmget(0x0, 0x1000, 0x10, &(0x7f0000ffe000/0x1000)=nil) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000000)='cpuacct.usage_all\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$KDSETMODE(r6, 0x4b3a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x2, 0x3}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:18 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r6, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000080)={r6, 0xd15b, 0x10}, &(0x7f00000000c0)=0xc) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1483.797095][T23226] bond0: (slave bridge262): Enslaving as an active interface with an up link [ 1483.833238][T23264] bond0: (slave bridge262): Releasing backup interface 06:28:18 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000080)=""/124) exit_group(0x0) r3 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=@newae={0x48, 0x1e, 0x1, 0x0, 0x0, {{@in=@multicast2}, @in6=@private2}, [@replay_thresh={0x8}]}, 0x48}}, 0x0) io_uring_enter(r3, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:18 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x900, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:18 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x11af, &(0x7f0000000480)={0x0, 0x4, 0x0, 0x200000, 0x253}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x6, 0x24080) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) mkdirat(r4, &(0x7f0000000100)='./file0\x00', 0x1) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:18 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x9effffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:18 executing program 3: mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) ioctl$KVM_NMI(0xffffffffffffffff, 0xae9a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x810, r0, 0xfe254000) recvfrom$x25(r0, &(0x7f0000000200)=""/251, 0xfb, 0x10002, &(0x7f0000000080)={0x9, @remote={[], 0x2}}, 0x12) r1 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r2 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = getpid() getpgid(r3) ioctl$DRM_IOCTL_GET_CLIENT(r2, 0xc0286405, &(0x7f0000000040)={0x100000, 0x9, {r3}, {}, 0x4c9c, 0x80}) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) r5 = fcntl$dupfd(r4, 0x0, r2) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000000)) ioprio_set$uid(0x0, 0x0, 0x4007) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000100)="f0ee94d75673a8a1b207d243012775b6574bc6965378576e44685c127310af852b6622fcf3f858e1ad37ac3feff3302dcb3d0ce4c963397545698f710e94ed01c8bdd2d46d4204c02a3a9dd5dfd5c36e801e79074451bbd8", 0x58}], 0x1) socket$l2tp6(0xa, 0x2, 0x73) [ 1484.271930][T23326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.334600][T23340] bond0: (slave bridge263): Enslaving as an active interface with an up link 06:28:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xbd210000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:18 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$SIOCX25SSUBSCRIP(r4, 0x89e1, &(0x7f0000000080)={'macvtap0\x00', 0x8001}) [ 1484.380052][T23326] bond0: (slave bridge263): Releasing backup interface 06:28:19 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000001080)='fou\x00') sendmsg$FOU_CMD_GET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x24, r2, 0x29, 0x0, 0x0, {}, [@FOU_ATTR_AF={0x5, 0x2, 0x2}, @FOU_ATTR_PORT={0x6}]}, 0x24}}, 0x0) r3 = socket(0x11, 0x800000003, 0x0) bind(r3, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x19229ac0d5fe80c8}, 0x40010) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r6 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) io_uring_enter(r6, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xe0ffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1484.790491][T23340] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1484.824480][T23340] bond0: (slave bridge263): Enslaving as an active interface with an up link 06:28:19 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f00000000c0)=0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) r3 = io_uring_setup(0x3013, &(0x7f0000000200)) r4 = io_uring_setup(0x1, &(0x7f0000000500)={0x0, 0xfffffffe}) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_ASYNC_CANCEL={0xe, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, {0x0, r5}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r6 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) io_uring_register$IORING_UNREGISTER_BUFFERS(r6, 0x1, 0x0, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x34, 0x0, 0x10, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0xc0}, 0x10) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = dup(r7) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) ioctl$SNDRV_RAWMIDI_IOCTL_DROP(r8, 0x40045730, &(0x7f0000000080)=0x40) [ 1484.861964][T23340] bond0: (slave bridge263): Releasing backup interface 06:28:19 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = dup(r0) socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="2400000036001901000000000000000003000000040000000c0001"], 0x24}}, 0x0) r3 = syz_io_uring_setup(0x6ad7, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x3c5}, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r3, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0xffffffff}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)={0x2c, r7, 0x5, 0x0, 0x0, {}, [@SEG6_ATTR_SECRETLEN={0x5}, @SEG6_ATTR_ALGID={0x5}, @SEG6_ATTR_HMACKEYID={0x8}]}, 0x2c}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SET_TUNSRC(r3, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r7, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8}, @SEG6_ATTR_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x80) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r3, 0x0, 0x43, &(0x7f0000000280)={'icmp\x00'}, &(0x7f0000000300)=0x1e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r8 = signalfd(0xffffffffffffffff, &(0x7f00000000c0)={[0xe5a]}, 0x8) ioctl$SNDCTL_DSP_SETTRIGGER(r8, 0x40045010, &(0x7f0000000100)=0x46a) [ 1485.078768][T23406] openvswitch: netlink: Message has 8 unknown bytes. 06:28:19 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xefffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xa00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:19 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000680)=ANY=[@ANYBLOB="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", @ANYRESOCT, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x44) sendfile(r4, r3, 0x0, 0x100000002) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f00000001c0)={0x0, 0xb37, 0x4, 0x2, 0x7, [{0x5, 0x2, 0x5, [], 0x6}, {0x4, 0x6, 0x400, [], 0x2000}, {0x4, 0x5, 0x3, [], 0x400}, {0x6, 0x10000, 0xfbd, [], 0x1400}, {0x1, 0x3, 0x7, [], 0x100}, {0x6, 0x200, 0x100, [], 0x2000}, {0x7ff, 0x4, 0x1ff, [], 0x800}]}) r8 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0xc0d00, 0x0) dup3(r4, r8, 0x0) [ 1485.240211][T23398] openvswitch: netlink: Message has 8 unknown bytes. 06:28:19 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) write$smackfs_cipsonum(r5, &(0x7f0000000080)=0xfffffffffffffff8, 0x14) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1485.348924][T23446] bond0: (slave bridge264): Enslaving as an active interface with an up link [ 1485.384485][T23446] bond0: (slave bridge264): Releasing backup interface 06:28:20 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x400, 0x0) r3 = openat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)={0x101241, 0x3, 0x91bbe8dda770eddb}, 0x18) r4 = openat(r3, &(0x7f0000000300)='./file0\x00', 0x400200, 0x158) ioctl$SIOCNRDECOBS(r4, 0x89e2) linkat(r2, &(0x7f0000000100)='./file0\x00', r3, &(0x7f0000000200)='./file0\x00', 0x1000) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r0, r1, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_DQBUF(r10, 0xc0585611, &(0x7f0000000240)={0xef1, 0x3, 0x4, 0x2, 0xffffffff, {0x0, 0xea60}, {0x5, 0xc, 0x5, 0x8, 0x85, 0xb8, "e9670c95"}, 0x1d, 0x4, @fd=r3, 0x2}) io_uring_enter(r6, 0x20450c, 0x3278, 0x2, 0x0, 0x0) 06:28:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bridge_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x1, 'bridge_slave\x00'}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_GUARD={0x5}]}}}]}, 0x44}}, 0x0) exit_group(0x0) socket$inet_sctp(0x2, 0x5, 0x84) r5 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r5, 0x450c, 0x0, 0x0, 0x0, 0x0) getsockopt$IP_SET_OP_GET_BYINDEX(r4, 0x1, 0x53, &(0x7f0000000140)={0x7, 0x7, 0x2}, &(0x7f00000001c0)=0x28) 06:28:20 executing program 3: socket$inet_udplite(0x2, 0x2, 0x88) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r6) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$SNDRV_PCM_IOCTL_DROP(r7, 0x4143, 0x0) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r8, 0x402c542b, &(0x7f00000001c0)={0x80, 0x5, 0x9, 0x0, 0x0, "fd6a0f481cd9d75651fa684fbeca702b211a82"}) writev(r8, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xf0ffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1485.758708][T23484] bond0: (slave bridge264): Enslaving as an active interface with an up link [ 1485.776866][T23484] bond0: (slave bridge264): Releasing backup interface 06:28:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) r3 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x200000, 0x0) ioctl$CHAR_RAW_ROSET(r3, 0x125d, &(0x7f0000000100)=0x7880000) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) ioctl$CHAR_RAW_RAGET(r4, 0x1263, &(0x7f0000000080)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1485.971646][ T26] audit: type=1804 audit(1597472900.335:4518): pid=23499 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2805/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 06:28:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xfdffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:20 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = openat(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x400000, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000500)=0x14) sendmsg$NLBL_UNLABEL_C_LIST(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, 0x0, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'wg0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x28000004}, 0x24008854) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000540)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2, @ANYRESDEC, @ANYRES32], 0x4}}, 0x0) sendfile(r2, r0, 0x0, 0x100000002) r4 = syz_io_uring_setup(0x53d3, &(0x7f0000000480)={0x0, 0x0, 0x1, 0x0, 0x0, 0x0, r0}, &(0x7f0000ff7000/0x3000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) io_uring_enter(r4, 0x20450c, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r9, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r9, 0x29, 0x36, &(0x7f0000000340)={0x32, 0x1a, [], [@jumbo, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, [], 0x1, 0x0}}, @hao={0xc9, 0x10, @private1}, @ra, @calipso={0x7, 0x30, {0x1, 0xa, 0x8, 0x8, [0x7, 0x68, 0xfffffffffffffa6d, 0x9, 0x10001]}}, @ra={0x5, 0x2, 0x8}, @hao={0xc9, 0x10, @private0={0xfc, 0x0, [], 0x1}}, @generic={0x9, 0x14, "7bb9eedf048be8147f158a0a1aed68f43ad205c8"}, @generic={0x81, 0x44, "c084ee766f4819f2d8e44cc9c1bc47ab3d332e13a46aeb9a46033e2283209c5878b91b2866bb378646df12e70c6e18ac32a386020b55349a5220a67925bc669981852bcb"}]}, 0xe0) setsockopt$inet_MCAST_LEAVE_GROUP(r8, 0x0, 0x2d, &(0x7f0000000080)={0xfffffffc, {{0x2, 0x4e22, @broadcast}}}, 0x88) 06:28:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xb00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:20 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_ENUM_FMT(r5, 0xc0405602, &(0x7f00000000c0)={0x605b1810, 0x1, 0x2, "871627eca11e12f77249e21d7ebda5080799cdc1c6a84f4742395e782932f151", 0x34343459}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b10800c0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) r9 = open$dir(&(0x7f00000000c0)='.