l$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:47 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:47 executing program 4: setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @loopback}, 0xc) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000140)={@multicast2, @local}, 0xc) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x24b) r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/self/net/pfkey\x00', 0x480, 0x0) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r0, 0x84, 0x21, &(0x7f0000000100)=0x9, 0x4) 15:51:47 executing program 1: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) sched_getparam(r0, &(0x7f0000000040)) r1 = syz_open_dev$amidi(&(0x7f0000000080)='/dev/amidi#\x00', 0x3341, 0x30000) ioctl$sock_inet6_tcp_SIOCOUTQNSD(r1, 0x894b, &(0x7f00000000c0)) sendmsg$kcm(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000100)="995b00a47fc6eba33da1396699765a3101bf2721b307b3d8513991b2bbe4c22dcd4e85085adda0212f5b11ffd2c43f15acf7f2249515b4ad6a9d0ae2995f47b31bb1b7aa1e38400c819f4d947603c9f9dda329c83f3b8af3374d3cf1a7bec8713a41632ad503de71aaeb214ca09eb07d60251e695fdafdbf996dec7ec9a402c46febd82ff4c51bad306276953304b8434c9a71346216a813b9ceca4f4d9d71470f1a6737d3061bef6ff5f7363ae7e4111f7ad6e4f85a794e4ce6e63cae650be78b3d9b6948f908a901e3ee8dce242204d4d660c15311d4c90fea6631a6af9b", 0xdf}, {&(0x7f0000000200)="898a1f2625c12a14393333e3ecef34ca54ab7b6e967f3a10d47da85b03d255aa5f437ea0e7ceb1059bf4b7329f517f395b3dfe", 0x33}, {&(0x7f0000000240)="061a925f5f52223963fcf17caf9921a7da9474c46b74b29beb8d6384f7ef4a3343dc330032e5b9eb7a7626c5ec096544ac791ebb1b02e0220a00c8939a57b42152f856c5b1d44393bfe860f1b7e9598db98e80350f53e1ebfb7a1184e4dfc0d66c416183f9f12b1d39abc287273b27effc2868b63dc0", 0x76}, {&(0x7f00000002c0)}, {&(0x7f0000000300)="037ead88c8e502744f6d7c40952d8abe2d85d4f67d9f87b7bce5273d6d13d7eb00eb25804dc5c9c53169f7e931944f2fc1b472b72eee13e95f0cd93585e75b8f916e925aa43c67947bf3ecbc0fc2f0bcb84832c4b8e221bb46942133467d16b13e3fdf045c5903905a3921259582dd2f91a4875252cf03eb5dff3bc9d1b7c719af60916683c37150193cfa560f02701cee8d72ded59619a5f8990173c2e0e9a66a1bab4a223acd4b6f2ca222154e73c66c19781c5250df74c0773b345b3e8f48ac11", 0xc2}, {&(0x7f0000000400)="708364f726e1797d0ba5485985fbf2c38b5ff03b0c054552e70a13f96bc1abc64a41", 0x22}, {&(0x7f0000000440)="81af3980836b618400ef327e4034483806d7142cd0579ddbe8918c060b0115857345d0c2177dfb448b2f27157a7877196659e3bef5cafab7790b44ba912e758456627ed13daceedf5cd06c6e126964e2e7580e50feaf09be740b241b6cdd8d61d149205d175055ac1bc3bd1ad29b983437395780f752d3615beb9283326e59b8db314daeb5eab85a2e4ff954903d783f4b419f6b67d68a0bf3d338380cb15168e6c6066d200f13b709934972503f743c41ce2c70c3c42ec35681c83bc8bf5594d8c1a74c6b09cd90ddd65f5b6d012f5c1bd7", 0xd2}, {&(0x7f0000000540)="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", 0xfa}], 0x8, &(0x7f00000006c0)=[{0x100, 0x10f, 0x8, "c83b5081b15ac9998c93bc55eb8230122a860b8d1c48a6d4326e7afa63a37e0d7f7791ed886323f63731c489d19826fbe35843d209492bebced5586535d60d867ed952ee83bbb0637193d3c80a94abda3feb55367fbfdd839ece900942068e0fb94de66e2589ece1b038d1a22969866e17385300ff0d4c57a91975ff0b7ddbff08740407aad260fbb7a68d9ee74652013a446167144dd4297401d3c23a773f8ee72f11fd509fcefd1c5f59325cf92337073b6f6e588b5cab39db50b49c931c49b073aae2731b82d2889531ae47eb272c7ea48ec837cdd49da4e7ff08e63d2e29afcd8f73becac6b2525e9969"}, {0x80, 0x101, 0x303, "00de684c1b92965851c72fa715cdf4a7b60376fc8e8ec0a065078791201dc19f239887908e238ee263936dd2938a68b6e7e9780d43d6f4bd82bbb95f1af827e725fb8746520d60e6517730057a55b534b85eb22fc491430eb6dbf529daedb6a099742c86f5316233aa0236e6153a42"}, {0xe0, 0x3a, 0x5, "a650c64721ffd290335b34d3ae7f5445b0767ebc4244700604c42c113f468c88afd5e2714446d7da56645ed16a4dc5c61b3c68e2b64f3f918a772169cde6396692dcd69044e9f681d3cdc6375adbd54f85c2e895b19c3b0a5f8d20824f6182becb08e3fcbf0370a45f374af9c014dd33870ea3afcc08a5fa88d595703c730ed8c6674d6c2a3eebe18155937d138e58c455b47537013111ad46a83641d735cd85acd1bc79ec3a67ab7c93def31151a98248d63004670fb8e92a205ba852da45faa08e30da80f6871a34"}, {0x108, 0x115, 0x9fb, "3725a4f4858396aa3c05703ac73e4f4438535e7c66f3ec5f277e0b4a065ca783a487433456ca180826438cbab58f522ebc0f745ae72c1114950dea41373e4eab44f50ac1f7e5066bd57b379ef44888066d2f3edb5d2962e74ccd0b6201c3662df4aa496e2a2c6965162704b17072e8a194d3de601a81636f5cf5f2b4794bfc1930cba7b9a46ff0a0e149ec87d8c3e7a2fdf3e524d48d2b002a618b32d00f8dcf20fe284becd5324012161777e976b8fda13119fb5c98cfe77c01f607d8659e0cf93c0741db88f07736c66000c422cdc25ddd4a88975cd3d5f47e7ef857b42f946f0def40ae4225de397e2726d69e67d13c"}, {0x18, 0x10f, 0x80000001, "ef"}, {0x100, 0x101, 0x7, "7f427cc15b7d03dc7aa625825dd29e29419456376a6f531c39df0961f362817a20c8e412d1987dc44543abdbbbe6583b9708a720278723dd9672f65dd3f470e7095390a6fa975946d32c1a06483e3814ccbbccaecff9c2ddbba1e89c8d8cedf32a5b83e6572b9e53e39443bd9bb0229ac749d107e7568823e37f3f110e8b9863db259b437ac06dfbecc0fe02ee771e6ff427f9620694062b1204f8a950e5cc728db31060144153d4a7fb548caabd407f05d83254dfcb2c083d33bb911dc566b521e294d3de68a988027a0fd50712e2cb4c864b23e85ad369fd683cd8a919ab3458b34a86dc54743205146c268ba702"}, {0x48, 0x115, 0x8f2, "33669964b5f559c95c159d2c2d902829300c4c0a5a4844973036927e35ed27edcdb89eaad4f6c64128f4e35c8e83e45c9d40e674d324"}, {0x40, 0x102, 0x7, "6dcb366338328192a9355101081965b1a68459f9d266c4ca44735a0589916b7721a08adfe874193cf593ed1f3efa31"}], 0x508}, 0x40) getsockname(r1, &(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @local}}}, &(0x7f0000000cc0)=0x80) ioctl$SIOCNRDECOBS(r1, 0x89e2) ioctl$UI_BEGIN_FF_ERASE(r1, 0xc00c55ca, &(0x7f0000000d00)={0xc, 0xfff, 0x16d2}) r3 = request_key(&(0x7f0000000d40)='rxrpc\x00', &(0x7f0000000d80)={'syz', 0x2}, &(0x7f0000000dc0)='\x00', 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r3, &(0x7f0000000e00)='cifs.idmap\x00', &(0x7f0000000e40)=@builtin='builtin_trusted\x00') ioctl$SG_IO(r1, 0x2285, &(0x7f0000001040)={0x0, 0x0, 0xc2, 0xfffffffffffffff9, @buffer={0x0, 0x12, &(0x7f0000000e80)=""/18}, &(0x7f0000000ec0)="ab14970d1fda82da53a934b444f8b3c414390d23e6cffcd15de38d1065d51ad695e3e51a966a2395312d5f59fcbde81451d3e4efac82840da1913192cc3681e0b6eb61a2c1b3a9256a986a05b8fcc34120a9445c530455dc1237b0842a8b739e5374be98dc2478cb9b73250adf65c4ae524cc8e759aaa73c3adb0097f3784ab9357759da3740a64fc23f2a747b25e952a8408b9ff05de1033790f97e72290829096f745f03403b78da3b7c11b111f50cdd56497623c0c3f48585028380e0ef505185", &(0x7f0000000fc0)=""/14, 0x7fffffff, 0x10037, 0x2, &(0x7f0000001000)}) recvfrom$inet(r2, &(0x7f00000010c0)=""/166, 0xa6, 0x10002, &(0x7f0000001180)={0x2, 0x4e24, @broadcast}, 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000011c0)=0xffffffffffffffff, 0x4) ioctl$NBD_SET_SOCK(r1, 0xab00, r1) getsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000001200)=""/184, &(0x7f00000012c0)=0xb8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000001300)={0x8001, 0x9, 0x800b, 0x1, 0x0, 0x5, 0xf5ff, 0x5, 0x0}, &(0x7f0000001340)=0x20) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x19, &(0x7f0000001380)={r4, 0x5f6}, 0x8) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000013c0)='./cgroup.net/syz1\x00', 0x1ff) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f00000014c0)={0x5, &(0x7f0000001400)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @broadcast}]}) ioctl$IMCLEAR_L2(r2, 0x80044946, &(0x7f0000001500)=0x8001) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000001540)) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000001580)={r4, 0x9}, 0x8) write$P9_RLOPEN(r1, &(0x7f00000015c0)={0x18, 0xd, 0x1, {{0x51, 0x1, 0x5}, 0x4}}, 0x18) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f0000001680)={0x17, 0x4a, &(0x7f0000001600)="c7b425689e7134927ee8cfd5192d1a4dc36ded05a979a65c35b9e8248c40a2ffa8ac7f931da81b426cc201d856d64e1adadb3a3dc7651d4995170f5653d3b1fc47a353615760b6ab5e90"}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000001740)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000018c0)={0x8c, 0x0, &(0x7f0000001780)=[@dead_binder_done, @clear_death={0x400c630f, 0x3, 