\x00', 0x0, 0x0) fstat(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0}) setuid(r10) syz_mount_image$ntfs(&(0x7f0000000100)='ntfs\x00', &(0x7f0000000140)='./file0\x00', 0xf9, 0xa, &(0x7f00000017c0)=[{&(0x7f00000001c0)="55796aedb96a", 0x6, 0x9}, {&(0x7f0000000200)="fae617b3742d1292852f23e25cec7da25f8acfcc489a075fe00b8665fea9ac58b47c93ef7d9baf9fce5bb9529dc3b2d3694e5615deaeab0d761c2b", 0x3b}, {&(0x7f0000000300)="a647f64fce68d3996cf04856ea16c0d7d5ef6a440440016937aa53e1a5ff2c97de82f3b8c13ff0b4a52c6028d851e1625348e811d485d56a2971fd335bd79d92bdc6a2337aca424cce868c305eafd1a1897834b99280da2ea40ff57b5441e28d12ce6599f85864be329c612019cbb1954d345bd57f700803ae9a6991e454bf327ace068b11d7ee573968b37abfc7bb90b8c086939835dc94d86dbd3a9c0a149aac6b4814d018c981b64dab1bf03631aeb1f757f58eff1efe22c7b5b254c80cfbf116fa5937aa5d3ccc754844fa", 0xcd}, {&(0x7f0000000500)="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", 0x1000, 0x1}, {&(0x7f0000001500)="6640b8a00c10d0cd347fd9f4c9a5b0b73c5c3fb27d08d4c0895b512743acf7d80d5a0df7b515587ad1d44ed4f043d51176fa2d0229507e9d5ec2ee1d656254027b84dc4be0e1a5fb785d7f920c93fc94f37d1b3f503677001080946a4529f2fd17a6dcceae381bef99b756a4363fd4c00b1ad1af5037c81efd999bd6c4dd763d0443a32b3c0de9e2aa45dc99ca6002fddc744dc0f2851ea4222a1bc44e15fa31f1bc", 0xa2, 0x1}, {&(0x7f0000000240)="3b1f11c901db0d1eda98b8b667a19372e703de3a1075e0272e51b490b77dbb4270b25b29177681086c64543a04b305b20acb23c2bc8f6d26402c08cba2954584f3beb852b8df96639f212db696d616480d79484096745f3131317f44a7d95b95b70ae2e4f2d812362e00036800ff4eeaf5", 0x71}, {&(0x7f0000000400)="9042dbcbee8ff79362a514572fb4221a436cbf162ab354a54aadf7dda76a8e3e4579607a683eccc2f9dea3d886ce07ff58710053c3c5e75d672b26bad75148560327111eb84aad97aae12d149959019bf9944eeb27b983c2f9f11b613d4ce70bc592439ce867d28a78b1afebf667cb514395d61c318fddb0f6", 0x79, 0x8}, {&(0x7f00000015c0)="a0b3cd7f9a2efcc720cfe4b7c2238ce76144afc130e6c71ca11bb0197c098324821fa0aa8dd32c9c0f6164b45b64d1dd94df75cedab3b4abb7d586ce28a684541f4ca5789385147c34cc161823cce98fa2645a200c2c79bd93137e3cd0dbfc41cd91b92523b0504763987f118813158664347aa818e417214c295df2f910ad76aeea74f4d6fb3d6a38e0f8bab0a300b7d392120a9f9bd77fcb4ac9bd285d06cc23e2bc73", 0xa4}, {&(0x7f0000001680)="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", 0xfe, 0x2}, {&(0x7f0000001780)="83bab8d2bc5ca38d476fca5d53084f884ea831d8b085e4f3627778697c6cc78a100c6891b87df20d36c070b765f4ad213dafd8ea", 0x34}], 0x100008, &(0x7f00000018c0)={[{@errors_recover='errors=recover'}, {@utf8='utf8'}, {@mft_zone_multiplier={'mft_zone_multiplier', 0x3d, 0x1}}, {@errors_recover='errors=recover'}, {@nls={'nls', 0x3d, 'cp1255'}}, {@errors_continue='errors=continue'}, {@case_sensitive_no='case_sensitive=no'}, {@errors_remount='errors=remount-ro'}], [{@uid_gt={'uid>', r10}}, {@fsuuid={'fsuuid', 0x3d, {[0x30, 0x30, 0x64, 0x0, 0x37, 0x39, 0x38, 0x65], 0x2d, [0x33, 0x61, 0x34, 0x37], 0x2d, [0x37, 0x39, 0x65, 0x31], 0x2d, [0x63, 0x36, 0x66, 0x63], 0x2d, [0x39, 0x34, 0x30, 0x37, 0x61, 0x37, 0x38, 0x34]}}}, {@subj_role={'subj_role', 0x3d, 'batadv\x00'}}, {@appraise_type='appraise_type=imasig'}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@appraise='appraise'}]}) ioctl$GIO_FONT(r6, 0x4b60, &(0x7f0000000080)=""/16) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:20 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xfeffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) read$smackfs_cipsonum(r0, &(0x7f0000000080), 0x14) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1486.294942][T23524] bond0: (slave bridge265): Enslaving as an active interface with an up link [ 1486.352902][T23535] bond0: (slave bridge265): Releasing backup interface [ 1486.356206][ T26] audit: type=1804 audit(1597472900.715:4519): pid=23536 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir527366050/syzkaller.tfcsqH/2674/cgroup.controllers" dev="sda1" ino=16284 res=1 errno=0 06:28:20 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f000006e000/0x4000)=nil, &(0x7f0000896000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = epoll_create1(0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r3, &(0x7f0000000240)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f000086fff4)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x2, r4, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000080)={0x0}) r8 = openat$null(0xffffffffffffff9c, &(0x7f0000000100)='/dev/null\x00', 0x4000, 0x0) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r8, 0x8983, &(0x7f0000000140)={0x1, 'veth0_vlan\x00', {}, 0x89c}) mmap$perf(&(0x7f00000b9000/0x4000)=nil, 0x4000, 0x2000002, 0x11, r8, 0xb078) ioctl$DRM_IOCTL_UNLOCK(r6, 0x4008642b, &(0x7f00000000c0)={r7, 0x37}) [ 1486.455078][ T26] audit: type=1804 audit(1597472900.815:4520): pid=23551 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir527366050/syzkaller.tfcsqH/2674/cgroup.controllers" dev="sda1" ino=16284 res=1 errno=0 06:28:20 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x4563, &(0x7f0000000100)={0x0, 0x0, 0x18}, &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ee7000/0x4000)=nil, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$vcsu(&(0x7f0000000180)='/dev/vcsu#\x00', 0x1736, 0x200000) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000200)={&(0x7f0000000300)={0xc8, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x9}, [@CTA_ID={0x8, 0xc, 0x1, 0x0, 0x2}, @CTA_TUPLE_ORIG={0x28, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_ZONE={0x6}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x402}, @CTA_TUPLE_ORIG={0x64, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, [], 0x3e}}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_ZONE={0x6}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @rand_addr=0x64010101}}}]}, @CTA_LABELS_MASK={0x18, 0x17, [0x0, 0xfffffffd, 0x7, 0x376, 0xfffffffe]}]}, 0xc8}, 0x1, 0x0, 0x0, 0x4000080}, 0x8000) syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index}, 0xffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="669764bc", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) ioctl$KVM_TRANSLATE(r4, 0xc018ae85, &(0x7f0000000080)={0x100000, 0x6000, 0x8, 0x6, 0x80}) r7 = socket$qrtr(0x2a, 0x2, 0x0) readahead(r7, 0x100, 0xffffffffffff7f16) r8 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r8, 0x8912, 0x400200) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000400)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000280)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r8, &(0x7f0000000440)={0x3, 0x40, 0xfa00, {{0xa, 0x4e22, 0x1d1426a9, @mcast2}, {0xa, 0x4e24, 0x80, @remote, 0xe5}, r9, 0x8}}, 0x48) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1486.632084][ T26] audit: type=1804 audit(1597472900.995:4521): pid=23499 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2805/cgroup.controllers" dev="sda1" ino=16373 res=1 errno=0 06:28:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000080)=0xffffffffffffff80) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) listen(r5, 0x3) 06:28:21 executing program 3: ioctl$TCSETS2(0xffffffffffffffff, 0x402c542b, &(0x7f0000000000)={0x0, 0x5, 0x1, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(0xffffffffffffffff, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffff0000, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1486.777297][T23535] __nla_validate_parse: 4 callbacks suppressed [ 1486.777305][T23535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:21 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f00000000c0)={0x9, 0x5}) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) mbind(&(0x7f0000ffb000/0x1000)=nil, 0x1000, 0x8000, &(0x7f0000000080)=0x1ff, 0x8, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r0, 0x89fa, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000100)={'ip6_vti0\x00', r5, 0x29, 0x5, 0x3, 0x8, 0x40, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1, 0x8000, 0x4c, 0x3}}) 06:28:21 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1486.858162][T23535] bond0: (slave bridge265): Enslaving as an active interface with an up link 06:28:21 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x410941, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) clone(0x8100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x0, 0x0, 0x148, 0x0, 0x0, 0x2d0, 0x2a8, 0x2a8, 0x2d0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'bond_slave_1\x00', {0x0, 0x0, 0x3, 0x0, 0x0, 0x20000003, 0x7}}}, @common=@unspec=@string={{0xc0, 'string\x00'}, {0x0, 0x0, 'fsm\x00', "0595c0ef8a42e1681c52a599943b9f8f033e74ab9ce28aede436cd2f3fbc3a03d976f1cb8fd234ded36ecd7f496b02d09e656b1143ec9563831bf050c9c1531fa2131c5ad4fd5590e611ddc86f36b139e030448087b0a74c9c1c39384ab02542529f918bd408c47ae528444cdbe57e6280909f0cf3ee900f29bc4d1d8e4b15ee", 0x50, 0x3}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00'}}, {{@uncond, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20, 'socket\x00'}}, @common=@ah={{0x30, 'ah\x00'}}]}, @common=@SET={0x60, 'SET\x00'}}], {{[], 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c8) r2 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) writev(r2, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) setsockopt$rose(0xffffffffffffffff, 0x104, 0x6, &(0x7f0000000000)=0x3ff, 0x4) [ 1486.957929][T23592] bond0: (slave bridge265): Releasing backup interface 06:28:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xc00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:21 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f00000000c0)=@get={0x1, &(0x7f0000000080)=""/5, 0xffffffffffffffff}) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0xd2c9, 0x0, 0x1, 0x211, 0x0, r1}, &(0x7f0000ee8000/0x2000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r5 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r5}, 0x0) io_uring_enter(r2, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:21 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCSSOFTCAR(r2, 0x541a, &(0x7f0000000000)=0x40) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) prctl$PR_MCE_KILL_GET(0x22) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) r3 = fsmount(r0, 0x0, 0x18) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r3, 0xc04064aa, &(0x7f0000000380)={&(0x7f0000000140)=[0x0, 0x0], &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x1, 0x0, [], 0x2, 0x9}) r4 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) r8 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@pptp, &(0x7f0000000100)=0x80, 0x80000) ioctl$sock_inet6_tcp_SIOCATMARK(r8, 0x8905, &(0x7f00000001c0)) syz_io_uring_submit(r5, r6, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r7}, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) io_uring_enter(r4, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffffff7f, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1487.143482][T23604] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.5'. 06:28:21 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) ioctl$SNDCTL_TMR_TEMPO(r3, 0xc0045405, &(0x7f00000000c0)=0x3a) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$BINDER_SET_MAX_THREADS(r7, 0x40046205, &(0x7f0000000080)=0x30) 06:28:21 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCL_UNBLANKSCREEN(r1, 0x541c, &(0x7f0000000000)) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1487.291357][T23643] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:21 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffffff9e, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:21 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r1, 0xc0285629, &(0x7f0000000140)={0x0, 0xc, 0x9, [], &(0x7f0000000100)}) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) read$eventfd(r0, &(0x7f0000000080), 0x8) exit_group(0x0) r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r5) ioctl$FS_IOC_GETFLAGS(r5, 0x80086601, &(0x7f00000000c0)) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6}, 0x0) io_uring_enter(r2, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1487.417514][T23659] bond0: (slave bridge266): Enslaving as an active interface with an up link 06:28:21 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) ioctl$SNAPSHOT_ATOMIC_RESTORE(r0, 0x3304) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r1, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:21 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = syz_io_uring_setup(0xc95, &(0x7f0000000480)={0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, r0}, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r1, 0x450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$F2FS_IOC_RESIZE_FS(r5, 0x4008f510, &(0x7f0000000080)=0x9) [ 1487.512055][T23643] bond0: (slave bridge266): Releasing backup interface 06:28:22 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TIOCL_SCROLLCONSOLE(r0, 0x541c, &(0x7f0000000000)={0xd, 0x6}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xb0, r3, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x60, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x351}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffff7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x55b}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3e39}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x401}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x80000000}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0xc880}, 0x44000) [ 1487.906132][T23659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1487.940399][T23659] bond0: (slave bridge266): Enslaving as an active interface with an up link [ 1487.956378][T23659] bond0: (slave bridge266): Releasing backup interface 06:28:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xd00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:22 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x192f, &(0x7f0000000480)={0x0, 0x0, 0x10, 0xfffffffc}, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r4 = getpid() getpgid(r4) ptrace$cont(0x7, r4, 0x1, 0xffffffffffffff01) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet(0x2, 0x6, 0x8000084) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, &(0x7f0000000140)=r8, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={r8, 0x400}, 0x8) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r10, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r9], 0x4}}, 0x0) sendfile(r9, r5, 0x0, 0x100000002) ioctl$TIOCL_GETSHIFTSTATE(r5, 0x541c, &(0x7f0000000080)={0x6, 0x7f}) 06:28:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffffffe0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:22 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x2}, &(0x7f00003af000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa053}}, 0x0) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, 0x24) sendmmsg(r3, &(0x7f0000004940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000840)="34ac055b206c4adec80b9429f62889733e6d5f888dd0d0dd629598f28108e25c0dd044bd3ef27d2e9e38434c2c54441496701bab80ff955c5e8b87d6c844b25bc770590959a6e95798a06d85e215d549e78ac956b21785c6a5d367de68bb8a9e1787c5805ff5b1e1a2ed2b09c4d7d17a0971c41a164ba2a3b937436d6d93c86bb1ecbc44870ce9f6e6db4a00787674851b743e9ba23ed2fc19b14d3ed937f0165d8c0190f615e9a8e4361cc5f6e14a2a04c97c115d859a8fd3374067a0411d67155085bfaeed3cc031726b30d2fe9d9ade154816104e00bfcbac78d3480642ee49834b6f735e0419d9d86ea38eafe502305a137488adadb125f2bd848e4d94d0deb3341804c48561b6011148167aacf31c72af49bf9bfdf88ef16631c33298c3c3fdea852477b502694a7d75588548759b9359a499901f4c8bbefb1e7d5f6d19c01bd9678c5f171401fba0886bb13860eabdd52fde6a86cc913c4bbee30b94116807a7f77cd4182befca2a6aa93f54ad2e277d8b1c2fb0900ba01bef79198df84bd038c9ece1c520250a332ea3d5d84096c0568c0bfda913b4034a56f9fe4a35087ec3766dac95e79436f129d6b82af7c2a8344998ea57c6bc40a89e0a500ec493ec05e19ddf5bd879d9f21d91eb201c17ed653fe080b42da9129bb6c332f6b6749eaabf3acf46cb4f1d773458196db01f8f70cfb4b13973176055d21991d4e74bb6980053a215ce77a90374a6bfcff1dd16b6fe2a042ed41b6f83c8522f259534d58a3e85415a0fbd3ef96fe08a1121a5e29e3d84f9be24c47126696d3a659f8a27053824ec73bfa9a08304c68ade557f9ca6e24e1cc010edbbcc456621d46d0def18f69c29494ed7256642e66d7ed37fc79034c84cb27ac087bdac738b9b617d73e5bb7d995e4fc84fed4844bd2d2468667cb9c9813e24abade1fc7355319fb1f0caaf32f45441b421892c6bcf4831bfd1d5758df3723bbbfb1459e56057417e8729933f4accfab4e74a6d75dbca183658071c2c3f831410bd4760b15957d209d431ec4bc9769a09f313132d38b7122bb2394cfd0ccc5f7c9c5b516c492fca3d201f67e49e591da933264bb464bcd9b1c8c7f586ee32e905b810a4b5c327e54163d665ec66c4604687a055c7efc903ab7dec9a8d860125bb3511417523795ba4f151119c891297fc3314b418533d96f99d9c8ee5d29d98b2672412525b5bbd09b3b5aaa7d47e7612ff03e2bf1315f1e0bd39d7919a22d7403e5629747f3042d0694cb5ac7d4f1cc43efd1631bb0137f5d7177e4c9ce6ea0ec36d6aa8b2d6ed3f41ce0918e1963f1f4b364cadacb61b5c8620a819b8c0e57effdf6c3800e1b03967c9524aa51e6105e666be98390e8569fc1245c3efdad89ad0d7c38703d415e96f21f3fef15fa91f44ebea35899aee925f603ceaf5dd2b9d534a0c12776dbf90ee28a7f893f460966dc632099640f273716ab7523c65155e52d1309bc3284fc6b6a964d5e1c7acc2f7d6a290d6df3fd2a6a2b6e5a0946d73e13e6488bda63ea2553c266ad3515043336a6a5ae2d499ea15c106c3d5fc29f851062e46ed3b884c919eef31fba11542b5dbcbd1214c38d3c0b2dfaed6a899e695c85511e5a849c76afbbf19eba9df1539ad37b486a0d6246ea7d1ae6aa2148eeba76a50975b8b5ffa103c6abf5c908a91c834f58608568ae6241d25d9f184fbeb909c6e8219c30b747cbcd26207980be442c6dab7d36078c99b919ffd20dfe8c293d949349b8bf84eb790df223ea32888191c80b5273c7c6528ea753c150b5700405e3f67284bdf5d0e92303f36914c2680b5dc5aa92d916664b69b6bceb05babc7ab9360d8bf7a9c05a9021e361afda8c0470c66db5fa8cdd3d6a458f6d769095887fbe8a8e8130393ed7f5c3a9d6186f56b9c3fd0d1f0dca139333633cdec9e84d6b38aad11ba097ca5a51cf3a65d1e9dba9202c6ec51148724dd63e4a7cd535a918ef9068e9baa259f467236ef2086eb8f45dbe954c7b30588451a106515277a225a2ee145c87680435ac0029e47a2a0c0be8d2e5428fb89f50f07580ef7afa31a8f5043110a3f90cbf2a34f0384fecd4faf8374fa80454b0d56f43a47d6610eb7450bf9a4c9c47f470fee1ae51ee5d8c4954b6b916310cc042cc60d4d6796f3c1ce57a3677e4b6e41cc0b7c35568d4dee0af58385d1ff05284bf125b5912c93b8b6bd0ae3945ab8af5cbaccd497c1695fe5a1e641bb8de2c899ddf7d1ebd56b484ae07cc5cfc9c0d1c70402151b55f38d1095d73b48733f7ee35d87d8f1ab9307e20aff61c019839acd2897c93bb2d18e6df47d208224c1cfe10a3251f92f4f387dbb528ca3fb785d05a410a69fa3f5ea676e38d8353d600b3fdbe0a9d15eea744deb198ba903da6f5c966a53988091d4042fc8cc5a897d431957eafaf04dd0e6adfa167ae6c6ebbaf0b01d9bc4d37a753bdc8917d2bc1f3ea19a3d35994c54df3458cd3b647c0464f9ffd350808399c33de6e11e1271962db2b103a8d0c650295cf0d6cb8b734c37c3895697de2fcae847d6ae2d4da269931bbd907820e629bb7124b98ff94ebbd78b5389309ad3f36d6f8a1d82ad30ec57ac7c99b5972a9bb394812ddf8f731dc2ebd8801f5904f1ecfd721df92af7b4360edd0f59165cb432f539e0b698560670bd1aeed4fe71616f628c3790c725cf1f059cd8f275025e64ef45b3f8bd87cec3ed18252ffaba765c9f591bfa5a76d11cb6fb7c79aff72bf1d310574cdcc92be0677a78412fc6ca87b31dbd0a674b3d0da6906457f21d57445fb24082d5d72f225f0dfe47198d0863e973e6678e6eebc91ed557eaee1e64096f426b25c1f75b65b1d88a5ebc85db99bb1dac94ee6a05497f0a65e877faa5f4f21f2baa9592b4f1edb5504a4a70860fb68a45ffc715695c3f1b974e47824a5a398be8b86dde6e5b376ac11476ee36d93fe51e39d4455c12cbc69a5f92a98a3878692ee7472c78fb46c662b89b70ef30feff1290f05c774a88f825e8b54dc5c043a0da9b45983980418b1365e6634abf2879beb2b69d7f5161e2cf7f009129172c6c70cbeb7fd42bd9d27070b4de624405d6866f859f5067a1e5e910056502c13d1c1eeac41b489821b81197cfa3853c86aa4b9fbf1c470f3def5269edc2cead91b37e7e23ebe50a363d59a009c3abc438dcd3c3a796a6112d915ff87668c6861e3b008a6207cbf16e2e7bf68ee409cc77a81aa06222029b4091815bbca7f92885d4a95697c8d961e0e95efe6809cfaa23baeb863312d5ce48d8b040981b573309cd052bc6b3cf5a0c5cb65b21c1f78537c2a3ba758c1d10f674a05b60cbcd6b320c2083b6d8aa55119f161be32b6dc81e5a884158de592aad496e337eec994b21d5cb9e043d943ad3df90031780350d96f2cd283dae2c543ed203334c101fbce3e108b80072750ba5eb126952f3ff99a24aef1dfbd8d780a87387089a4f91f6c532b616e2a3613c4021044315f751ff345a1649e279515676301127f483d67a766760e3f6c68c04292cc350da4e323039c94446a3f20aeaa70f30cea368289b0aecd5904b765a942953c159b2edc566e039365a01332381edeaa82beebad5dcdccff4f66a8e036a15b9d3b122872ead4643de10a1d5d680f14441501bbf4e2f5c633dc15d623535db471fc9cea07e40a7f034949ab17cee2f6447a57a86cb67c7a3e765b2d1f1cee880d25de03c648888dfa10fedbb22295f77878e16891f5fe74a041dd40dcf47dffe93b9a304fb50d566d492b36d99d3566b2dd78661db6f997faa3b06ac0a63bf00e67a2183ea5ea1021bddfd5c8441d13f4ba513dd2c7802d032374a73d41d470b2b2378898090f6d8c3a6735aedea35650aba90dab7959f0ef55be11cfa93e18a96f88b3f42fef4341a16817618eee7f8abc3e204665f9daa952fc6781ee4bc177fe4ad05ac2d71905b5a309bddfb791263c7bfb5ae0282ff23fa7649cc4439fe8277cf73f65c87276eb313b19e41596722c174f134c060c4c201fc86df0dbd4be44b14c784870c2f27e457047463c73a40963294279d7ca87a979b65a2ea1cab5bd68a8352430fe2434a88b56c32606adc8f04da65ea5d323538d8c71c0213bd75f098e6344219d3d03830aadb18208f3f2cd5fb38051dda929a4583c7a5300dc74f997ee712313c3a1fc723bc00d8605b4645efee1c6bc286d1b6a7b296e1e85b2ed080a54bd38a128a15a49e8166b63eaa0f12d4a165c276c7e30795c1c9c569213ac5e84e876d36330a0d703865e5bde309aafb26e0fdec1b88f781bddafa62feb7e19d08a98dc791079df9c757442019343ffc726027a73efd92d81e1d7e5578be10b4e25c98480674c79f43754b2676faa5ee6cc4e70a64799fb6c76e1cb8fd10a6216d8aa40b66f40671861ced1a88b33d628e74e1c0725ab1989db68994f283f7fa07d7b2027bcbbfe790d4c4d7499060602e1203d9aed98b1f82eb341bfe163387ab2d3c42d70daf470e47540e90afe61590a656942e9b66dfb7603f590dcd543bdff5526e2c4cc271f60977b241d665e5afb519a1ecf0b9f1a480abbd3b83aa7876fc0cd1738dd8d1120d687771b8f0df8d96d8a7e698e5ec7e80fa70e1af0b62aa083a542a347cdbeb2cf79def83153581cd31a83cdf147130384b5fdf66f3099d28fcdaea770d3853fd259f75dce45a9fd9dcc51205dbbb40d2836898a3b4cff24a23cd1a98eb7c0d832738e55375a654f152f429226e5a81cd0b44b2b53ca4e2a1defe8bda918e9dbf19e09a027605bf181fd4d1de13eb2e9e9cd2c78d606ad41ecf3bf00d38ad12b01a5053a731f97d06fbad79c59704218e563ca6bc87bce75680b7ec5f77cd79ea0ef58fef4af3e770f03e3e5dedbc05592ca02358336e22c0cd3bec330fc9a7f2a0d68ba2f4f2b88770e90a92efac8ea1654d3cc428a8f492f9632aa15deb510f5d3ac115e894d5a93245a93ba9dbe4d082580f57ec33f9616610d89074fd0c0ebf2745dde71180859bd59aaefb220bf9f347376d6b2866be0751705f9c1449909492a4cf5410745fafcd90922aa3193b585470f5812f2d2aeb67dbb6a35d22f6102d78ab785635b4c1ebb1222dac45d3ed4973ab3cc32ec22786fe3793a7c0678bef4d5db16384e08ef987825c4f68982218987c9f7faf4cdfb0db6ed7da4272bfb6060789d2cbfcc60e3982e656ca9005930e645c1456154e01214064db796db5cd364baaf381cf60e5318c163e3b96a20b053611b87e8b7b563245ce74d8f374b45360bbc1e203813f969eccac7f30869259839dfbc96a8aecb5c9797f815278aedd9d2557baf86ba73db5c1dfd6862a5c51f49d93c212eb09535882b82239df1308f66d7dd950f695ac3e702b5d4c67ccf49a18c706d2f4c7215c20f22c82ab351d9c531ade8060f44229514195f54dd0164e47cb0c8031235a69633cb082b3c90c60d50fc505d2d1ffc0a221dd1d67f2dd830d225f6f09eb1f2efd19d93d71ddcd89e0be91606b646513a8c3e00bc66b5540664e8c80ba787194bbaf4c8d3797f47cd73f588b11f2b5b72a17acc6db5759bbd77c1ceecae0a625fff3daf2c9ebe7830ab005a9097823909be6a985b1678273ef8d955fceebc0c31ab3fe55763d0e7c3bd0d09d5f4c344630fc1375c53c42b3cb90e0b23f714dcf4bde5d9a80d93a8b7d1b02c41804b14dcd9b0ed88e1f6a64590cad3bb05807b4833ac9e57bba4b9ce88404b2502a67401588114ed9036b3c648f3da78be2c8bb07171dfd22f36fe98cd04f77bcfe5a", 0x1000}, {&(0x7f0000000500)="9491d0e8fa464548add7e48a959f14a350f32f0ee5fee31c743fc6db5e0444480c32dbc221f893ce702c16aa6273beae2f9c44accfc4958ea8fa44a4991b510812cd84a84a38b2477c99b1dbc40228f253749e6b3aa950dbae3b4e4b0a9c38d5eba4e1a88d76ac056944f2eda859154c0ebdf45302d1120c31ddda7b02d4d244c7c83b3d97234738732d2f08afb6375b4e3474fec434d6746d2359556e1d12834b206e0fbaadfbeb1db04e3bbb0c", 0xae}, {&(0x7f0000000280)="d22bcc43cb86968ca6c079f43326166f622d8e3d96a0d33051c53a4416284608c3a5c56a1558dadb0e20e1e41df3bfd06cf181f05d5466108008837036b5ee7b86032d6427fd4793bfe7228195688747a3907b760de5563bda6372c7d4908a010d40ad851f9eff40187f2140567feb", 0x6f}, {&(0x7f0000000380)}, {&(0x7f00000005c0)="92a52e60481933e0bc6782ec46e3b98f756d1e66c2c2e8d29f1cfa97693947e88c9b619cc26601b90e7e8abe02a1459e5390c7dc8ef4051543bee7a144b4ba81745d5cdf5ea9b46ed8e8579e6eee086285720b3b15f2ad4a7af26975b0d1d710f4727c3bc9faaa00eeab8138a508c678e1d999de91951b587a1766149fc93e2a8262f5", 0x83}, {&(0x7f0000000680)}, {&(0x7f00000006c0)="5e1183b8628c91ed54772fa203f3e524cd394a2a84881a48a2855687679ef3270008394e15124847a57d3ac9e9cadffdd1ccb92a28395aa3ee3aa9f9e1a4ffd1f11447a9fffd2c2d250370cc3dc9a133c86341c245e12fb7def9d23135f1cd74c522c77dcb07f328e71a54de14bf956f9e63902cab12df2b4b3bf07087d6c39149d0a5359b1deb0796587f8ab05a4968ceb55befb21f1d1eb315aa498b7ef0e9bc191c8ad922d4b8db131e9b1d770a68a20f5aa7fce88ae60068ab66239319b993b117af2ab29d9ee99d22babc", 0xcd}, {&(0x7f0000001840)="e51b336190e69c30f59f21e678666cf9aa8fad227f966c9f9c6dc1df6315fb08017906e0f04178c05d734aba5597434bce8b0580d9738f06319d4473a66722feb803f22b45d8389757986a1c4b5d0831338a2e9e2d569b277a805fd18a3b7038eec94476e6385a80bbd3ac4379a0023a4b0640b7ee5c0fcf111294ff68feb7821d12825664adf9174bd652ac884ae914a29b8e0d061067c64384b94b256817e3e3285056ba62a7c75938e08e222be7db7761085596c0", 0xb6}], 0x8, &(0x7f0000001980)=[{0xd8, 0xff, 0x8, "2625f8725118166002fbe60f37e455b88953d91d64b172fccdca20e6773160aa9800e6072af4b6769062f1089569af50082d1c868a2619e7cda77a1305e20e0098b2ad4543cc49e63bee9d6b6038d161171a1f5b0a4f5c61e4ce4a0588f441f9e76a68220800393028e01d247993bf7ca7268e9508873a013ebf6bda01336fcfba3a5be8ed6210fcee2814400b565771e034a75eaba293ae5cca95d7fb9ba83aff753d4b0da4b549597c8a2a1cba266e4d3d5e1a34199964425ed21b19a160a60af6"}, {0xb0, 0x181, 