0x1}, @clear_death={0x400c630f, 0x0, 0x1}, @reply={0x40406301, {0x4, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x18, 0x18, &(0x7f00000016c0)=[@fd={0x66642a85, 0x0, r2, 0x0, 0x2}], &(0x7f0000001700)=[0x0, 0x0, 0x38]}}, @exit_looper, @acquire_done={0x40106309, r5, 0x1}, @exit_looper], 0x50, 0x0, &(0x7f0000001840)="73aee2748cbb2a6b338242b822bcd4376577d56a36f35f881c248a44b1327348e83cd5f207d36696bcf7d128349041bd0dfe64652448f7a40baf7c1eb1b2479e9261034e08f09d43d9ed45448fdddcb2"}) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000001900)={0x28, 0x2, 0x0, {0x3, 0x81, 0x400}}, 0x28) read$alg(r2, &(0x7f0000001940)=""/121, 0x79) fcntl$getownex(r2, 0x10, &(0x7f00000019c0)) syz_open_dev$dspn(&(0x7f0000001a00)='/dev/dsp#\x00', 0x3, 0xa00) 15:51:47 executing program 2: mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001500)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6}}, &(0x7f0000001600)=0xe8) syz_mount_image$jfs(&(0x7f0000000140)='jfs\x00', &(0x7f0000000180)='./file0\x00', 0x6, 0x5, &(0x7f0000001480)=[{&(0x7f0000000240)="ceeb1adcad92825b76e20fc8699dd697d506128d3f2cf5d707d66f7887899753d2b05b8cc285912d57bd358fd1e9d7f08e833d64f27a3351ae01e314012b8021372f9c0ed895f297566e3d0f00ab3b9038bf5843074101ea17c15da7cbb675a3813270b5ffc6f13a1a7e9f76bb73dbe492c401ed467575a33978c0a020c5ee09bb8689d55b9b4b98bf9278258721de7924cb12aad6315a3ccbb070f76c27dcc8ee", 0xa1, 0x8}, {&(0x7f0000000300)="88daba1bb06c49691dcbfebacbe4697a9a4640d96414fed8bd87c4d56f613ac99b939a660b90f4d4a5d3e60a420636a8ac89b36cafb621a9d10b91990014dd2fb8f97188062d46b6af6e4153f3b7bedb158069cd93a39cc3fa94e9d9ee0306501e19085339a107483bc57e590bda1a39fbb1a29a03dcb38c61cb289970037a1f173883ab3deadfea9bb33c01cc407472e17901174c0698a59915bfbb10af03f9d2c9b5d0e3bc4e6fca0ffdc244cbc512054306d1d8e50591b8b65453faaf6d73eb2c7daa50b2ad146d4caccfc9846d76ef5650ae5fcf1a0131765a183c139f2d92e4eff2b7ad98f02a8cde064ad58ed66608b0aec0d71167cac45c20e0f4dfb2adf962f1fcca4ce1629b5508306dc9d9cf6549e8f82a8fa14dad31e06d9b1b71a32b57012573d8f76075a66e5390211ace6112abc61c8ccf196a7a0812e444dca6c9e50da5be571c751e9935f0cfdc63530a6c4681dc27012bcf7c767525bbaf7d1ca3b44426fd8312bee205e887104b6092e5118ebab7fbbb33f643babf5bd59d8b71da638845c3600ababff39fc39e2f23bf69c52e3a554d9180b4240bbed25b7521ef805623986e85bdad9e6c4e472defa5e1188c5d1c5ae4ebaa55c7263bf5140c706eaf7dda97ca439480f08675495ba40533e80680c4c9d96f555bb1c53324e6229836c0a8846fdb4c926f654e2e76f8f11d37cfcf1fc69ab69b3d6ce544a417b159fc67492722086361e2def6740aa12da7726dce13d25154ce22a8e4586fdc055bd40e21654f9b7856e23f55e964cc77c6147c937eea4b010a9e28e0ac468799cca595b19b2b14513a6d20108c17c15134828645b0c43766885be4643e0e251db3ca4545cc2989485bdea055f6bef607c942ffbb0bd69351662351abdffaf9f0a1838e5dcea13e394af168075e51f72090843117cff1a3bbd4d1cf7b97a1abc5970be4eac48fe5736be3e6d453c543b5921d1a1e2d585eacb1a4bd6c603642df831fd598e2d93ef785700022ed97ae0f4c223cdea5c063b497fb0f9eadcd07e1f013d3a13301caa5afcacd933e343c322930db5abd432becfc95693717e446dbae6ba79ade1d89df81614f71284b76f0975e8d20ff7b760312cf55ca22f2b5f1e05486db1ac0a21ad93c98983ba91e3bd575d64098c068d78cf510d139d95683255e05a7205cf096d699758fe95df44871de0d5f75f74bf5451a20ce0aee08bd1c8163e8e105cc67d45235b4ca87f61e47426c93f2fe0af7e3765043814dbf1b7ba1395f31b144e7e1873d1f0df1a6c00c2d52a8c849aa511d8fcd0ed1445e9ddfe8a0a7366927938bb034228504e72da1bf0d10b941055a99279264f1f77a87db90a02cdc0f5d4734c1f01dff4547d1993b1b90ccd91df8b6e0459ead5e71119792e69de8608057535a993fc16c37cc0f2a692033b4b5eeb16d9d29095f24bc894cc94adf7af1c9594adc9627bdc55e680b88027fcac8dea7a89c458634bbe5a0153825eb4310f7f399449f25c7f7e9d9e6d44ba5f42ff7758b01cbbc21cbb672961d5baf740cfa46f1433e4831cb74baf52d256eba128cd3427eb933010f4d44d92834827e5aacd7231194d9ab1cb0308a4f76bb325a9a8a7d368d23a78d51f35663d2e28e7760da22cb3aa74dc58530f835b7497cb24f860a68ea65948b7365a2dfedd3dc9ae5bf3ea05a259295931f652e506b6dcfb0ef70157230aa229bf8e705da3a43896039397d8922e7ff43cada4bac027060c46a856dcf18f936e9552898ea320b1267ea1fe8a4efa57e0295c9a9b58e8b1c542922d531e06d32cfd7f4142db0182720d19842f1ee4c15b7daa36bf6a33d26a36e17b63dcd6a9c497e3da46adbbdc14d4fa8cb89dc34440707dcf3dee54ff7a8f20338f26c2ca8e8fcad88084c6f99dec2431e40fff954f4e74ef0db9eda610890af295a228e0c79df628f0c42f79a94ed23b4a704a9f1a7acd2fa28b0f9816d7c2cee33868e9cfc05b7666a375d4d34d72215713741e362c6c996fc924a650356eaf40413fed1ebe4359f55143a1389e8fb9951485adcfd51720254e51fd1dfffdf0caa492e50b215824e105638d5a3022425dffa26c96add647af8d8443a6cd7897dfed7e1037ae504397c5e4757424ba8a47ac1beb94317a8d06033dc5d30f7b82dbae84e425dea3671df1fb61fa8055d455b36c89bd48ee504ce6eb673c14864fc33e868d4f0477acf480500855a645e34b683153c36849ace7143f8b6782e954778e74e46dc9aed79db3e66a74b028c43fa5ea4f9b81265cdbcbc015e4b4c5f6c27a023b5dd41b099cf5590a4ba536d465017e8ed758467640ed70ad6423d89683adcc08e91bce4f7e56bc0f07507c0cb13fa7e7776e3da020b5e6655c3bfd8eed29303f855f8e42446709f45acf499283c35de728ce0115a0d1026c6e6cb66b5cc5257a821d67aa785d33fcca9031073e55665de813d65f90942b1d25f2139b249878878bcc041375c8650a5148ea3c3254c9c6733721abc83f91096de4cb4920a0f4c321ee5f696a43dcdc11c6f9813534c7ee261c31987dd4def660f181ad07606586393bb94bf3e12f717acfac5ee1f1ae7ac9eca9227d2b866c4efe0d22e4dafb9fe915e1d84007c5660a097163a361e6650dca543a308675bbad06ed8bd24679173d1ac27927ed4e42230e38e505b74b5db8f81ada63c0d7c3312d10aaa14bab4326cb229d23fcb995825ea0812456f20c8966eafc3dd356368e3793fb23840a36673236be24e7bf8451706de18eecbe7f8dfa3e9bfc321d1a8d65b1df44bca425752ee6f1e9d05abbbb30a7f0eba7644fe54f4d1a2577e55ad48d5f244fa74f362e338a3cf306690e5aa8136abe98b6aea3e86573dc9a7eb53fbfe83a7d7241d874b681270d0be0c9a7fd9e506da64ec498491e74b7bc30fadc1fc7c435c819d31f8e41129dd15229369333dfacb9dcfc241f8358c98834c63ee3578c3c5011d6191a2040f851a10a81098844cef0b68fd153a2f7eb7ddda865759c5d1228561c43b131723c3be8703bf2db334f3ed026502b6b0f6013448a56a95dfc138c448a5220a51f5ac3d92d7987106c02e29f6eab606819b1537811186ba3181fa94b6fc6283e88b0243dcae6b6fbc3911dc3a5b79d9f1279f4fd94392767306b81181c439903cb81553c58cfb43a26e0c34b8b7dcba527df6a7dbedf83d73baea7a05d6ba39ecb70e176fcab408a1053f79eb6a45bd3aae2e97bc53a48270083fec83c0e323aa9ead68ed97489427bfddb596aa675dc32081f784f365e68eb258320c0d20fe386c1ebb90b8b1d1706299c1601e6e5ddd1b6c8ee881b4a3e6868153158c83822f9213e82861f291f99e10616851d4ac5e880996b1eef5c52a8e5b3c3e87e20cd0d3bb859ef6f6ef6c191da168c387549af470b224961bdafe293a4c5096209775ef08f84cf4a02f83ffdc2071e770b53223ae120281b76a9f536fe8288848d48a81186c9822a99df468a060e492a2a627f0f35dfeac1c442de0a1a2500b08a16c70fc84710a2620c7cf7b6ded1046e73779c59287d85e05eeb728c066246a068c92498fff00d8014fb9290b429b446afcc9ec71805344f3bbd946e2e05e8eb0a0892a26dcd359839b5ed326e56364cde26ebf7f11c3f36688738a200de998d77c60252cb238fee5f448299d316002f2a090eb7368d88ea3156ad68c244356112d0d81fc749203ea4ed011ec3e5412dabff83aff3c23607539d0c22ee9b3bae61c2e46163030c8dbcb05f24886c219ca574c97cb325ff27232c89abbd260a7997e770993458dca59d4c9c60a0e928e56240d72555c3a2a19f34800fa81028975c4b73ebebb131a3cb68f5fd7e53ec27852415ef2f2ef7b6f6e17ee012520a5bac9eaaf7a60bedad07821cda40753c1b8976da54429dc9f06e20094c3130f1b97dce3b657691f4a64c51de01faa1d2aeba1a2cacaa186bb09824a4ddf08a41f2df6fe0dc820ecc2002dccb6803e593880d840d903696e4acd8a537054eb1ef3a085f7c1850c0c0796d594a742d8eaa3eb547208001aab75719fdec32e73ec99eea9afa85a3e1de12fa954e4c1f6690191c05ba43e4f191473f28ebd95ac2277bd786d61279785b78735168659d851117d079d25cb099616568e2438ff56a7c0523776072783e43162d5cc8afbd941be84b4ea06f115fa31b1e0561ddc969114bde837f69ab64fcc23b703aa684b56afe8fdce4eefadb1d844cb12cb9d5ec74a934c0ec6fde9e9dfe8888bb956c4ac7540ae3a9dd3117c98d9f9b26d1e3a28ea37a8a066f138ca0b2305be2005aa83c44ebb8bf5b8d92189e9b7340508a8f3f1b46db90e62ec4a23b07222ab3272aa4a461de95b0c753d30f0e1ce6f078c46fba4f0d5c44a0e8f8f119c05c15d6531052a1a4b89485d6a12f64efe550e6642f02f7d9d010801f2acc52bc9ea05c9b85695b8952028ad82119c09f037c420841aa21aea818111a99cb0d2c5b4a2f810ef592b38ed73eb8bec40fabf37944270288dde2ccad803087b0b9fb7c1695f589961e222ea7000118746cdab58af3e3053eb9236e67a8318e47f81f1425b30a86cd3b6223733bd17c505f47a31931c053dcb1644e47e1f758ca34abd5a515f7792a2dfe3d9f95ddc5b12b123478cb76b46f3b8b7cde361dcd56ca2c0bd7bb0c87e0e451af6c22c63e3fe6c05b8a20834f88905f94ab1cbf35e4079160cea466a6b44f6cbab015268ba91c86024d05218651431cc64bcca500ea811af73775a4dff93119519ee26ae96711231c9d56c81c9e20dd0a2f367a7ced7132e1d002b912e92d24768a38ebdfc2f0f78a8f2aae8e54c94c65e411470833e69bf70751e5804f3e2f4eeeaf05c762704421a9fc1ebb17451edbdf97ff322c1d5a2020f7ee55b7dffe72de483787a1bea62e53555f94642108a7d298ee141319bb26d4f1840c1144637743694988cd70e3e87ef7da766e441184aceb8759efa1c7ad409e42d8344693c0fee1536cc1bc882bdb0f81fc9ca18e70b5cde8e3f31de3b1e20cd75f0fbdebea9e2dd928db5c2c09c530dc48667463bb4ad12f8879b01166e04f8b71cf65754e8f762a438295345b46ab291feb752bdc894ea3150421d81b7e87dc858134fcea076386229085b7ecead9f4585a733778652b932d19b303236745831cf846d03897c15f191860c1837c5f31d469b4be0a955edb16e6e52baab1b9df52f0336f0d2d37f4561640dd9c6fdbc19fcf5c8a73efd7a7f6d132cc59f7fd1c716cbbfda361a6392e970bf2bb068526f15d81a01ef2fd6303da5e4d467afeeac8ffed831b32bab9f7e4a21d3768dd433e2dcffc7b986df30485f9dc2e07f006d01911c2e8b3559a5b699ba540e16790cba6171341412f691416bd289eb1d099281aced03580b6e65d50cdc36eb5d5020608332c5392dfbc2120ea7041bccfc79983c8a7d6f72c4d7fe7b1633aa8a093583333a3cd3086def4783e7ae9613e24433dd9b2bb7257046440165640d6e54c3bb10cb1db202520ececcc818fa7e761e53cac12a3ab2b59d303da1e9d43fa851bbd57eb8b5557073310a9c18037e305f613c67f7e1fcbda84336cf768bfe33020a61d09aac9c248ded72148050214abbac0e8ae19565ab10f18044f69a0c009ba9249c62ce9dc23169fd9fdd2bdcfa8001e82083a47eedd25f4d1e8dc61298d3f923c53672c79c2fdee809924994e6d826c5d0edb2a9e256584ca1b762a26bb1e2537ed9270a287c668c3cbc638dfcd58aba489e18978a70ac2bceb7bf", 0x1000, 0x7}, {&(0x7f0000001300)="2ce6edaf9771be4a86039d1234a6bba6fbcdc58899204d2ef49974625eda54d44b28e863d11bf6ea3c8eb88d79ed6f492ae83e390a1005a45f8f33ac0f4cc5a78795b4af77223d8484dbe445bf9acf75008f95dfc4918c656c0743fc859a0676d74cab3d3832540fedcd", 0x6a, 0x80000000}, {&(0x7f0000001380)="a99c844f5183b5102e17b3f92f8ccc2e0dea60b7865f08c68c1659307110e5fe4d9549f1e22ef066cf63e08611344e987cac21b27b6af33dcf1f172825dfe38f53b77616d7a31ef9401c4dc8cad892305b41b108c9a96307c8d72f13970af20cfd94ecc1d08f05ade3ceee6c0feb2c295069841241363369827da22db4f48b9c12ec26b7ed25b5fc12aea5bc38ceefc7c81691003667adeda54eacc2e996d8866bf9b84435d85a3780ee336e742ddbfe0ee737e32eaef40676f37a08df0aa5cd9ffd8c6f0501b69b73efeb21835c207980a5dc99f1c16821b558fc4f1eb3f6fb89bc545928e1d5fb44c9f15f09a2fb52a8ee6b95a8316881dc", 0xf9, 0x1}, {&(0x7f00000001c0)="aab84f65fe9af60279f8824efc6f1d06412c8333e66566fa430cb2deb155fd12720f50c4", 0x24, 0x5b}], 0x10000, &(0x7f0000001640)={[{@umask={'umask', 0x3d, 0x75}}, {@nointegrity='nointegrity'}, {@resize_size={'resize', 0x3d, 0x7be}}, {@discard_size={'discard', 0x3d, 0x2}}, {@errors_continue='errors=continue'}, {@quota='quota'}, {@discard_size={'discard', 0x3d, 0x3f}}, {@integrity='integrity'}], [{@audit='audit'}, {@euid_lt={'euid<', r1}}, {@measure='measure'}, {@func={'func', 0x3d, 'PATH_CHECK'}}]}) getgid() perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000100)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './file1'}, 0x5c}]}) [ 411.887919][T16756] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 411.911059][T16796] bond0: Releasing backup interface bond_slave_1 15:51:47 executing program 4: r0 = socket$inet(0x10, 0x5, 0xa) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="2400000003061f001cfffd946fa2830020200a000900010006e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000080)={0x2, 0x2, 0xe7e}) 15:51:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') sendfile(r0, r0, 0x0, 0xffffffff) modify_ldt$write2(0x11, &(0x7f0000000040)={0x1, 0x1000, 0x4000, 0x1, 0xa0, 0x4, 0x3, 0xffffffffffff0000, 0x3, 0x7}, 0x10) [ 412.054029][T16935] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 412.101893][T16935] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 412.142308][T16943] overlayfs: option "workdir=./file1\" is useless in a non-upper mount, ignore [ 412.162640][T16943] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent 15:51:47 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:47 executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000000)={{0x6, @rose}, [@rose, @rose, @default, @netrom, @netrom, @rose, @rose]}, 0x48) listen(r0, 0x80000000000) close(r0) arch_prctl$ARCH_MAP_VDSO_32(0x2002, 0x6435) 15:51:47 executing program 2: seccomp(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x0, 0xffffffff}]}) socketpair$unix(0x1, 0x80000000000001, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x20200, 0x0) write$P9_RFLUSH(r2, &(0x7f0000000340)={0x7, 0x6d, 0x1}, 0x7) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x5, 0xffffffffffffffff, 0x0) ftruncate(r0, 0x3) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$netlink(0x10, 0x3, 0x14) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000140)={0x40, 0x8, 0x8201, 0x5, 0x9c, 0x7, 0x200, 0x6, 0x0}, &(0x7f0000000180)=0x20) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f00000001c0)={r4, 0x1}, 0x8) perf_event_open(0x0, 0x0, 0xf, 0xffffffffffffffff, 0x0) close(r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x2}, 0x10) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000580)=0xffffffffffffffff) ioctl$int_in(r5, 0x5452, &(0x7f0000000040)=0x19b) sendto$inet(r5, 0x0, 0x0, 0x900000020000000, &(0x7f0000000000)={0x2, 0x2, @local}, 0x10) sendmsg$nl_netfilter(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x202800}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="407a44593578c8ac29bd7000ffdbdf25000000070c002e000800000000000000"], 0x20}}, 0x1) [ 412.234049][T16833] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 412.264365][T16922] bond0: Releasing backup interface bond_slave_1 15:51:47 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 412.365341][ T26] audit: type=1326 audit(1552233107.656:207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16945 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 15:51:48 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 412.803891][T16926] bond0: Releasing backup interface bond_slave_1 15:51:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 412.944011][T16928] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 412.954771][T16934] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 412.983108][T16951] bond0: Releasing backup interface bond_slave_1 [ 413.109416][ T26] audit: type=1326 audit(1552233108.406:208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=16945 comm="syz-executor.2" exe="/root/syz-executor.2" sig=31 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0xffff0000 15:51:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 413.183519][T16953] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 413.209580][T16956] bond0: Releasing backup interface bond_slave_1 15:51:48 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 413.341474][T16960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 413.357131][T16968] bond0: Releasing backup interface bond_slave_1 15:51:49 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 413.721684][T16969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 413.731370][T16975] bond0: Releasing backup interface bond_slave_1 [ 413.878060][T16977] bond0: Releasing backup interface bond_slave_1 15:51:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 414.003863][T16979] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 414.014509][T16978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 414.043653][T16985] bond0: Releasing backup interface bond_slave_1 15:51:49 executing program 2: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x3, @empty, 'syz_tun\x00'}}, 0x1e) syz_emit_ethernet(0x14, &(0x7f0000000140)=ANY=[@ANYBLOB="8bebd93a5e0c00000300000027fcff0e5ef854b1d88c0bce057ff574f9f245aea612cf6502951adba5327b1444628a9c0259aa2358776a05510d13ea3d8342e5a08b07ee2ace40e4dfe20a747d2663a702c25f53cc9af91028f5c1a0d4da9377a1ce0c4d47609bdb6cca2579399b248af72749bb87450e5ae3266e888f1039cbe9705829e3afa7b8aca9fb06207e06a20979fe548b0c9f4a40c536d6756c23ac69487e481dbe5abf6cee096a71fb8234000000000000000600974e6c06dfef0d5b419469deee74b71e9c1dc37c7c76f972c4b23124f44ff4367581daa46c16857d321ae073610cf8ef572ad10e5acb759cfbb5"], 0x0) 15:51:49 executing program 2: r0 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x9e8, &(0x7f0000000200)=0x0) r2 = creat(&(0x7f0000000700)='./bus\x00', 0x0) mknod(0xffffffffffffffff, 0x8004, 0x9) ftruncate(r2, 0x48204) getsockopt$bt_sco_SCO_OPTIONS(r0, 0x11, 0x1, &(0x7f0000000340)=""/243, &(0x7f0000000440)=0xf3) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@ipv4={[], [], @dev}, @in6=@dev}}, {{@in6=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000040)=0xe8) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) setsockopt$RDS_GET_MR_FOR_DEST(r0, 0x114, 0x7, &(0x7f0000000100)={@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x2, 0x3, 0x1, 0x3, {0xa, 0x4e20, 0x4, @empty, 0x3}}}, {&(0x7f0000000740)=""/4096, 0x1000}, &(0x7f0000000080), 0x10}, 0xa0) 15:51:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:49 executing program 2: socket$inet6(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x40000) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000180)={0x0, 0x3b, 0x0, &(0x7f0000000140)=0x7}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, &(0x7f0000000080)) ioctl$KVM_RUN(r0, 0xae80, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0xffffffff, 0x2) ioctl$KVM_HAS_DEVICE_ATTR(r2, 0x4018aee3, &(0x7f00000000c0)={0x0, 0x7, 0x3800000000000000, &(0x7f0000000080)=0x2ba}) madvise(&(0x7f0000865000/0x1000)=nil, 0x1000, 0x6e) [ 414.286503][T16986] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 414.301500][T16990] bond0: Releasing backup interface bond_slave_1 [ 414.374949][ C1] net_ratelimit: 20 callbacks suppressed [ 414.374958][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 414.386459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 414.455009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 414.460853][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:49 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 414.501820][T16991] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 414.516244][T16996] bond0: Releasing backup interface bond_slave_1 15:51:50 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 414.728332][T16997] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 414.747218][T17002] bond0: Releasing backup interface bond_slave_1 [ 414.865564][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 414.871565][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:50 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 415.022719][T17007] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 415.043049][T17006] bond0: Releasing backup interface bond_slave_1 15:51:50 executing program 2: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r0, 0x5403, 0x0) fanotify_init(0x54, 0x400) ioctl$VIDIOC_S_OUTPUT(r0, 0xc004562f, &(0x7f0000000000)=0x100) ioctl$PPPOEIOCSFWD(r0, 0x4008b100, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'bridge0\x00'}}) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) 15:51:50 executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x22, &(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffff00000002}, 0x10) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000002280)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000002980)={&(0x7f0000002240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002940)={&(0x7f0000000240)=ANY=[@ANYBLOB="e1d5e73bfaf11ccd23d77acfbd7b369bdc701fe5f9f5e94b1e41b6c0c1fb5c43edcc03b493cec335e67987088c62cfa807c71e4d1cec873cfb0e06d57cba77e5969bcadef8852af6e31ac47d3ae416c39ffb", @ANYRES32=r2, @ANYBLOB="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"], 0x660}, 0x1, 0x0, 0x0, 0x1}, 0x20008000) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) sched_getattr(r3, &(0x7f0000000080), 0x30, 0x0) 15:51:50 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 415.271183][T17013] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 415.282822][T17019] bond0: Releasing backup interface bond_slave_1 15:51:50 executing program 2: r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/udmabuf\x00', 0x2) r1 = socket$tipc(0x1e, 0x2, 0x0) bind(r1, &(0x7f0000000040)=@nfc={0x27, 0x0, 0x0, 0x4}, 0x80) ioctl$UDMABUF_CREATE_LIST(r0, 0x40087543, &(0x7f0000000000)={0x0, 0x18c}) 15:51:50 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x319000, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000180)=[@in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e23, @empty}], 0x20) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000140)={0x5cd3, 0x94b, 0xff, 0x1, 0x8, 0x4}) getsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x12, &(0x7f0000000100), 0x368) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg(r0, &(0x7f000000ac80), 0x66, 0x0) [ 415.495048][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 415.500932][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:50 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 415.555506][T17022] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 415.571119][T17029] bond0: Releasing backup interface bond_slave_1 [ 415.655185][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 415.661022][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:51 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) recvfrom$llc(r0, &(0x7f0000000040)=""/60, 0x3c, 0x2000, &(0x7f0000000080)={0x1a, 0x20, 0x3, 0x6, 0x1ff, 0xffffffffffffffff, @local}, 0x10) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf32(r2, &(0x7f0000000340)=ANY=[], 0xff0e) close(r2) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f00000000c0)=0x800000100000001, 0x4) connect$inet6(r3, &(0x7f0000000140), 0x1c) socket$inet_udplite(0x2, 0x2, 0x88) fcntl$setstatus(r2, 0x4, 0x2000) splice(r1, 0x0, r2, 0x0, 0x100000000, 0x0) 15:51:51 executing program 4: write$RDMA_USER_CM_CMD_RESOLVE_IP(0xffffffffffffffff, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x2, 0x13012, r1, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x4, 0x0) ioctl$PPPIOCGIDLE(r2, 0x8010743f, &(0x7f00000000c0)) clone(0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) writev(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDIT(0xffffffffffffffff, 0x0, 0x483, &(0x7f0000000180)={0x0, @loopback, 0x4e24, 0x1, 'sed\x00', 0x0, 0x8, 0x6f}, 0x2c) ioctl$EXT4_IOC_GROUP_EXTEND(r1, 0x40086607, 0x0) ioctl$VIDIOC_G_FREQUENCY(0xffffffffffffffff, 0xc02c5638, &(0x7f0000000080)={0x1, 0x2, 0x9}) [ 415.764442][T17030] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 415.781808][T17036] bond0: Releasing backup interface bond_slave_1 15:51:51 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='overlay\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="3a763a2c6e66735f6578706f72743d6f6e2c002b98d60ae4eef5b50000000000"]) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80000000400, 0x0) ioctl$KVM_SET_CLOCK(r0, 0x4030ae7b, &(0x7f0000000180)={0x4, 0x83}) ioctl$sock_rose_SIOCDELRT(r0, 0x890c, &(0x7f00000002c0)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x2, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0='bpq0\x00', 0x4, [@default, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @default]}) getsockname(r0, &(0x7f0000000200)=@isdn, &(0x7f0000000100)=0x80) [ 415.964267][T17039] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 415.976753][T17046] bond0: Releasing backup interface bond_slave_1 [ 416.062066][T17111] overlayfs: unrecognized mount option ":v:" or missing value [ 416.075996][T17111] Unknown ioctl 1076932219 [ 416.082453][T17111] Unknown ioctl 35084 [ 416.093984][T17111] overlayfs: unrecognized mount option ":v:" or missing value [ 416.103270][T17149] Unknown ioctl 1076932219 [ 416.105649][T17157] Unknown ioctl 35084 15:51:51 executing program 