0x80000000, "4d8f7a79559f6e6eb64eedc512962059094b990c20ea199018ec1d77656902a94d459302ca590228b9a8318c308ff16459f5b1533d765476bb98a85fc1235226975488e39ecc9c19d89a2517fd6a8291fb5e84a331be9794ac9af8dd75a0f40fee4548948b4ff761a6f8f9dbfb1b0c48d2c5178a6ea36a0b5cd687439bb69db5dc9b4cd3969637063a1694c11336383e0e1ffaa5ed62be34c1a2"}, {0xe8, 0x113, 0x6, "4d9feb85c689ee677990b174967133a125d2d9246eb24b1efa6dd8f9d18a84cbb89c22cb262689b802c7d1d8544ac47926c2368f828b49cbba95e2dce77b6595ad6f78922b96c0075e8fb51e77a76454bad9a21ee9a5a7e07f7e861f101009ad55c70c90841986cd0fbe1b8df2e5f996c4b2a79fa1417c8bf2693148d48aab6b965c5a527fe131935d9dc3836521f1d77b6b5b3d73c0e9e87a8d9ec0756b89b0bb3c2ed693ce1affc46e1d6a716ea7346be8b5b1bc7428321e0ed149d48017d0c89ad67b78d5ea4f98d748bc682725d7b7b737d3"}, {0x40, 0xff, 0x3, "22e9df136ded6d1198ae699428eecdf2fc4ecf7ca66fea8fce1d14ed549df0801cc7700d493665224ca9cc"}, {0x100, 0x118, 0x8000, "76d9f79495163b9bb0580148a0e5de077cb3e4d1a7b21cc61a70c0ba56078203f888a0d32122dc28b0aca84771c8be83c384303522b8eadd21ab8e76ca93f226eb12682eec25bea6b2a9a31325b4a3525875611bdb667481210cf7d6690717e7dc8b6702b71cc630859456605a8aa23b4a7b7c0130b43fec89d305e82187770ca5507ed0bcb7f89dff8533354e8675dfd366f4df946d1185af1ae99a4d084469349800e1ba096af9ece7fcd4d9576c00a9393bc93f68db946e8d38bae22aee67954c4fb89b819601fc29f031badff17b0a9432de6420e0bc017f5f6033892986167159d2bbbabf4356d69b1a6c957f"}, {0x1010, 0x3a, 0x1, "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"}, {0x90, 0x84, 0x3, "3aa425ec371e940f40eb8c3c73f275b5b69247ac483803cb2122f48a88f26d122864cf26c9bac0f76dc9d50595bfe0618269dd5c0283a343ed23a4524b2a36b30b0f64acce82d575c97f6f09ce8eda942c37a59db27cc22aa9bb5b82fd04f843d6ff70ba1d702e37627189180067b871751a79c4139874ff713845e97eb3a3"}, {0x78, 0x103, 0x4, "e374faa77e7e5e631bda294808af80394f99946d3c9cc6a5ee835e12fc17be4d7224b47fffbbd5ae548e72661798420f46c9ea00fd6b0772a5930b663835327132d51f192a2ae9fc1175c1615abdf8d57123f4eef6c5439f7d847f3b4fed18a07c1d89de54f276"}, {0x48, 0x110, 0x3, "8ec73fed53ec5e5676ab2873b7545e8be7bdf8041bcb76542de5e0c26f1455c1d4be7aa76ce73bed8a1395ff963ffae8f173f92ab2"}, {0x1010, 0x108, 0x442, "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"}], 0x2520}}, {{&(0x7f0000003f40)=@rc={0x1f, @fixed={[], 0x12}, 0x1}, 0x80, &(0x7f0000000680)=[{&(0x7f0000003fc0)="e0dcf3a627a7cf37ea38fb97647ab0836ffdf0cfd6c75565906e6ee2292b90fdd6a0f81bbdfded0d63ff2c1495dfe21a2676c56d75dcadebdbdd025a8d0e6b0e99a91e05b153ca264775a6da457be4fd2c9d9011ddf895ea2f28664f9b39785628c7ee70ada286f76ca396bd5f323b0b93d7236d20c61ddff1fbff293764ef52", 0x80}, {&(0x7f0000000380)="3bce5ceb134dc43d20c878e2f3091fec5d9ede5c1c4fbce767b92465d69573897d2ab4bc90a714b0d3cfb237560a1c75", 0x30}], 0x2}}, {{&(0x7f0000004040)=@generic={0x11, "521ccd1f93e8e55d67a0ccaae0a26b44fd1b0c9aaee5fac9554e6ce9a9d75c9dd036cfe3080646b9503c585298758966967b5eedbfefc5f4f604c6cd4aa9a90f5ab96b76572b4f3d0bca14e59ede887cfea2f1e59c14f7a3936abad98f059c061613a78ecd18371c757ed993a17239ef99fd43e8e4a21b37a07086a51dd7"}, 0x80, &(0x7f0000004400)=[{&(0x7f00000040c0)="300ab4fd5a55ca7245b1d00abdc01db28dc244d904e42a7feaf9c8922a1ec2c29681fadfa7e3e3fb839f3ca4131d8cf6cb453686e76a6ba5522c0384ebf2a4bb081ed42dba1e05bbc722c67d9a72", 0x4e}, {&(0x7f0000004140)="9fcbe03b3f550a8cca6138218f05868b02a9ab7b63a583bef6f841d48061932a106879673405140b3fc6d6082919669fe460dc0ea360ba404208aecef15cac519e36df76cbb4bc0957c5b3d7af0bf71a695a0e0a302b7f2115e0a764e8e0084f337a5a24f65eab834ad6a85490c881a03554", 0x72}, {&(0x7f00000041c0)="c4c0af0ccf281c9124cbd58ac1bccd656ecc82b1d312dbdc60b410e60087ef5ff543a868d22eb260e6acba1c5118f2382550d9decc36d4122b07cf4fbbe63a9b8402f7f8c5143dc5970b0e0c665e2b9cd641abc113f7cb3ea1f9a634e9eca93ccf627a815d4243ad8ebfb36558c1350d73516a66c9673410f42cefe7023373f5ce6ad166c1e26706181a807693b0", 0x8e}, {&(0x7f0000004280)="e2bd22afd5e9a90ca47477501faa6286cab06710dc1d1ebca2179ce0a1416592cee90d9131b92ba928819abe0a005fa0a8aac89ff81114bcf18a0d0426f9ed945bb969796c9e21202cdd8d6c92cb8a1879fa2a1f3d95cbb92ae47707386b2780e76789cf050d3a7e5491cd5d2e17b59e735b571a88dfab9be5f7b475ce4bec12fbecf631d07a385e435ebd6f1f246e3118ad251d1710f7e9fa63f5e1c9dd3eccdfec80c46ffee92fc9b4c0620a682f9078e84e6732cd4f7119c7bf14afdd3e62524ca0a1d46ef7300d623a5ba469f6b0bce089498ff66e308695ba2c8c7f14f6a9f17f1e645856551d8dcb9d7536b4e606f2dc9fb9013254dc10", 0xfa}, {&(0x7f00000007c0)="d4e47b7387a96009fde35549253574ee06a5183f948e2c6d96065b9a66b8515504d5e170c379f93afbdfe15224117c87842460166e26b1a44e45", 0x3a}, {&(0x7f0000004380)="b721a5756b04f2d4ad4d8bebb6cfc50f5f3bbf44ffa95c7e80e714df987792cba86da8d22095a5445b6241cc9a52442d8d23829c11aa3fdd5fcba3856ecda864fa46c5631cc9a9b3222e22b1f8123ac957918372aca6523ef5a5ffc1d7e5afe2959de6ead92a3b7072d8f5c61bee", 0x6e}], 0x6, &(0x7f0000004480)=ANY=[@ANYBLOB="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"], 0x318}}, {{&(0x7f00000047c0)=@llc={0x1a, 0x1, 0x1f, 0x1, 0x0, 0x81, @remote}, 0x80, &(0x7f0000004900)=[{&(0x7f0000004840)="3674892c1a857fea33c30253734db6eab7473106457ca5828f01d5c06051073b14c735873b80c1ba83da44c41479bc4074da3666b918e1139ee2b863b45b5f9342f2b1901d9eb008dfca5f3147e6dcf1939e41100eded21e38aa4dd5173c200de47c6361be2fbf5f441e5f8a4ed1c074f2dc7111f25d15590795fe0a9465539a3c1fc04a9778cb42b9b27175c6cbc79345978cf7220f537a8a207084efaa476421359b3e5c4e1d7df491a5de3a564b30199b53f901", 0xb5}], 0x1}}], 0x5, 0x0) recvmmsg(r3, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffa2}}], 0x400000000000953, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000300)='net/tcp\x00') r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x4c, r5, 0x4, 0x70bd26, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PORT={0x6, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x1}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x2d}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40000d1) sendmsg$IPVS_CMD_SET_CONFIG(r4, &(0x7f0000003ec0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000440)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x48040) sendmsg$IPVS_CMD_ZERO(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="02002dbd7000fedbdf2510000000080006006dbb000048000280080004000100000014000100fe8000000000000000000000000000bb14000100ac1414bb0000000000000000000000001400010000000000000000000000000000000001"], 0x64}}, 0xeda1d981ae04e3e1) r6 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r6, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10}, 0x24) sendmmsg(r6, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)=ANY=[], 0x18}}], 0x1, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1488.221902][T23716] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:22 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000040)="d9e23e323fbd562421069281c4bb62a0fae9302c2e635fd197d5190de98d37d4efd5ed55f9a01c7c477072c6d103384c6a1f571f01afad4c96a13ea87f22e17d38f099bd432fc6d951063dc955238e8a1427212efa9c267a27156da07c5a6ce10b", 0x61}, {&(0x7f0000000500)="baa2ee84281d0aa0e93199a6313d19baca42d8b1aef868b99aa84c75d5085fefc4e3abf5ba9361c6841443a48d8b7c3ef8165e28646e593d542c0211942f5adca7336b2be0f19c54c76bab9deca836e06eb3079f3974b80ed77f4cdb556c28a7e2fdce21b6c5d86f78e61a8317ac46bff236ae0f6f5c4aee4f298fdfba186bf5b3bf825f7770f55a783ecfea9ce13355be667b38d3edfd4a6e846f03a79aad72f38f5c33697b30d660196e20cf043dfa6fd9d2e495b2b4484cf9ee9506e5cbfa206aa8b2754c8847da790480a1bdd0c5b0bba40b3cb44e68eba08471350f24e2278d1db6545454a13fdf4adb9157e422536cea4a3644c7b454ee94ab4ed3f3e0af396e7035004acd77b23bd0436a75cf6416813cfa248f543c169af0d7b031585855c574d580a8af80aa01ec785bab301a52560119fc8bc042fa8f31ad332dfb6dba04eddac791caa871a42b5cfde0bee92aa29f06e519071e639690b96714f488243c8878f50bcdc86b8f852b0686ad124be673da71cc9fa197fca53fe78001fdd9e403e9998a961b4940328b735078dad17be0cd0a777025dacf454cad8acfa7a832301f868f4d839983c836cd343f247a3d5a23db2152d44f2e8ff7faaeb18d81832b746262a823a92fc7f3b3e80240d5b70924e6dcd6a25cc166a65b9f0ff7ef79fa305dbbe0e9b05be6112ff9540e56f07d88ec2a6daf295181af812cd2774d0c06c77db5398425f1cc03b9f24a00b0e9207af4211571aba7effb5746fab0711575e11514503fedc3e78678efd9d77a3642acc51a65f2b070da3d7e9974863ee0e016401dbabbde210a58c2a1ce78c727e6f8d001a57529bb140f6a8b9a60d7afcbbd11850339b709c8cdd321de3761d5ea81e0aea67515e1658d8af64a90be40a0063b3851b4e43c8a30bc2678175c01487143d6dec21d5ad562e64ff7ab45fd5bd1695f3edcd077bbee838ef882af486ca5d89567cccf74d8355e75173cf29bf41ffc4a9a38efd2463c3eb9a1e83b91f387be50b1d1b389eae05fa99bc1c2352f791941551472465d47dab15e7672274ce82da8296559b30381bfa2ece46a8a59f8b9c38a871e492186ec7c9cac4a32a1b87bc5013373bbf8b2ceb313b5a9635f6d033bfb8e762b49accb1cf6b6557d522a2f7d00f0c45ff9f7aa5a1666f5318b97016759453d8b023221a1ece070881625ddf471a9508a70dd4ba35007e6385ce6439e7957b1fafe7e853aefb1e114a9ef4d65c219d3a8e179ff2b7934fcd5aa6b298f2f5176015ac038ba109de6c0599c92fc7a4c4415e9bd5eb793331b49dc0f030e7f4f6749b7d243a438224de40441eb717da2736131220277161dbf37c061b1a55ed25b559fdfbb0b876222657666ec9beb313595122ebc3fb77acc3e7a8c11546bfb12e6145e30d7836d3da2023af0896730e3b7930bd2a95806a8a346d3787b2cc3e821e9d1b6fec66622c5ad34190c98d9b6ad411b349e091e2f75a6041b24e9aa633aafab9ad1f3e96db287464ad9de5750ddd2a54bdb13e52f50adb0e51067b14bab7129f0ff686c5673ba77c16f178296bf3b845ef31839ed775094da1779979a1d8d29d096a301f107b35008590f24ffa0f556c480ea60c757f6be049da5b0ddbb2f5968d903f46a3e8270858f82dfc1513fd859ad414f7dc7d699b94db8586d4f6eac5e2d2f5b5b0242ac11a884a90b7b59215dde0410d118a115c7eeab35ab3b2f0544e0ae77f3a9b8a00f581a73b3c0e32ad5069c46a2c26bb29e3e50d06dc0c6ce543556137c14b0be63f0178955e749fbad2783c86b99736c992f6638a89fa61699cb2b074f14491e68df47fb37c1574846cd3ab90217e4a97fb34587acfdea7fd5d58645af22fd6455ccf59c344e1a0e543693b61e9d2ca087a0ee509ead25ac56a951860c7c38db580f75c0644f2c30ccdce4d3f6b06b733a4bf635ccb7452800fb9f626c8f30cc59dc4bed5293cf5cdde34b4c645075b68c03e88650494dc172bb3640dd1981263c058d690fd6b2dab47f3ff925f6d683d8ded4c06bc483607a468eb1d894ecb48e2bf608e3dd2cb94faf341693b7e8864a8a0035a30afade5b4c8fe6257a08ee7b8a087edd8db52e31be15aa4d9e14e2303fa991750d811be5e6a38206fb5efeae188a95e6567d2585e869725d5824b3cce33f7fd30cb98c9fe649d0ac6fda5ede17d1d999dac2a88eafe8ea3f0f76fac3c6b2a351d7a01354ce2f5d1f787dd1456be47b1cbe2ba7bf8c5052832aaf0eb9c1c7088349ac4ae6d8a3d05820d71c2aefd0d20831b8f755afb0fa2a534fb05685d25ee24e20e22e93420698a3e58580d225ade30dd37ac60919cfd812934bf04287ae27013f6a2dd1ccb8ffeb96c08f6a5b386322ee989c86a066908bca6637a4b6d9148000a2d91cec966cdf6e97f2f0616b7fa748e25492807b282828c6cc08c291257007fc50f3b0261e4607f0df5aaf00d69860bf5e46ad573d1b390d8b203ae53a0ce61e0735b280e9cf0e9a72b31f6be2b4e6dbc926352149dd95184b6671f7e45402dc52b543c474a005355c518c4bfa2c2e176aa4f71ae94e84a24d894d7d15c9e006893c27dc94f8af8652de3a66643401751af015d11f8b2a1b0f953b523be28d80dc15a0cd6733e812fed04a1defcc445a7269a00e69cc8d714c90277971ae4851c281b7ff0f7371b8909e81091f399767af694c451d7d4d6538c55ad2aace8da8504c4ec9f1d576e918e6dfbbfd421094a0c087ea562b8c1e607dbafae588ce4541ed0dade2c9662375ac641a2841b0cc7ebef0e347d753a9e3e9252d23c5cf49def4f5ec0b58f481a317f51524f5cce5e09b40147694fd93f4c7e10049235ad37a95868b71be427512198a49bcece79a9d472ed776bf53e77947738a2f6615602157d70db535922343416f54d5100e528c86ccd77b5d2650c05c862f55f50b8a63fa8b1c95f23c002c55072a0acaf711c59ee7757aa9dbe0c5fc6fb073e650e65bbe731bcd7e89d934992a22a8b90813684688fe268be7b5f63e501e2aa958e340bc3a4d7e432b6b891d6ac1533456d701ab6cf60e856e357f4242d2e1c04ceb36dec76bbd9a4e92d01d407691d5754c35a09fd2f4a1e42faae0ee6204aa8df66c4491e00b2d48b60d3150c32c9e8023f4f2e737003279bca8470b47694923df5fc1c489872c5dd37b0996093bf73f9553f8c4cefe9fa3e4c42ac61d17635ffab7ac543f000d548cfe50ff452237bcf65a1bfb17163b257919c8f39ecabc8ec0b78ade9ab7e45646d7dab2f33278486af3a1d3ff35defc5e2c06d294c5dc0d5e453cadea1d834e05ab705c5dc8b5b469d01051c838ceffc820663a4137f1e8ff46771ed04589434d94e46752645ac1190c91dfbcf86296d440a6910f76ab955ac8ac0afc9e2bc1430682894b4b59c0c38837d7249b03e678f4d69b7f8a343ae013298700eebe0bc114b9a8a707e33667dc4bb0e6f6e7b65e270c707c591e555261d56e0606ddb4e200f4fddd2f480400600c53faac989f944735abc17175f042a5abf1f6aa72ea0a5b29512a8000b0d349ab06e206d4919599d6db40d8c89f8fe2a2c1b5a37588bccaa4e5c45f28f7ffbb3f97aa6a8d2bb40ab94be5cdf17cfee467c8dee07c5e9a267ee31cdf7b880d7ea86d25720a8e3a2ffd08d6b802c1275ee98dde582a5f9f76211cf78992c2eefa8551237e1b1742cd8c70a58122882efe579bc3877a4311e2abb0f72e1e8b8646754f958f9870bc94076f97b87abbe271e49e95f28a86da15affa662085fd22e19583865ac57c82a08db2de4056e323be13546d16d80312cdfc01a6498245007efb9f01aaca9fd0bd836a1c8d57c992254f667d657fc1eaf7522e19356131be98e9d39492ee92aa2150132887872c45bd9a59d13ed80428b2b1f7fff6c84cf2ee11a1007c19a7694c9dfc33ebcdece6b11017c37d556662b3da4d6c164d14d4308174b55788a5329cb907e96eed1f63434c1fa2d8b34439e65a7c77834e1471f0cc9ec8105a3907e231c54c65035be8ce4331f452cfde0a43c50744cdf797141f23b78c7efc0e24ca3d3e345ae98c799a4fc45230d3a71593ccd193dd3d19e24afa6eb1feacf35dd9d54a7bb3bcdf4310240f067ae6de479746faa10f01e4af8444e4d473efe9b2e0e844c0432ee4425e8e7fa109a8ca27f3fceb7a94f4c0b43410db8c3b15a02478083e389731818c779dcbe48aed1733b524d5ce774e71d623040c5fdffc5401908861a5c4cbbcfa6aa3e671c05431992caa9b5e81474bb47c95bef4d42450f8ff4d31823330a8601c751190be88dabb23f44403162135c93162f70eab34b38e6f2356a68a6b9f76aa9e887b920b6ba6279997363272ed7f709646cc3b78478b6f911cedec7490ba1ce2c3493bfb649430335c464d16d6a594d52637c9e36577e01e06df0c6c877ab7e0d95b0106b8d9c8af019e5c52e847b832fa2fdf5c87b2cedeb19f845a3cfe4a12d84f2e5d4719dbbcf12af63cc95eeb7d4a821108200e44a01db3a3d128439811233cfed38f60d3fddfce52051cdec8b0b1febc20ea98b364a26c9d1d23be0bd0d363067f2782cf29ff6c5723b7c801c7335b7dfbaaab3a24bb8d493331e2bac29afeea65d66ab08bef822ac2ed9d90ed2940373cd7d227df89dcb5646b09c8d102d4ccd8361ef500f47b047831275bbb77bc5b5d58973f8d11d15adfb35a1898df5d8e6d1faae19e3d8b08bc2a38607d331b6925b58cf63bc21ebd5eb7aa19c96884a440a1fa3d679012b639667fcbbee24062e265b0312c6647143afd88b5ac99a48c2f4619522d8b1c2c2141b7fb2b9630e3a6395493d099708b7bb62c93d8d5d3e223956e0c4b5535ed99cb2ccbe9dbe9a96764294ba109572d522598a21d729c52ef1264d44ce4eaaa3be64766509ea1390df7599d12313ab7de7eb72e8d02e2d163367e6485f780aab7006db97a82d10ffadc005819a4b3293666c8ec11cdad425b4242f235c5cb8f2ee2b5279e960deed317b752f54b32b00e044c2b108e33e80164cacf12591ed175189f19a45d3dea6dfcaf2633388bac8604a8c5279f02aa72910dbc155c8820ccb6d65e25f7bf59e26eb03343430157c4b794dc46eff46f9bbfe237929a43650913343fd7be3da9f539a0486ee9c4435e9982f4dd4fa1c83d9e88a5752f7c6849032feaadba45d840beb53da8d41588cc97eb5684a6293b4e4c60ee2a06cbe278fa26c3daa4114b2aaf0500293842a97e53e70f8e3316e40dfb955da7e7566d03f7b96dc8543c80b767f282da2bf05731b59d283fab9fa8f1e7c0089fb08d8ca02636e929bce23e5916045c16247bdae6b54a8091c9b02f5713b8bd49439bf0f29552463794dfb5636a87e20fe9699db7727bc74adb95e07d33ebb432c39d37ccedcdfcdd0e4b54d39a182e727ef73bf4342470ec0764bc11f0ccd8269f90ae644e066ff8831cfd541ecb3277a3a5bb51ae7098f823e2242f4c1f3b23c56ec34462478206872631466de6c1c16f4fa8d012db0541ac8a15df132ea03ce9ee3c7486f53d6c99aaff20d4de15b6478a5c1ca31cc7c90a48b2f7eb9f537a34dcd2b205f7698a9f104ff0da439bb148c42a9a2314ef2c5f4951ed24ec6c913bef7c0ffd1ea6f2ce96f94abe2dc2c4eefb906a8bac65066de16cc6d1b91f0df6571198e9b1c9bf6f8e46e1467a91a20f3c0942cdba0ebefc9f05d4c8224fb24b1114a51380335b7b721893805e59c6a071ed158b376fb9d3e6cfc8c73ed3c6f993a583ffd8cb65eb", 0x1000}, {&(0x7f0000000200)="d6d1fee56c7a7cb6831c5affbfe0af8b51fe9d25f229ae3b62ed9ff2be175e981248e67ddac8c6152d3b173da5c57840971001f84332d49e07d50f2f0612b53ce69f148755757dc8918d5711396f2895113cf81bdf40c5c1702b7f637f97f8128f3a61d9c79675411d4b1cdd6e431c902e90f3723f675712f30241bf88632b20a71fe3977b8ca18a47e13e597e0eab0ed212d635f4aecd3ecf63ecad69083e8a8d6c5b55557e4d1592f1fbf59496d398d263a3f2415745949a765a1f4b45212a7c0e62f4237e24a98440356fe8abdc934235a4976df2b404", 0xd8}], 0x3) 06:28:22 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000140)='cgroup.type\x00', 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) accept4$x25(r6, &(0x7f00000000c0), &(0x7f0000000100)=0x12, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) write$input_event(r1, &(0x7f0000000080)={{}, 0x11, 0xfff7, 0x8}, 0x18) exit_group(0x0) r7 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r10 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r8, r9, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10}, 0x0) io_uring_enter(r7, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:22 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffffffef, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1488.310285][T23732] bond0: (slave bridge267): Enslaving as an active interface with an up link [ 1488.384318][T23716] bond0: (slave bridge267): Releasing backup interface 06:28:22 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_uring_register$IORING_REGISTER_BUFFERS(r5, 0x0, &(0x7f00000003c0)=[{&(0x7f00000000c0)=""/54, 0x36}, {&(0x7f00000001c0)=""/209, 0xd1}, {&(0x7f0000000100)=""/50, 0x32}, {&(0x7f0000000300)=""/157, 0x9d}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) setsockopt$RXRPC_SECURITY_KEY(r2, 0x110, 0x1, &(0x7f0000000040)='-/}$%(/!$%\x00', 0xb) r7 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x92ba, 0x4, 0xfffffffe, 0x1f5}, &(0x7f0000ee6000/0x4000)=nil, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000000180), &(0x7f0000000000)) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32], 0x4}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(0xffffffffffffffff, 0x80045530, &(0x7f0000001500)=""/144) io_uring_enter(r7, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:22 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet(0x2, 0x2, 0x7fffffff) ioctl$sock_inet_tcp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r4, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r3], 0x4}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$vim2m_VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000040)={0x3f, 0x3, 0x4, 0x0, 0x21d, {0x77359400}, {0x5, 0x0, 0x4, 0x0, 0x0, 0x40, "38981b62"}, 0x8, 0x2, @offset=0x7f, 0x101}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:22 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0xfffffffd, 0x0, 0x0, 0x20000000, 0x2, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0x5}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:23 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000500)=ANY=[@ANYRESOCT=r2, @ANYRES16=r6, @ANYBLOB="566cd7e77b222e855784487d0b1848cf91c7e33675f8773ab822a9e4fd9ff9406c46ac6cf528adf33cf9dc4a89a0ba5bb1227ecdb03dccea0e5e6b155f79b4d2b030b5ef0caf29673fae5923744a737834dc14af71104fb7793f614feeb2a854b194ce265e4532532b4019fa9e8346d08e8d6140b547f0df2ed0efd28e5f107dba47d4902f636636a2bc86ae2ba31f27e01ed3ffb875a89c", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$BATADV_CMD_GET_VLAN(r4, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x44, 0x0, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x7fff}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0xa747}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xe}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x4001) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='cgroup.events\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r8, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r9, @ANYBLOB="000227bd7000fcdbdf9592251000"], 0x14}, 0x1, 0x0, 0x0, 0x4015}, 0x6008021) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000640)=ANY=[@ANYBLOB="0000000012705291b3f6867335c88ee804d0cdf69298a93838d4fc3f2e71d32ac7a94de5676f5b1fc2fc3b625c2f4a6b02c71b60938e112389f957c02d4102a77b8a793bf8fdc53ff2e67128870e323cf72d99310f4c8db21043a05018d372342c0b8a0654c0ae704dda785885649dba1917496893fd", @ANYRES16=r10, @ANYBLOB="ff837f764dc0cb4d2edab9c07b6aabffafe1eadc45f0f2820a34a91cd9d0896c762285838448f9f909029e46a053982e28fa1506d33858c10c0c9b58269ad38aba7c308e62035650bec82056883ea083fa8d0e7d61012873f10cc68a276774589b04abfcae0fb37707470ddfb7e9c04f87ae5ba721f193ef85ae0bee9d91a4017fda727efde35dc3117912eff22976f96a27d5a4307f85f86927f64ea99bbf49f1d307b30a972ecbb7e81bde701eb0d9879b98", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x25, &(0x7f0000000080)=0x5800, 0x4) [ 1488.719997][T23732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1488.775686][T23732] bond0: (slave bridge267): Enslaving as an active interface with an up link [ 1488.815130][T23732] bond0: (slave bridge267): Releasing backup interface 06:28:23 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xe00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xfffffff0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:23 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) setsockopt$PNPIPE_INITSTATE(r1, 0x113, 0x4, &(0x7f0000000080)=0x1, 0x4) r2 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r2, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:23 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x200, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000000c0)) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r1, 0xc0105303, &(0x7f0000000180)={0x6, 0x3}) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000000)={r5, 0x4, 0x30}, &(0x7f0000000040)=0xc) openat$smackfs_relabel_self(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/relabel-self\x00', 0x2, 0x0) 06:28:23 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r1], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) r3 = syz_io_uring_setup(0x6ad0, &(0x7f0000000480)={0x0, 0x0, 0x4, 0x0, 0x266, 0x0, r0}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000eea000/0x1000)=nil, &(0x7f0000000140)=0x0, &(0x7f0000000040)=0x0) r6 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r6, 0x0, 0x484, &(0x7f00000000c0)=""/61, &(0x7f0000000100)=0x3d) r7 = syz_open_dev$vcsu(&(0x7f0000000080)='/dev/vcsu#\x00', 0x3, 0x230840) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r7, 0x54a3) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$NBD_SET_FLAGS(r7, 0xab0a, 0x3) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r3, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1489.239217][T23791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:23 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xfffffffd, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1489.326854][T23798] bond0: (slave bridge268): Enslaving as an active interface with an up link [ 1489.354433][T23791] bond0: (slave bridge268): Releasing backup interface 06:28:23 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x5b48, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x2d9}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$RAW_CHAR_CTRL_SETBIND(r5, 0xac00, &(0x7f00000001c0)={0x0, 0x7, 0x0}) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) r8 = semget$private(0x0, 0x1, 0x0) semtimedop(r8, &(0x7f00000000c0)=[{0x2, 0x9, 0x1800}, {0x1, 0x8001, 0x1000}], 0x2, &(0x7f0000000100)={0x77359400}) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, &(0x7f0000000080)) r9 = socket$inet_udplite(0x2, 0x2, 0x88) r10 = dup(r9) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x8912, 0x400200) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r10, 0x8982, &(0x7f0000000140)) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:23 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) write$P9_RLOPEN(r1, &(0x7f0000000000)={0x18, 0xd, 0x2, {{0x8, 0x4, 0x6}, 0xffffff8f}}, 0x18) [ 1489.731048][T23834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xfffffffe, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:24 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) r3 = getpid() getpgid(r3) syz_open_procfs(r3, &(0x7f0000000080)='net/vlan/vlan0\x00') io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1489.785849][T23798] bond0: (slave bridge268): Enslaving as an active interface with an up link [ 1489.833034][T23834] bond0: (slave bridge268): Releasing backup interface 06:28:24 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = socket(0x11, 0x800000003, 0x0) bind(r7, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r7, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9, 0x1, 'cake\x00'}, {0x164, 0x2, [@TCA_CAKE_BASE_RATE64={0xc}, @TCA_CAKE_DIFFSERV_MODE={0x8}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r6, 0x89f7, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'sit0\x00', r8, 0x29, 0xa4, 0xd3, 0x3f, 0x8, @mcast1, @local, 0x10, 0x1, 0x1f}}) sendmsg$xdp(r4, &(0x7f0000000740)={&(0x7f0000000140)={0x2c, 0xd, r10, 0x1d}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000001c0)="cba635227fb314b7ec52dafb9c5b3174b2917997e599eba3a19f2e5f18b57d3038971d025fef9203ba3e1b5efef5c47070076920e2f4d5d8e4056badacd1dff30e718bea24f3f6aba91236d1f6591c540a15d8f596d4d0665591c2e462898ee42a2cedae783e783b58558152693ac875ca94eea2524dde0c55d228e571", 0x7d}, {&(0x7f0000000240)="d70e9a45228d915a6d057b65d6f70ebe67d343d5167a98e834bdf96e9e52afb686eaf8000912d13dfc83a9d020b162f34e069cafa2fded0bd7ee2456d0439b81d53168ecea4286834ed9c88c4c73f39dcf90574b4a32a17ef0a757b8e2c1a549e4dfc7b17710e065405bd206e6acfa173113b5f8cca1ad763eab97e0f3f310e91071b741282057403c303cdc246c806815960c6455360bf9d40e", 