1: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000080)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r1, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f0000000100)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) fcntl$lock(r1, 0x27, &(0x7f0000000040)={0x1, 0x9a086c3ced714bda, 0x3, 0xffffffff, r0}) tkill(r0, 0x1004000000016) 15:51:51 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) setsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000080)) ioctl$EVIOCGSND(r0, 0x8040451a, &(0x7f00000001c0)=""/97) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r1, 0x110, 0x3) bind$rxrpc(r1, &(0x7f0000000000)=@in6={0x21, 0x4, 0x2, 0x1c}, 0x24) listen(r1, 0xf66) listen(r1, 0x0) pipe(0x0) tee(0xffffffffffffffff, 0xffffffffffffffff, 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80, 0x0) 15:51:51 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 416.201341][T17047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 416.216071][T17057] bond0: Releasing backup interface bond_slave_1 15:51:51 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x48) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={r3, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r1, 0x5, &(0x7f00000009c0)="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") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r0, 0x1, 0x200000000000000, &(0x7f0000000980)=0x6, 0x4) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r4, r9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0600002000290f000020000000000002007ffe3e3ec19bcf0800", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000016f2c38894165780ff"], 0x10}}, 0x0) 15:51:51 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xd, 0x3, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x2e, 0x27}}, &(0x7f0000000080)='GPL\x00\x83\xff\x13\x0f_\xb0\x0e][dCT\xb6\xe2wp\xc5\xa6$\x1e\x8d\xef\xd6S>*\xe1\x06\xbee\\lRcI!l0\xbb\x1f\x80\xfbE\x0e\xc0\xd5\xbe', 0x1, 0x99, &(0x7f0000000280)=""/153}, 0x48) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.metacopy\x00', &(0x7f0000000100)='\x00', 0x1, 0x2) [ 416.417754][T17061] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 416.433746][T17071] bond0: Releasing backup interface bond_slave_1 15:51:51 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:51 executing program 4: clone(0x3102801ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() msgrcv(0x0, 0x0, 0x0, 0x2, 0x1000) wait4(r0, 0x0, 0x80000002, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) tkill(r0, 0x22) ptrace$setregs(0xffffffffffffffff, r0, 0x0, 0x0) 15:51:51 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) fcntl$setsig(r0, 0xa, 0x21) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r1, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) ioctl$sock_ax25_SIOCADDRT(r2, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) mknodat(r2, &(0x7f0000000180)='./file0\x00', 0xc00, 0x3) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x44, 0x0, &(0x7f0000000080)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0xa, 0x12, &(0x7f0000000140), &(0x7f00000001c0)}}], 0x3f000000, 0x0, &(0x7f0000000300)}) 15:51:51 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 416.645975][T17072] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 416.662383][T17217] bond0: Releasing backup interface bond_slave_1 [ 417.124271][T17275] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 417.133870][T17307] bridge0: port 3(gretap0) entered blocking state [ 417.143873][T17307] bridge0: port 3(gretap0) entered disabled state [ 417.187237][T17307] device gretap0 entered promiscuous mode [ 417.199944][T17307] bridge0: port 3(gretap0) entered blocking state [ 417.207092][T17307] bridge0: port 3(gretap0) entered forwarding state [ 417.242410][T17316] bond0: Releasing backup interface bond_slave_1 15:51:52 executing program 2: r0 = socket$inet(0x10, 0x80003, 0xfff) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f00000000c0)="24000000100a00000080f998d116830020200a0009000100001d85680c1baba20400ff7e280000005304ffffba010000000009b356da5a80d18be34c8546c8243929db2406b20cd37ed01cc0", 0x13}], 0x1}, 0x1) 15:51:52 executing program 4: r0 = socket$inet(0x10, 0x10000000003, 0xc) ioctl$sock_inet_SIOCADDRT(r0, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0xf}}, {0x2, 0x4e23, @rand_addr=0x9}, {0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x40, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000000)='bridge_slave_0\x00', 0x3, 0x6, 0xfffffffffffffffa}) lsetxattr$security_smack_transmute(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000280)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0xffffffffffffffbf, 0xffffffffffffffff) prctl$PR_CAPBSET_DROP(0x18, 0x0) r1 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0x1, 0x2) connect$nfc_llcp(r1, &(0x7f0000000100)={0x27, 0x1, 0x1, 0x7, 0x1000, 0x40, "5b6d4bcf88c19dad24935daff0965e0ab58419db9e015a43fc0d98109cba72efc02db3ff22d96d2a70a600125d9bf8d87bc6b2a599a4a97c1b1e1f68fe06bb", 0x13}, 0x60) 15:51:52 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:52 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 417.406563][T17372] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 417.427169][T17424] bond0: Releasing backup interface bond_slave_1 15:51:52 executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000040)=0x74, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendto$inet(r0, &(0x7f0000000580)="a3", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000640)=ANY=[@ANYBLOB="858a030000000000000057ac008f6f4a34328382df63dd7b58d057d483c391c600c6fa0688a69404b2734e91f3813956096a5fb2bf3f35be7ac08e0cd1d437da199701800000000000000000e89bcbdd527b6d20602febf51a3c8ed0b2e8ebb8fc704b21856fa38356434b0ca7a8836e20dd8181a2610ad4df0000000000000000000038ce7a2d53c8778e0f18d3358dcbf721d17ee438a394598d9469d8490509fa933b0ad5fafb7954d9a87ad8a42b5b507288f2d2d81676d4"], 0xc9) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x40000, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_PORTS(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r2, 0xf11, 0x70bd26, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40081}, 0x8000) sendto$inet(r0, &(0x7f0000000740)="df7a8d1b13fa1153baddf8b7da757b0dc8d96f032e10c79ee7f6ef297406b31e48bd2d9b0c0f5c59953c2ca8d7816b1933c6fefc7e1cd0ea106f78b5fb90a375bff348562274cb76035c2ca44b57861c7571a660ebc2678f2de889c5c9ee352e366fef307cfc9a0392b08a6481a9e1a2b1dfba3bf5a39c67076acb62dbfb2d1f139e03c9ddfcfbb4c4cce9ae78865976141e6161b4df506e34addc1a0714eaf67d26c438d66773a42e4747153e39e858d52c252dacdea8506b0f7d8aedab4a7bebb06f89d717c6a2b0abafe7bd5b0673da5a25c82f1bae0998ee1a295800996a45241983932d0bbd95ef6bedcd0f74cc2689db79fc173f8198451bfca4e73e4781221065b3bcff6f5f787f6ddd2bbf7eef4fd3259b05e87b1011f2fe05cfba5da6b0f822080433409f938df3e89637f86722f21840df1a5f516e40b7f8c5b9a486f3b1eaa1a0106f97e62248ef4fde8cc91f1366a846c3b8d85cc51a95b36c837a8677079da77fbd405598a24eda1e2a8768fc6c649f4bec5f508b6076a0ca59fa2bc9510def6fe7804fa891d36bd2ca9065e9bf51e53a8afee27e86d97050974d94fd5b83e4ded97953f0966d79781bda4fb9ddce04651d4fd14d58c184081ca19b87bd5822eb519ca1635b5e97aef7c25fa17f2bb15679e33d7a756598d40a5700ea7ed6231a7b8246dfb37b37c6136fd60d468b8c4d2762fcabf0b74e0033e69ff2f64ec413d2f1a15ad45d166e8c7103b7708ffc0f7c989eb6c25358feff17471486b00e12830fd0f7e6d027808f3fce4dfe44a9a9e06b4a84d5e4575c4862efd5a5a10fc2221164a3ee3db7c76d92f8207768a557d23eb917ac59147cbd07563b2660ba9a7e95d0139f8f10c0355dea89a618654566b32f7f0da902f967e8b504087cc0f8e0288cf963e2e1bafe20f827486dddd98057f904a32177e191bdd8bb0c331d5c3de72a87cade5f8cc509f4f4e91deb730bc10219ba84a2a8ae8bca8035da6907f7ceda36ce02a326b9fc5bd77d60f589f3bc68033e578cb6c196c5297e7b27651b46cdecf2fcbe0ee928b8629f5e26914f295f60e7c8652e4339340ee3adfe317c6fa912e929a0a7d6600bcd9ed5f6147ee26e2b4780a792593ce18c8f87559fc0274785731d5accd85a3c1043a15e18aa7129f950e66a91c6", 0x340, 0x0, 0x0, 0x0) 15:51:52 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x0, 