0x9a}, {&(0x7f0000000300)="54ca6268a4c5327b8e51418a81b50b97d9ea8c4fa377c1088075827083c0142cc6bc45d038cbc97bf9cf84a8fd05dbb37e47fce61836d7937bcf00abe181ed580a2e98c0f6dc96b62bf7ce133e3aa243ff7faf55a6027213488b", 0x5a}, {&(0x7f0000000380)="1b955843af24a3a36d018399b842f6969d693381e94c5484a58fbdad0338f42234bc04a69d85df69dfb2f596192064859f99f48f283260e7cfb531041e040cb7791027173d2f2d95a92729710da6cf838e5a859ac35ad597f1f9e1049d2678b1e9ce9341c9d12f912475205c511fcb3fb7649e5f7a0bf494ff3703ad8e190bb0ca345f1f49534d5c69483eb9c6b36d96a86405468a3407b1336f5caa5d529ee438fa0c5411e4c4bae6558ee834b4d723aab4066b7eb08d8a4486cba8047bfd7d3957b5574c487559fde60bc49adb5d815816c6579ccd", 0xd6}, {&(0x7f0000000500)="1dde8dd9ca126a6845d02cfb13a21c3bb68ba833bb5285dd1d488a7ee02a398dc130a2cf996d429e5358c030b84772a96261a64c4651de35198a1db3202c0dc350f659729c4762444a3a1374f7bee06fca82b358ad4a2af32a1620fba79bb75f7686c5fc6fb1266a01228273535e4d9648f3a940765a8e0ae34bf08d07c31b37fb75087d6378f768ff41b4349a6970dd1487735f0a2cf317bfc5a20030a473663aefb84486ddc5ad55b64d", 0xab}, {&(0x7f00000005c0)="ed94084ad4eb8a9db481eae5c112975aea0c0c452bc59ea192ed79a7a1c76065709d1db1e22dac2b6771856dfff2e1741b0630883067255c2edb8d76acb56290553bbc97ac0e44d7cf832004af6e7e5b2b51ca88b83ad987f4614c09d640ac3e419dd33e36ce15fb4e468cb2519511a9af8090ed97a107c92e0e377213ede684ef6c094f81e35a1b224e352c434d805bbe33b1e2d728bdc911f361e046628458f7d73f4ac5de1a994c3ef7c882105b10f5b7034552b4038fcc184c3444b9bc9d774d16a27e9410aeecc9ad01a232c8f961bfa9907fbd034d75246227fa1431ab311dbb952d4a74f916619c812b01881e0fff9ac18b", 0xf5}], 0x6}, 0x20040000) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:24 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[@ANYRES16=r0, @ANYRESOCT, @ANYRESOCT=r5, @ANYRESHEX=r1, @ANYRESOCT=r7, @ANYRESHEX=r1, @ANYRES32], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) getsockopt$bt_BT_SNDMTU(r0, 0x112, 0xc, &(0x7f0000000000)=0x6, &(0x7f0000000040)=0x2) r9 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) writev(r9, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1490.074821][ T26] audit: type=1804 audit(1597472904.435:4522): pid=23860 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2817/cgroup.controllers" dev="sda1" ino=15857 res=1 errno=0 [ 1490.183914][ T26] audit: type=1804 audit(1597472904.445:4523): pid=23860 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2817/cgroup.controllers" dev="sda1" ino=15857 res=1 errno=0 [ 1490.221946][T23857] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 06:28:24 executing program 5: openat$smackfs_logging(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/smackfs/logging\x00', 0x2, 0x0) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$BLKPBSZGET(r4, 0x127b, &(0x7f00000000c0)) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000080)={0x1, 0x11000}) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:24 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0xf00, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0xffffffff, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:24 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) ioctl$TIOCEXCL(r0, 0x540c) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1490.311436][ T26] audit: type=1804 audit(1597472904.445:4524): pid=23860 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir248577166/syzkaller.xxGDat/2817/cgroup.controllers" dev="sda1" ino=15857 res=1 errno=0 [ 1490.379524][T23879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:24 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) syz_mount_image$ceph(&(0x7f0000000080)='ceph\x00', &(0x7f00000000c0)='./file0\x00', 0x3, 0x2, &(0x7f0000000140)=[{&(0x7f0000000100)="9b7e27f8648c521b3ae591f46f97ad2dbd374e82f12589a0eca7b7d34c3caa73cbaaa2deaa51d29e28", 0x29, 0x80}, {&(0x7f00000001c0)="08a7771d91a4e63c75655ade05897e935e01ac2ebf7488e23d2cf1502137c30054d374e125ac09707a53d137abdfe69a82df53a49aeeb6e173bc7e0333aaa4905fbb3f97ff34027c9752752064e0f0929a2e1f030c8d66b4f7a2ecb414fd7e3c5439d6f1", 0x64, 0x54}], 0x840000, &(0x7f0000000240)='(&\x06#*&\xe2!\x00') r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) [ 1490.451979][T23888] bond0: (slave bridge269): Enslaving as an active interface with an up link 06:28:24 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@mcast2, 0x6, 0x0, 0x1, 0x9, 0xffff, 0xaa8d}, &(0x7f0000000040)=0x20) 06:28:24 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000000140)=r5, 0x4) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000080)={r5, 0x40}, &(0x7f00000000c0)=0x8) r6 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:24 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x0}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1490.511489][T23879] bond0: (slave bridge269): Releasing backup interface 06:28:25 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = openat$vcsu(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsu\x00', 0x44a000, 0x0) writev(r1, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:25 executing program 1: syz_io_uring_setup(0x7c69, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r1, r0, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r2 = syz_io_uring_complete(r1) ioctl$vim2m_VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000100)={0x7, 0x2, 0x4, 0x40, 0xfffffffc, {0x77359400}, {0x2, 0xc, 0x20, 0x6, 0x1, 0x40, "1f6e34d8"}, 0x3, 0x3, @userptr=0x3, 0x5fc, 0x0, r2}) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x20, 0x1, 0xd9, 0x0, r4}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x0) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r6, r7, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r5, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0xfffffffd}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000080)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x3, 0x0, @fd_index=0x9, 0x0, 0x0, 0x0, {0xa152}, 0x1}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet6_udp_int(r3, 0x11, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x4) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r4, 0x84, 0x78, &(0x7f0000000140)=r6, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f00000000c0)={r6, @in6={{0xa, 0x4e20, 0xa3, @loopback, 0x8000}}, 0x7ff, 0x6}, &(0x7f0000000180)=0x90) 06:28:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x2}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1490.977118][T23888] bond0: (slave bridge269): Enslaving as an active interface with an up link 06:28:25 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$TCSETX(r0, 0x5433, &(0x7f0000000000)={0x6b00, 0x3f, [0x3, 0x40, 0x3, 0x7f, 0xe], 0xffff}) r2 = getpid() getpgid(r2) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000040)=r2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) ioctl$TIOCSIG(r1, 0x40045436, 0x6) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) setsockopt$inet6_udp_encap(r1, 0x11, 0x64, &(0x7f0000000080)=0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) ioctl$TCXONC(r3, 0x540a, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82", 0x0, 0x100}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1491.033120][T23888] bond0: (slave bridge269): Releasing backup interface 06:28:25 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x1100, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:25 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000000)='\n', 0x1}], 0x1) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000100)={0x200, 0x4, 0xfff, 0x9, 0x2, "7f6657c79198eea83edb3931567a98f603ae05"}) r1 = openat2(0xffffffffffffffff, &(0x7f00000027c0)='./file0\x00', &(0x7f0000002800)={0x0, 0xc, 0x10}, 0x18) r2 = getpid() getpgid(r2) sendmsg$AUDIT_SET(r1, &(0x7f0000002900)={&(0x7f0000002840)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000028c0)={&(0x7f0000002880)={0x38, 0x3e9, 0x400, 0x70bd28, 0x25dfdbfd, {0x10, 0x0, 0x2, r2, 0xffffffff, 0x3, 0x3, 0x0, 0x0, 0x10001}, ["", "", ""]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x40004) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000080)={0x80000000, 0x1f58, 0x1, 0xff, 0x0, "f453ddd49cc85bce2c174157fb8d761940e540", 0x5, 0x3}) 06:28:25 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad1, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x167}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:25 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x3}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:25 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) syz_io_uring_setup(0x4620, &(0x7f0000000280)={0x0, 0x8b2, 0x8, 0x0, 0x371, 0x0, r3}, &(0x7f000070a000/0x4000)=nil, &(0x7f0000427000/0x4000)=nil, &(0x7f0000000140), &(0x7f0000000300)) socket$inet_udplite(0x2, 0x2, 0x88) syz_io_uring_setup(0x645f, &(0x7f0000000200)={0x0, 0x0, 0x1, 0x0, 0x80000f8}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f000073d000/0x3000)=nil, &(0x7f0000000340), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x10000}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r5, r4, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r6 = syz_io_uring_complete(r5) ioctl$KIOCSOUND(r6, 0x4b2f, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r7, 0x6, 0x1d, &(0x7f0000000080)={0xa80b, 0x3, 0x4, 0x6, 0x800}, 0x14) r8 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r8}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x5}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1491.628008][T23989] bond0: (slave bridge270): Enslaving as an active interface with an up link 06:28:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="2b0f000000000000000067000000a0f7bf5725ab2eea8d5b2f1cbb71fb6c7365beb99f4f797e9627b08e52c65933a7afced056c6a5d45bd059fa7d3aaf332ab40c869d69012996f6e4d677c3207fb1ce7b197af91ad8cb13789be3802c0e7e390b3c1dbb312fd34fcdfc7f097d9a30e7a3c46c909b0e03175bf8d88302a9cf4f7db48278e0c32dd62a467a9846867aeac0b8bd0f21df1858368007fb3b3daba343c36658d6a3f338f645fc62ceeb99800cacc8a599be0efcf335a1f5563f3188371698c612d294ec3ed4daa9f1f96311110e4eab050708a6a6b45b069741"], 0x14}}, 0x0) sendmsg$NL80211_CMD_GET_STATION(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x38, r3, 0x400, 0x70bd25, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x5}, @NL80211_ATTR_STA_FLAGS={0x10, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_TDLS_PEER={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x4000000) r4 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r4, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r4, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad3, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmsg$qrtr(r4, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000080)=""/201, 0xc9}, {&(0x7f00000001c0)=""/234, 0xea}, {&(0x7f00000002c0)=""/155, 0x9b}, {&(0x7f0000000380)=""/9, 0x9}, {&(0x7f00000003c0)=""/146, 0x92}, {&(0x7f0000000500)=""/4, 0x4}, {&(0x7f0000000540)=""/59, 0x3b}, {&(0x7f0000000580)=""/125, 0x7d}, {0xfffffffffffffffe}, {&(0x7f0000000600)=""/4096, 0x1000}], 0xa, &(0x7f00000016c0)=[{0x70, 0x0, 0x0, ""/94}, {0x100, 0x0, 0x0, ""/236}, {0x88, 0x0, 0x0, ""/115}, {0x1010, 0x0, 0x0, ""/4096}, {0x48, 0x0, 0x0, ""/54}, {0x18, 0x0, 0x0, ""/6}, {0x100, 0x0, 0x0, ""/237}, {0x38, 0x0, 0x0, ""/39}], 0x13a0, 0x10100}, 0x38, 0x2000) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:26 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) connect$llc(r0, &(0x7f0000000080)={0x1a, 0x127, 0x9, 0x2, 0x4, 0x5, @broadcast}, 0x10) exit_group(0x0) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x1b1801, 0x0) ioctl$BLKRAGET(r5, 0x1263, &(0x7f0000000100)) io_uring_enter(r1, 0x20450c, 0x0, 0x0, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) fsetxattr$trusted_overlay_nlink(r7, &(0x7f00000000c0)='trusted.overlay.nlink\x00', &(0x7f0000000200)={'L-', 0x40}, 0x16, 0x0) [ 1491.698494][T23989] bond0: (slave bridge270): Releasing backup interface [ 1491.902277][ T26] audit: type=1804 audit(1597472906.265:4525): pid=24011 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3470/cgroup.controllers" dev="sda1" ino=16113 res=1 errno=0 06:28:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x6}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:26 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f0000000000)=0x659) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) [ 1492.138021][T24000] __nla_validate_parse: 2 callbacks suppressed [ 1492.138039][T24000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:26 