0x0) add_key$user(&(0x7f0000001400)='user\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffd) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000080)=""/33, 0x200000a1}], 0x1) 15:51:53 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) setsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) ioctl$PPPIOCCONNECT(0xffffffffffffffff, 0x4004743a, 0x0) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, 0x0) mmap(&(0x7f00000be000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8201) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000380)={0x68, 0x0, &(0x7f0000000140)=[@request_death={0x400c630e, 0x2}, @reply={0x40406301, {0x3, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x0, 0x18, &(0x7f0000000080), &(0x7f00000000c0)=[0x0, 0x18, 0x30]}}, @acquire_done={0x40106309, r2}], 0x15, 0x0, &(0x7f0000000340)="7c6eeaa9fc08cf9d631f3d8a34b2b38cb7134715a9"}) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f00000001c0)) 15:51:53 executing program 2: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r0, 0xc0305615, &(0x7f0000000080)={0x0, {0x8000, 0x1}}) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0xa, 0x80003, 0x0, &(0x7f0000000040)) 15:51:53 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf4c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f00000000c0)={@mcast2, 0x81}) sched_setaffinity(0x0, 0x5, &(0x7f0000000580)=0x6) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x10000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x35, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500db44c7451600ffffffff2d020000000000e556b35eb865040400010000000404006f1937867ba5bcbc39e1ffaf87f528c65200e4140000000000000000002636999476ff2ee4c788dcd08a75717412404981777a47c0b139d29e849e20f7dcf9edd06fdae0f700f80348201b17bebd3d05378dbd901b0454b3bbdfcb8fe63dce1205e9b42f4be1609f88bd8a845b67139fd0b13acc5345c957209e0c463aeaf2ac480705000000000000000db0c838e06d9459a650c4a6ecdc1b880ef0d0cb3320c06012da6c53a5120bacdea27fc87a5bb7b315fab2c6351266ff9524375058922b4763303edfa5dbceb011748b92fb932a4d66dfe2f605a0df9fc39c0df251e7ee7e5827fd1a8341444edbae9e772bef3d10ef16b893b31f270ff9abb60f724686df36c99997264ee9f80aec3e9d19532767c306ed63d8fc22d36306c1def8aec580669c3801d641be449079470a980e731d1b7340c332c1128732e88142de25d45a9cf8969a0538fc250ee949222f1202beddbaac38a6db36d0f88c5a06b8aebaa02bc17d0a25c6363e93fb77449ede19b471e3250f7ca213691d389966c4bed1f3d1000000"], 0x0}, 0x48) r2 = dup2(r1, r0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffff9c, 0x84, 0x9, &(0x7f0000000780)={0x0, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x7}}, 0x5, 0x8, 0x9, 0x3, 0x40}, &(0x7f0000000280)=0x98) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000380)={r3, 0x1f}, &(0x7f0000000900)=0x8) ioctl(r1, 0x5, &(0x7f00000009c0)="153f4000557660b70f696b2547fde82d8d2285cd204016f3fd0200000000000000967112d966b3668f805c9b6a4f2ca40691e84d06c3ea03220d5888c7d03846ee22ff80edbed425d7de639c5b0607e5ff1061528c63000c530c45a6004fdfac6ce449d564a19091b390eed8171f34010cc277fc06296ed6c39cfce952ce6de04dd8c07356611675539fb49b43871f1f5c1efc74f49f2af7ff25e6cb9e5701d943e27dbd6accf93e70035846ab5b0275ea38d1f3ccfc60761aa1008eeea51d81332d5f71c871e0979e9c44e3ead50eaca37feba7618809f1725ce939a5c05d6c0807acc6bd1c10dfb8b56255e96b1da26813593c19da7fbf219304411063b9dc7fa034dbc38bc4e5a94d3029712ff5") socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = socket(0xa, 0x3, 0x8) r7 = syz_open_dev$amidi(&(0x7f0000000340)='/dev/amidi#\x00', 0x9c4, 0x70000) ioctl$TIOCGSID(r7, 0x5429, &(0x7f0000000400)=0x0) ioctl$sock_FIOSETOWN(r5, 0x8901, &(0x7f0000000440)=r8) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89a2, &(0x7f0000000180)={'bridge0\x00\x00\x01\x00', 0x4}) setsockopt$sock_int(r0, 0x1, 0x200000000000000, &(0x7f0000000980)=0x6, 0x4) ioctl$RTC_WKALM_RD(r7, 0x80287010, &(0x7f00000002c0)) setsockopt$IP_VS_SO_SET_DELDEST(r6, 0x0, 0x488, &(0x7f0000000080)={{0x69, @remote, 0x4e24, 0x200000000, 'lblcr\x00', 0x1e, 0x0, 0x13}, {@remote, 0x4e21, 0x7, 0xffff, 0x7f, 0x2}}, 0x44) r9 = memfd_create(&(0x7f0000000140)='+\x8b\x8a\x16\x11O\xdd\xdfk(F\x99\xdf\x92\xd5>oJ\x02\x05\x00\x00\x00\xac', 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000840)=ANY=[@ANYBLOB="6d6177676c6500000000000000000000002a00c887c3ef98f91534d2cae600000000000000000000000000000002000000000000000000000075f66ca1e1ffffffffffffff000000001e0000000000002dc9003ae3bf04d5843c74fcde34591d9936607fe6ad42bbda5784f6d0f424ca43a1d67ff800f3a59f24753be8dbff3fdfd1340a96d81f57929700000000"], 0x1) close(0xffffffffffffffff) dup3(r4, r9, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r7, &(0x7f0000000080)={0x0, 0x3bd, 0xfa00, {0x0, &(0x7f0000000040)}}, 0x20) mount(&(0x7f0000000240)=@nbd={'/dev/nbd', 0x0}, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000500)='devtmpfs\x00', 0x11000, &(0x7f0000000540)='lblcr\x00') perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$key(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x1de}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c0600002000290f000020000000000002007ffe3e3ec19bcf0800", @ANYRES32=0x0, @ANYRES32=0x0], 0x3}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="0000000000000016f2c38894165780ff"], 0x10}}, 0x0) 15:51:53 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 417.704279][T17425] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 417.723511][T17436] bond0: Releasing backup interface bond_slave_1 15:51:53 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000280)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @mcast2}}}, 0x108) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x319402, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000500)={0x1, {{0xa, 0x0, 0x0, @mcast1}}}, 0x90) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000040)={'veth1_to_team\x00', 0x600}) 15:51:53 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = gettid() r1 = syz_open_dev$video(&(0x7f0000000040)='/dev/video#\x00', 0x6, 0x20000) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100)) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) r2 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_VSOCK_SET_GUEST_CID(r2, 0x4008af60, &(0x7f00000000c0)={@my=0x0}) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_dgram(r3, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x0}, 0x10) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r0, 0x1004000000016) [ 418.316591][T17462] bond0: Releasing backup interface bond_slave_1 15:51:53 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000040)='/dev/hwrng\x00', 0x40000, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000180)={&(0x7f0000000000)='./file0\x00', r1}, 0x10) symlink(0x0, &(0x7f0000000640)='./file0\x00') r2 = syz_open_dev$amidi(&(0x7f0000000200)='/dev/amidi#\x00', 0xfffffffffffffff7, 0x400480) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000b80)={0x0, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x0, 0x0, 0x68, 0x9, 0x8}, &(0x7f0000000c40)=0x98) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000d40)=@sack_info={0x0, 0x6e14, 0xffffffffffffe215}, &(0x7f0000000d80)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000c80)={r3, @in={{0x2, 0x4e24, @rand_addr=0x9}}, 0x2, 0x4}, &(0x7f0000000b40)=0x90) ioctl$IMHOLD_L1(r2, 0x80044948, &(0x7f0000000240)=0x5cf) r4 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) ioctl$KDSKBSENT(r4, 0x4b49, &(0x7f00000003c0)="20d60bef4898686d679e3e516242ef59905c35894c7562825858a2d59561399aea03f04a6affe4fe9d98f23c4fc62d") perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000280)='/dev/audio\x00', 0x802, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000a40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], 0x1}, 0x1, 0x0, 0x0, 0x24008885}, 0x24000040) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffc}, 0x0) close(r0) r5 = gettid() getpgid(r5) r6 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r6, 0xc0145401, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x76, 0x3, 0x7f}) r7 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r6, &(0x7f0000000400)="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", 0x200) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000002c0), &(0x7f0000000300)=0x4) sendfile(r6, r7, 0x0, 0x10000) syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) [ 418.446333][T17543] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 418.456667][T17544] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:53 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:53 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 418.489192][T17604] bond0: Releasing backup interface bond_slave_1 [ 418.589972][ T26] audit: type=1800 audit(1552233113.886:209): pid=17782 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17143 res=0 [ 418.635963][ T26] audit: type=1804 audit(1552233113.916:210): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir002399229/syzkaller.ZE3J2A/296/file0" dev="sda1" ino=17143 res=1 [ 418.678650][ T26] audit: type=1800 audit(1552233113.916:211): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17143 res=0 [ 418.732437][ T26] audit: type=1804 audit(1552233114.006:212): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir002399229/syzkaller.ZE3J2A/296/file0" dev="sda1" ino=17143 res=1 [ 418.760282][ T26] audit: type=1800 audit(1552233114.006:213): pid=17787 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="file0" dev="sda1" ino=17143 res=0 15:51:54 executing program 1: r0 = memfd_create(&(0x7f0000000040)='\x02@\x94\xb8\x03P\xcaC\x8a\xf9\x16.H\x80\'\x95\x94\x165\x8f\x18H\xdc\xc9\x98M\xf9\x8d\xcdmp\xf8h\x8fZV\x16\x83\xf1\xa6-c\xcbQ#\'O\xb9\xbb\xe5\xf3P\xf1\x81\xf7\na\v:\xca\xdc\xe9yb\xb9\xc7p\x92\x8b\xe9\xfdEWW\xad\xd50\xd27\x13\xc1\x7fXo\xf3\x92\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x0) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, &(0x7f00000000c0)) write$binfmt_elf32(r0, &(0x7f0000000300)=ANY=[@ANYBLOB="7f454c0003000600000000000000000038040000000000000000080000002000020000f8ffffff00000000000000000000000000000000000000000000008000000023000000006847000000030000000000eaffffff00000000000000010000000000000000000000000000000000000000000000000000"], 0x78) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0x0, &(0x7f0000000140)="08c954c466ed24de1808e5769292dc4231d94bf61ad3ffd9f251579ba2dc3bb22eddd1dfc446405f499cd91ecc3b9cc4f14ede7d715a39999d8d4999a5bfcdec2f6ec49b602d31c3f3f9c39a0bdd0baf77459974d61a846c3fd6014e63251a3eb5b832c9b78edfe36291bdd78f735ea02b629b8a416e473adc5e775bc6764b15997a9e83000cfb061011d97a9425", 0x8e) execveat(r0, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 15:51:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 418.782298][T17662] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 418.814457][T17786] bond0: Releasing backup interface bond_slave_1 15:51:54 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = request_key(&(0x7f0000000180)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)='\x00\x00', 0xfffffffffffffff8) keyctl$restrict_keyring(0x1d, r1, &(0x7f0000000140)='syzkaller\x00', &(0x7f0000000280)='-cgroup\x00') r2 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x880, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000200)={0x7ff, 0x9, 0x0, 0x5}, 0xfffffffffffffec0) ioctl(r2, 0xefefecf7bfff7fad, 0x0) 15:51:54 executing program 1: setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000c80)=ANY=[@ANYBLOB="95010000000000000a004e2000000004fe8000000000000000000000000000bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000004"], 0x1) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x2, 0x0) write$sndseq(r0, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, @tick, {}, {}, @quote}], 0xff33) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) 15:51:54 executing program 1: sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000980), 0x1000000000000091, 0x0, 0xae2ecc4d7dd3bf6a}, 0x0) r0 = syz_open_dev$cec(&(0x7f0000000d00)='/dev/cec#\x00', 0x2, 0x2) write$selinux_attr(r0, &(0x7f0000000d40)='system_u:object_r:devicekit_power_exec_t:s0\x00', 0x2c) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'bpq0\x00', 0x21}) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) getsockname(r1, &(0x7f0000000c80)=@tipc=@id, &(0x7f0000000800)=0x80) r2 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x140, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r3, &(0x7f0000000040)=""/46, 0x2e) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGABS0(r3, 0x80184540, &(0x7f0000000180)=""/142) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f1, &(0x7f0000000080)='ip6tnl0\x00') r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0)}}, 0x20) recvmmsg(r5, &(0x7f0000002100)=[{{0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=""/51, 0x33}, {&(0x7f0000000240)=""/224, 0xe0}, {&(0x7f0000000340)=""/253, 0xfd}, {&(0x7f0000000440)=""/51, 0x33}, {&(0x7f0000000480)=""/93, 0x5d}, {&(0x7f0000000500)=""/18, 0x12}, {&(0x7f0000000540)}, {&(0x7f0000000580)=""/112, 0x70}], 0x8, &(0x7f0000000680)=""/48, 0x30}, 0x8}, {{0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000006c0)=""/91, 0x5b}, {&(0x7f0000000780)=""/102, 0x66}, {&(0x7f0000000800)}], 0x3}, 0xffff}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f0000000880)=""/24, 0x18}, {&(0x7f00000008c0)=""/91, 0x5b}], 0x2}, 0x9579}, {{&(0x7f0000000980)=@rc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000a00)=""/23, 0x17}, {&(0x7f0000000a40)=""/211, 0xd3}], 0x2, &(0x7f0000000b80)=""/102, 0x66}, 0x8}, {{&(0x7f0000000c00)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000001e40)=""/27, 0x1b}, 0x80000001}, {{0x0, 0x0, &(0x7f0000002080)=[{&(0x7f0000001e80)=""/33, 0x21}, {&(0x7f0000001ec0)=""/207, 0xcf}, {&(0x7f0000001fc0)=""/30, 0x1e}, {&(0x7f0000002000)=""/117, 0x75}], 0x4, &(0x7f00000020c0)=""/18, 0x12}, 0x200}], 0x6, 0x2000, &(0x7f0000002280)={0x0, 0x1c9c380}) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000dc0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000f00)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x41000008}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e00)={0x9c, r6, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'team_slave_0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6_vti0\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vxcan1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x38, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'fo\x00'}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x28}}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x4000}, 0x48000) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x21, &(0x7f0000000540)="fb52c3b78f9862e93fd781b6872e46ba", 0x10) 15:51:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 419.154723][T17790] bond0: Releasing backup interface bond_slave_1 15:51:54 executing program 4: prctl$PR_SET_FPEXC(0xc, 0x10003) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfffffffffffffffa, 0x2100) write$FUSE_NOTIFY_INVAL_ENTRY(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="26000000030000000000000000000000052000000094b00a4852450000007369743000000000"], 0x26) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r2 = socket(0x10, 0x3, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000180)={@dev, 0x0}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x286}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="640000002500000027bd7000fddbdf2500000000", @ANYRES32=r3, @ANYBLOB="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"], 0x3}, 0x1, 0x0, 0x0, 0x80}, 0x40000) ioctl$SIOCGETLINKNAME(r2, 0x89e0, &(0x7f00000000c0)={0x4, 0x2}) ioctl$sock_ifreq(r2, 0x100000089f2, &(0x7f0000000080)={'sit0\x00', @ifru_data=0x0}) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000300)={@remote, 0x9, r3}) 15:51:54 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 419.291200][T17791] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 419.301359][T17801] bond0: Releasing backup interface bond_slave_1 [ 419.502001][T17805] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:54 