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x2c6}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x4000, 0x0) ioctl$SCSI_IOCTL_BENCHMARK_COMMAND(r2, 0x3) syz_io_uring_setup(0x7c69, &(0x7f0000000200)={0x0, 0x0, 0x1}, &(0x7f0000ee7000/0x2000)=nil, &(0x7f00006d4000/0x4000)=nil, &(0x7f0000000000), &(0x7f0000000040)=0x0) syz_io_uring_setup(0x45d8, &(0x7f0000000080), &(0x7f0000ee7000/0x2000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)) syz_io_uring_submit(r4, r3, &(0x7f0000000100)=@IORING_OP_WRITE={0x17, 0x4, 0x0, @fd_index, 0x0, 0x0}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r6], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) syz_io_uring_submit(r1, r3, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r5}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1492.212593][T24000] bond0: (slave bridge270): Enslaving as an active interface with an up link [ 1492.249535][T24000] bond0: (slave bridge270): Releasing backup interface 06:28:26 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x1200, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:26 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000, 0x0) 06:28:26 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f00000000c0), &(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000080)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {0x6040}}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) setsockopt$XDP_UMEM_FILL_RING(r5, 0x11b, 0x5, &(0x7f0000000000)=0x2, 0x4) 06:28:26 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x3, 0x0, 0xfe, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:26 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x8}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x7) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x8, 0x4, 0xa9}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r4, 0x0) r5 = openat2(r4, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x10100, 0x4, 0x18}, 0x18) r6 = syz_genetlink_get_family_id$netlbl_cipso(0x0) sendmsg$NLBL_CIPSOV4_C_REMOVE(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0xbc, r6, 0x0, 0x70bd27, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MLSLVLLST={0x4c, 0x8, 0x0, 0x1, [{0x4}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x220c5d25}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x15b1ec1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xdbddab8}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xe847df9}]}]}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x40, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x5986b8b7}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0xc, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x8, 0xc, 0x0, 0x1, [{0x4}]}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0x4}, {0x4}, {0x4}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x48840}, 0x4000000) sendmsg$NLBL_CIPSOV4_C_LIST(r5, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r6, @ANYBLOB="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"], 0xc0}, 0x1, 0x0, 0x0, 0x24080081}, 0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) init_module(&(0x7f0000000080)='[/(;\x00', 0x5, &(0x7f00000000c0)='\xae\x00') io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1492.689809][T24082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. 06:28:27 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x1, 0x0, 0x0) 06:28:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x9}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:27 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450a, 0xa220, 0x0, 0x0, 0x0) [ 1492.794605][T24098] bond0: (slave bridge271): Enslaving as an active interface with an up link [ 1492.833039][T24082] bond0: (slave bridge271): Releasing backup interface 06:28:27 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r3, @ANYBLOB="ff93b1764dc0cb4d2eda", @ANYRES32=r2], 0x4}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) r4 = socket$inet_udplite(0x2, 0x2, 0x88) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) r6 = openat$cgroup_ro(r5, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32], 0x4}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100000002) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000200)={r8, @in6={{0xa, 0x4e22, 0x7, @remote, 0x4}}, 0x0, 0xfff, 0x5, 0x8, 0x80, 0x1f, 0x3f}, &(0x7f0000000180)=0x9c) write$binfmt_script(r6, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) ioctl$KVM_SET_LAPIC(r6, 0x4400ae8f, &(0x7f0000000500)={"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"}) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x1ff, 0x0, 0x0, 0xfc, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) 06:28:27 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x40800, 0x0) ioctl$RTC_WKALM_RD(r0, 0x80287010, &(0x7f00000000c0)) r1 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180), &(0x7f0000000040)) syz_open_dev$tty20(0xc, 0x4, 0x1) io_uring_enter(r1, 0x20450c, 0x0, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_inet_udp_SIOCINQ(r3, 0x541b, &(0x7f0000000000)) 06:28:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) r4 = io_uring_setup(0x3013, &(0x7f0000000200)) r5 = io_uring_setup(0x1, &(0x7f0000000500)) r6 = io_uring_register$IORING_REGISTER_PERSONALITY(r5, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r4, 0xa, 0x0, r6) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3, 0x0, 0x0, 0x0, {}, 0x0, {0x0, r6}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r9, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r8], 0x4}}, 0x0) sendfile(r8, r7, 0x0, 0x100000002) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f00000000c0)='NET_DM\x00') sendmsg$NET_DM_CMD_STOP(r8, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r10, 0x20, 0x70bd25, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8000) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1493.193665][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.260529][T24098] bond0: (slave bridge271): Enslaving as an active interface with an up link [ 1493.280531][T24098] bond0: (slave bridge271): Releasing backup interface 06:28:27 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x2000, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:27 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x4, 0x0, @fd_index, 0x0, 0x0, 0x0, {0xa152}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:27 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0xa}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:27 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x33f}, &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0xfffffffffffffcde) r4 = socket$inet_udplite(0x2, 0x2, 0x88) dup(r4) fremovexattr(r4, &(0x7f0000000080)=@random={'trusted.', '\xe0\x00'}) 06:28:27 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000)='ethtool\x00') sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x34, r3, 0x1, 0x0, 0x0, {0xc}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4, 0xc}]}]}, 0x34}}, 0x0) r4 = socket(0x11, 0x800000003, 0x0) bind(r4, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) r6 = socket(0x10, 0x3, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r7, 0x0) getsockopt$inet_mreqn(r7, 0x0, 0x3, &(0x7f00000002c0)={@multicast2, @local, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=@delqdisc={0x0, 0x25, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, r8, {0x10, 0x5}, {0x9, 0x7}, {0x7, 0x10}}, [@TCA_INGRESS_BLOCK={0x0, 0xd, 0xfff}, @TCA_RATE={0x0, 0x5, {0x3, 0x2}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0x9, 0x3f, 0x3f, 0x1, 0x1, 0x5, 0x4}}, {0x0, 0x2, [0x9]}}, {{0x0, 0x1, {0x1f, 0x0, 0xfff, 0x1000, 0x1, 0x8, 0xfffffff7}}, {0x0, 0x2, [0x401, 0x8, 0x7c3b, 0xa8, 0x5, 0x7fff, 0x8b13]}}, {{0x0, 0x1, {0x7, 0x7, 0x8000, 0x7, 0x2, 0x7, 0x6}}, {0x0, 0x2, [0x2, 0x1ff, 0xff, 0xfffc, 0x4, 0x9, 0xfff, 0x864a, 0x3ff, 0x800]}}, {{0x0, 0x1, {0x80, 0x2, 0x3a, 0x80, 0x1, 0x4a7d, 0xf7e}}, {0x0, 0x2, [0x0, 0xfff, 0x4]}}, {{0x0, 0x1, {0x8, 0x6, 0x5, 0x800, 0x1, 0x7, 0xaa}}, {0x0, 0x2, [0xfffd, 0x1000, 0x4, 0x54, 0x2]}}]}, @TCA_INGRESS_BLOCK={0x0, 0xd, 0x162d}, @qdisc_kind_options=@q_cake={{0x0, 0x1, 'cake\x00'}, {0x0, 0x2, [@TCA_CAKE_BASE_RATE64={0x0, 0x2, 0x66}, @TCA_CAKE_ACK_FILTER={0x0, 0x10, 0x2}, @TCA_CAKE_FLOW_MODE, @TCA_CAKE_ATM={0x0, 0x4, 0x2}, @TCA_CAKE_NAT, @TCA_CAKE_FLOW_MODE={0x0, 0x5, 0x5}, @TCA_CAKE_RTT, @TCA_CAKE_SPLIT_GSO, @TCA_CAKE_TARGET={0x0, 0x8, 0xfffffe16}, @TCA_CAKE_AUTORATE={0x0, 0x9, 0xfc}]}}]}, 0x48}}, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r3, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x24000000}, 0x4) 06:28:27 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad8, &(0x7f0000000480), &(0x7f0000eea000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r4, r3, 0x0, 0x100000002) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_GET_STATION(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)={0x14, r7, 0xf2b, 0x0, 0x0, {0x67}}, 0x14}}, 0x0) r8 = socket(0x11, 0x800000003, 0x0) write$smackfs_ipv6host(r3, &(0x7f0000000f40)=@l2={{0x78d, 0x3a, 0x101, 0x3a, 0x800, 0x3a, 0x7ff, 0x3a, 0x3, 0x3a, 0x100000001, 0x3a, 0x3, 0x3a, 0x401}, 0x2f, 0x7505, 0x20, 'cgroup.controllers\x00'}, 0xc1) bind(r8, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0xfcf1) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r10, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001040)=ANY=[@ANYBLOB='H\x00\x00\x00$\x00\v,\x00'/20, @ANYRES32=r9, @ANYBLOB="00000000ffffffff000000000900010063616b6500000000030102000c000200000000000000000008000300000000000110c79ce81472bac2d147006f197795ea2389a8c88f35cdf7576c914b3bdd73ab4bb43511752d4ea8356ad5f8f2466ddf9419cd1800f87e34738f4737e9eb9ff362fedefafef65163bd220c3b0f26ce011b0ffaff5c998454ca8f295296adf99b719294a1a07270c1f7d1c75c21ec15976d3364d2c8b334efff879e676046ec7b2a286d1eb4967e20ddf3d7ad81021c09fef3eace8c0665aa22ad135d6e8612f725a09a5440ddb0"], 0x48}}, 0x0) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000500)={0xa0c, 0x0, 0x800, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac00, 0xfac05, 0xfac09]}, @NL80211_ATTR_IE_ASSOC_RESP={0x3d1, 0x80, "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"}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r9}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_TX_RATES={0x110, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x18, 0x0, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8000, 0x7, 0x1ff, 0x8001, 0x9, 0x4, 0x3, 0x81]}}]}, @NL80211_BAND_60GHZ={0xf4, 0x2, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x81, 0x8, 0xfff, 0x101, 0x7, 0xffff, 0x6]}}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, "4ff54dd42cf3bc495253c8252b6132b3c182e4d670af89a8fe566a"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7a, 0x7ff, 0x3, 0x20, 0x6, 0x7, 0xffff, 0x4]}}, @NL80211_TXRATE_HT={0x48, 0x2, "91fb85c94ddab5cf4294c74aa40093bf0e723de62461d9b2cc7255093261b5cd7d1e9296fa44b2d1a5642c47936887da3aad514af09f410bffe7a1b8505e6f182ee76809"}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x3e, 0x2, "28a0c11ed41a40b1007ba004336cae40740c8c86e6307c33cf0195e04c71022abce3e5719ea574de412c6742da6f07d70d1db2a7e962c06503f3"}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}]}, @NL80211_ATTR_PROBE_RESP={0x4f2, 0x91, "d0f000dde723818072f38b15bb2dca9a1e8900baac1579c5fb2b1910896328c1057424bfb626e894ffed35f4df62cb02d927fac10581aa2073dc7066ce613875aa7a30eda511dfb7c26554ad5f452ce63bda0d24c3ba98527190eb617623283ced6eb3a0e0f2d6a6c05e3e5dfe1f42d94765c25cda8cf7302a134497d2ba039a1a8ec9cf5e527e8ee35897025fb9d43cce8be9d41da05472bcbafa9ac8d1522c9cde35c971bb452cf430e4fad02f7baa3f9b5bf8e528686b752bd3c00219668c332e48b8a1602b31353c8c6475110db6358d0052491e6db2584dab2dac01527b388f53d71e4168f137ba968dff1645f55aa8b76696662f80280702a33c6b32809e7a5fc9c8edbaa8d37c26b8c2d1279beb16d22ce1939df6da8cdea1889a92c769c1802265ded2fcdcdccdea93a733dee504aa47b08f5dce6810a463d4d2abab8745833f7c44ad60b8a681958cfc500a287e7e0914915aaf160baeccfbaf3b7abb67ceca6e150d60779cf21e1537a60d125d1d3d48df49402a895992bf7276936f6224cd9bc10e5777cd6e94e6463b85c7dbc2c0b00b898b93131bd7d3ddc27e95fc2dcc74f2950712c426d2b96c5fd08d856294ab02b7cbf6420a9ac912c442f5e49cefb7f39aa6529a8dad73cf8bbb96658ffe851e7fbdc82f803e351b7539fdc8f5872d83cbbffc49edec39ace8f33488eec3f04c28d1fba457623db3aeb309e45f3f65ae226fda05343480550f6ba83f3b7d9ee32e6ba84e1d2aeb2e7f680ff7a358121110d0c5dc21bfedf99dbd844ca7f1c00b52b03e094310c402af0beb03b652311350c3d25beacc81104ea925675dd1dbdbdb02331052e04946e321fb295c652d9511cca2a12169fac5495a03bc227adfe8db098c91ad7b813ef9ac81371cd4633173482d607d38f48b744fba6924294f45e18133e7333cf51ebce500f7c867d290c34cf1e8c17b1d00c4fd58a321f1860d440697fe259df6e2a84c3e4126438681a87829359f08b90cec0ca7b740767cae24c4b996325f687669a64a5f35ed5103ac62155f32dff70a5744c5e79c122881f6887af6e3b6bd8bd885d169515f7f35791d01df9e2892b85dee4f65dc4467cd1a989baec6364de7e24299f1f7dcdec91563a735b2933cf9e4b5f5104aec7680c4681e7009cdc03f75d54cd824c53329fc896ad49742270af80ab3a3694db8619478cad5fe2637b390ec23843126be9583af7e59c814b171e1ce37cd553df9cb8beb588142a9048c8db21b83de8759b1e4b7e65a7c4023b41cdfb02b7fcd64c000db58d2c3510ba036fc953da8a06efda69a28b57dc0394629e4647e01ddf92c3fd9579fb5bc2a587a8065276e9006946dbca2891c3bd59defbba95c7e6f22cfc2d30183c75f7b2f9f5b6ecc85dc378a069b92282b18a6a3fc31810c20e5f9da8f4076313706bdb988ed41f2b31105bd89084ca0c99c221c5c660b34fdfc613600705f0c79683b56fb52d3eb54933802736c32295b3905d9a378a829ef7dfa5d87dd932873e8aeb232e27dea97776f423fc1b20c5d4279a833a95d3a9b14125bfbf72ec237d4f6d6bd02ee13e3cefbdbd16f7efe097f7b471e382c5f02cf09ec002cfd9c84b44331d9f1c6db26674f099c51c879402fa3a14911ffc3759f93ab6222c0296a4143d3bf08e2667db0e1b483d337439e446259495b63f30e837c49ffdaab7a95c6071c67250dc0e42f730af8e27a7908af8274b27d3c87a14d78e29efa4e4f059e79ce4970f2c530e1a09617ef337fbcbceaef"}]}, 0xa0c}, 0x1, 0x0, 0x0, 0x800}, 0x800) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) [ 1493.586424][T24202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.640735][T24198] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1493.666985][T24202] bond0: (slave bridge272): Enslaving as an active interface with an up link 06:28:28 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r4, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x20, 0x140d, 0x300, 0x70bd2b, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_RES_MRN={0x8, 0x3e, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x200048c5}, 0xc000) [ 1493.690459][T24202] bond0: (slave bridge272): Releasing backup interface 06:28:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0xb}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) 06:28:28 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r3, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r6, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r5], 0x4}}, 0x0) sendfile(r5, r4, 0x0, 0x100000002) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$vim2m_VIDIOC_TRY_FMT(r7, 0xc0d05640, &(0x7f0000000300)={0x2, @pix={0x9, 0x80000001, 0xb670718, 0x2, 0x8, 0x81, 0xa, 0x8, 0x1, 0x4, 0x5, 0x1}}) r8 = io_uring_setup(0x3013, &(0x7f0000000200)) r9 = io_uring_setup(0x1, &(0x7f0000000500)) r10 = io_uring_register$IORING_REGISTER_PERSONALITY(r9, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r8, 0xa, 0x0, r10) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_EPOLL_CTL=@add={0x1d, 0x3, 0x0, r3, &(0x7f0000000080)={0xc0000009}, r4, 0x1, 0x0, 0x0, {0x0, r10}}, 0x0) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:28 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x5, 0x4, 0x6, 0x2, 0x0, 0x919c, 0x0, 0x4, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1ff, 0x4, @perf_bp={&(0x7f0000000080), 0x8}, 0x0, 0x9ae, 0x6, 0x4, 0xff, 0x4, 0x7}, 0x0, 0x3, 0xffffffffffffffff, 0x3) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:28 executing program 1: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x22000, 0x0) ioctl$LOOP_CLR_FD(r3, 0x4c01) r4 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r4}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) ioctl$BLKBSZSET(r3, 0x40081271, &(0x7f00000000c0)=0x4000000) [ 1493.880248][T24202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1493.907772][T24223] bond0: (slave bridge272): Enslaving as an active interface with an up link 06:28:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x10}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1493.965746][ T26] audit: type=1804 audit(1597472908.335:4526): pid=24258 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir525723940/syzkaller.AQOdmL/3424/cgroup.controllers" dev="sda1" ino=16287 res=1 errno=0 [ 1494.000994][T24259] bond0: (slave bridge272): Releasing backup interface 06:28:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000d21b00020000", @ANYRES32=r2, @ANYBLOB="0000000000000400140012000c000100627269646765"], 0x34}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r5}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x2500, 0x0, {0x53, 0x0, 0x0, r8}, [@IFLA_PROTO_DOWN={0x8, 0xa}]}, 0x28}}, 0x0) 06:28:28 executing program 3: r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttynull\x00', 0x841, 0x0) ioctl$TCSETS2(r0, 0x402c542b, &(0x7f00000001c0)={0x0, 0x5, 0x0, 0x0, 0x0, "b9e5cfb41cd9d75651fa684fbeca702b211a82"}) writev(r0, &(0x7f00000004c0)=[{&(0x7f0000000300)='\n', 0x1}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x100000000) 06:28:28 executing program 4: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r3}, 0x0) io_uring_enter(r0, 0x20450c, 0x0, 0x0, 0x0, 0x0) ioctl$TCSETSF(r3, 0x5404, &(0x7f0000000080)={0x7ff, 0x8b7, 0x3, 0x101, 0x9, "af0901bcf9c6e49286517d7fbd437d16693e05"}) 06:28:28 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r5, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r4], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000300)=ANY=[@ANYBLOB="46040000", @ANYRES16=r2, @ANYRES32, @ANYRESOCT=r3], 0x4}}, 0x0) sendfile(r1, r0, 0x0, 0x100000002) accept$nfc_llcp(r0, &(0x7f0000000100), &(0x7f0000000200)=0x60) clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r6 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f000076f000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r9 = syz_open_dev$tty20(0xc, 0x4, 0x1) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r9}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f00000000c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r10, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r10, 0xc0285629, &(0x7f00000000c0)={0x0, 0x3e8684f7, 0x56, [], &(0x7f0000000080)=0x81}) io_uring_enter(r6, 0x20450c, 0x0, 0x0, 0x0, 0x0) 06:28:28 executing program 5: clone(0x20022044ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = syz_io_uring_setup(0x6ad4, &(0x7f0000000480), &(0x7f0000ee7000/0x4000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000000180)=0x0, &(0x7f0000000040)=0x0) r3 = io_uring_setup(0x3013, &(0x7f0000000200)) r4 = io_uring_setup(0x1, &(0x7f0000000500)) r5 = io_uring_register$IORING_REGISTER_PERSONALITY(r4, 0x9, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r3, 0xa, 0x0, r5) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580)='batadv\x00') sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r8, @ANYBLOB="ff83b1764dc0cb4d2eda", @ANYRES32=r7], 0x4}}, 0x0) sendfile(r7, r6, 0x0, 0x100000002) syz_io_uring_submit(r1, r2, &(0x7f0000000000)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x1, 0x0, r7, 0x0, 0x0, 0x0, 0x40, 0x1, {0x2, r5}}, 0xfffffffe) io_uring_enter(r0, 0x450c, 0x0, 0x0, 0x0, 0x0) 06:28:28 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000080)={0x44, r3, 0x1, 0x0, 0x0, {0x11}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev}]}, 0x44}}, 0x0) [ 1494.447100][T24311] general protection fault, probably for non-canonical address 0xdffffc0000000008: 0000 [#1] PREEMPT SMP KASAN [ 1494.458832][T24311] KASAN: null-ptr-deref in range [0x0000000000000040-0x0000000000000047] [ 1494.467250][T24311] CPU: 1 PID: 24311 Comm: syz-executor.4 Not tainted 5.8.0-syzkaller #0 [ 1494.475565][T24311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1494.485628][T24311] RIP: 0010:io_poll_double_wake+0x6b/0x360 [ 1494.491428][T24311] Code: 8d 9d b8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 53 64 de ff 48 8b 1b 48 83 c3 40 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 36 64 de ff 4c 8b 33 31 ff 44 89 [ 1494.511023][T24311] RSP: 0018:ffffc90016767b20 EFLAGS: 00010002 [ 1494.517112][T24311] RAX: 0000000000000008 RBX: 0000000000000040 RCX: 0000000000040000 [ 1494.525078][T24311] RDX: ffffc90011687000 RSI: 00000000000013ba RDI: 00000000000013bb [ 1494.533065][T24311] RBP: ffff888097a79618 R08: 0000000000000000 R09: ffffc90016767be8 [ 1494.541053][T24311] R10: fffff52002cecf70 R11: 0000000000000000 R12: dffffc0000000000 [ 1494.549018][T24311] R13: ffff88809f1a91c0 R14: 0000000000000000 R15: 0000000000000000 [ 1494.556989][T24311] FS: 00007f731cddd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1494.565915][T24311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1494.572487][T24311] CR2: 00000000004f33b0 CR3: 0000000091822000 CR4: 00000000001506e0 [ 1494.580452][T24311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1494.588418][T24311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1494.596401][T24311] Call Trace: [ 1494.598951][T24330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1494.599692][T24311] ? lock_is_held_type+0xb3/0xe0 [ 1494.599709][T24311] __wake_up_common+0x30a/0x4e0 [ 1494.618626][T24311] __wake_up+0xd4/0x150 [ 1494.619780][T24330] bond0: (slave bridge273): Enslaving as an active interface with an up link [ 1494.622800][T24311] n_tty_set_termios+0xa60/0x1080 [ 1494.622819][T24311] ? n_tty_ioctl+0x310/0x310 [ 1494.641145][T24311] tty_set_termios+0xcac/0x1510 [ 1494.644904][ T26] audit: type=1804 audit(1597472908.865:4527): pid=24308 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3478/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 1494.645989][T24311] set_termios+0x4a1/0x580 [ 1494.674570][T24311] tty_mode_ioctl+0x7b2/0xa80 [ 1494.679252][T24311] ? n_tty_write+0x1170/0x1170 [ 1494.684003][T24311] tty_ioctl+0xf81/0x15c0 [ 1494.688325][T24311] ? do_vfs_ioctl+0x6bc/0x16d0 [ 1494.693066][ T26] audit: type=1804 audit(1597472908.865:4528): pid=24308 uid=0 auid=0 ses=4 subj=_ op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir913679623/syzkaller.lAJgL2/3478/cgroup.controllers" dev="sda1" ino=16382 res=1 errno=0 [ 1494.717264][T24311] ? bpf_lsm_file_ioctl+0x5/0x10 [ 1494.722178][T24311] ? tty_do_resize+0x180/0x180 [ 1494.726913][T24311] __se_sys_ioctl+0xfb/0x170 [ 1494.731477][T24311] do_syscall_64+0x31/0x70 [ 1494.735867][T24311] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1494.741728][T24311] RIP: 0033:0x45d239 [ 1494.745608][T24311] Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1494.765198][T24311] RSP: 002b:00007f731cddcc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.773588][T24311] RAX: ffffffffffffffda RBX: 0000000000017cc0 RCX: 000000000045d239 [ 1494.781531][T24311] RDX: 0000000020000080 RSI: 0000000000005404 RDI: 0000000000000004 [ 1494.789480][T24311] RBP: 000000000118cf80 R08: 0000000000000000 R09: 0000000000000000 [ 1494.797450][T24311] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000118cf4c [ 1494.805418][T24311] R13: 00007ffe0215324f R14: 00007f731cddd9c0 R15: 000000000118cf4c [ 1494.813383][T24311] Modules linked in: [ 1494.817256][T24311] ---[ end trace dacf5142931c574e ]--- [ 1494.822702][T24311] RIP: 0010:io_poll_double_wake+0x6b/0x360 [ 1494.828488][T24311] Code: 8d 9d b8 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 53 64 de ff 48 8b 1b 48 83 c3 40 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 36 64 de ff 4c 8b 33 31 ff 44 89 [ 1494.848064][T24311] RSP: 0018:ffffc90016767b20 EFLAGS: 00010002 [ 1494.854102][T24311] RAX: 0000000000000008 RBX: 0000000000000040 RCX: 0000000000040000 [ 1494.862050][T24311] RDX: ffffc90011687000 RSI: 00000000000013ba RDI: 00000000000013bb [ 1494.869992][T24311] RBP: ffff888097a79618 R08: 0000000000000000 R09: ffffc90016767be8 [ 1494.877949][T24311] R10: fffff52002cecf70 R11: 0000000000000000 R12: dffffc0000000000 [ 1494.885901][T24311] R13: ffff88809f1a91c0 R14: 0000000000000000 R15: 0000000000000000 [ 1494.893856][T24311] FS: 00007f731cddd700(0000) GS:ffff8880ae900000(0000) knlGS:0000000000000000 [ 1494.902756][T24311] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1494.909326][T24311] CR2: 00000000004f33b0 CR3: 0000000091822000 CR4: 00000000001506e0 [ 1494.917271][T24311] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1494.925219][T24311] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1494.933183][T24311] Kernel panic - not syncing: Fatal exception [ 1494.940343][T24311] Kernel Offset: disabled [ 1494.944681][T24311] Rebooting in 86400 seconds..