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:54 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1e0001ac1414aa0000000003000000ac1414140002000000f0e0004b15f000000000000000002df3cff574be"], 0x1) symlink(0x0, 0x0) r1 = syz_open_dev$amidi(0x0, 0x0, 0x400480) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000940)={0x0, @in={{0x2, 0x4e20, @broadcast}}, 0x4, 0x1}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000880)={r2, @in6={{0xa, 0x4e24, 0x9, @local, 0x100000001}}, 0x2, 0x5}, &(0x7f0000000240)=0x90) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000740)={0x6, 0x0, [{0x1f, 0x0, 0x0, 0x0, @adapter={0x9, 0x9, 0x400, 0x3, 0xff}}, {0x5d, 0x2, 0x0, 0x0, @msi={0x4, 0x80000000, 0x7f}}, {0x1000, 0x3, 0x0, 0x0, @sint={0x7, 0x3}}, {0x400, 0x7, 0x0, 0x0, @sint={0xba73, 0x3}}, {0x7fff, 0x2, 0x0, 0x0, @adapter={0x3, 0x200, 0x401, 0x80000000000, 0x8}}, {0xda, 0x1, 0x0, 0x0, @sint={0x8001, 0x3}}]}) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) fchdir(r3) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f00000003c0)="20d60bef4898686d679e3e516242ef59905c35894c7562825858a2d59561399aea03f04a6affe4fe9d98") ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) gettid() getpgid(0x0) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) r5 = open$dir(&(0x7f0000000600)='./file0\x00', 0x4000, 0x0) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) 15:51:54 executing program 1: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0xa000, 0x0) ioctl$TIOCMGET(r0, 0x5415, &(0x7f0000000080)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x0, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x80044dfc, &(0x7f0000000100)) 15:51:54 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 419.592960][T17825] bond0: Releasing backup interface bond_slave_1 [ 419.654943][ C1] net_ratelimit: 20 callbacks suppressed [ 419.654951][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.666530][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:55 executing program 1: syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') openat$proc_capi20(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20\x00', 0x10000, 0x0) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, 0x0, 0x0) r0 = creat(0x0, 0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e20, @empty}, {0x306, @broadcast}, 0x20, {0x2, 0x4e22, @local}, 'team_slave_1\x00'}) ioctl$sock_inet_SIOCGARP(r0, 0x8954, &(0x7f0000000300)={{0x2, 0x4e23, @loopback}, {0x307, @dev={[], 0x12}}, 0x20, {0x2, 0x4e20, @rand_addr=0xbd49}, 'nr0\x00'}) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000140)={0x0, 0x100, 0x400, 0x5}, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) getsockopt$inet_udp_int(r2, 0x11, 0xb, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r3, 0x8955, &(0x7f0000000180)={{}, {0x20000000304, @link_local}, 0x4, {0x2, 0x0, @local}, '\x00\x00\x00\x00\x01\x00\x00\x01\x00'}) [ 419.815318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 419.822386][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:55 executing program 2: r0 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x90, 0x4000) ioctl$VIDIOC_S_SELECTION(r0, 0xc040565f, &(0x7f0000000000)={0xc}) [ 419.917952][T17853] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 419.931215][T17933] bond0: Releasing backup interface bond_slave_1 15:51:55 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:55 executing program 2: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x80, 0x0) pipe2$9p(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000000)={0x7, 0x3, 0x7fff}) fcntl$setpipe(r1, 0x407, 0x80008) splice(r0, 0x0, r1, 0x0, 0x55aa40ba, 0x0) 15:51:55 executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0x0, 0x0, 0x0, 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) rseq(&(0x7f0000000440), 0x20, 0x0, 0x0) seccomp(0x1, 0x2, &(0x7f0000007ff0)={0x1, &(0x7f0000004fe8)=[{0x6, 0x0, 0x0, 0x50000}]}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, 0x0) openat$nullb(0xffffffffffffff9c, 0x0, 0x608002, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000001c0), 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) [ 420.313565][ T26] audit: type=1326 audit(1552233115.596:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 [ 420.411078][ T26] audit: type=1326 audit(1552233115.636:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=202 compat=0 ip=0x457f29 code=0x50000 [ 420.456636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.462824][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.479456][ T26] audit: type=1326 audit(1552233115.646:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x50000 [ 420.503855][ T26] audit: type=1326 audit(1552233115.656:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x457d97 code=0x50000 [ 420.532610][ T26] audit: type=1326 audit(1552233115.656:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=18064 comm="syz-executor.2" exe="/root/syz-executor.2" sig=0 arch=c000003e syscall=16 compat=0 ip=0x457d97 code=0x50000 15:51:55 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) r2 = mmap$binder(&(0x7f0000013000/0x1000)=nil, 0x1000, 0x1, 0x10, r1, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000100)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000140)={0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x6c, 0x0, &(0x7f0000000180)=[@reply={0x40406301, {0x1, 0x0, 0x4, 0x0, 0x11, 0x0, 0x0, 0x38, 0x20, &(0x7f0000000080)=[@fda={0x66646185, 0x7, 0x4, 0x9}, @flat={0x73682a85, 0x100, r2, 0x3}], &(0x7f00000000c0)=[0x38, 0x48, 0x78, 0x78]}}, @acquire_done={0x40106309, r3, 0x1}, @increfs_done={0x40106308, r4, 0x1}], 0xd6, 0x0, &(0x7f0000000200)="143ac1bac813b7b79c9f2593314ffedd64e20a958243fe660277a208aeecd8cce68bebe61849e08a758e9064ad515bef56bf3860049f7565953868baf99b1bd9129e04c346a15394044ba815cbd020535a02a36e1daf8c93536e63d0e7d73b3335df13515687d2c6f4734ed798f3b53faeeb575fb08919f6e3530c0c5680cfa404e6ca7213db5d50831ddd8097e55a07a2d7975900bc0210d1eced41fa8093b45bade96da176faa8884f7af2026af45bf95d0be5d2a9a089e71d4b9cdc353993aa9077ef170fefdeb48c67280a57077484ffbaf01d97"}) mmap(&(0x7f0000012000/0x2000)=nil, 0x2000, 0x0, 0x4020011, r1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) umount2(&(0x7f0000000480)='./file0\x00', 0x7) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000007000)={0x4c, 0x0, &(0x7f0000000380)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x1}}], 0x0, 0x0, 0x0}) r6 = syz_open_dev$usb(&(0x7f0000000400)='/dev/bus/usb/00#/00#\x00', 0x7, 0x4240) ioctl$KVM_GET_CLOCK(r6, 0x8030ae7c, &(0x7f0000000440)) 15:51:55 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 420.563339][T17941] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:55 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:55 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000140)={0x8}, 0x10) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f0000000180)={0x3, 0xffffffffffffff81, 0x1, 'queue0\x00', 0x7}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="08000293c84207abd879962031d791cabfc2247ee2"], 0x1}}, 0x0) [ 420.615486][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.622706][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 420.636538][T18055] bond0: Releasing backup interface bond_slave_1 [ 420.694962][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 420.700794][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:51:56 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmmsg(0xffffffffffffffff, &(0x7f0000002000)=[{{&(0x7f0000000740)=@in, 0x80, 0x0}}], 0x40001c0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='net/arp\x00\x86\xa0\x13VD\x14rt\xb5l\xb7\xacma\xb2,\xa0\xe4\x7f7u\x10\xdb\xe8\x10\xcb=Y\x19\x9b\x0fH]\xab\xce\xd9\x13\xf6\xeb\xc8\xda\xdd5\xd8MI9\x95\xb4\xd8h&\x16y\\\xe3\xc7\v\xac8\xc0?]\xf7~\xa4\xc6\xa80x0) request_key(&(0x7f0000000080)='pkcs7_test\x00', &(0x7f0000000340)={'syz'}, 0x0, 0xfffffffffffffffe) syz_execute_func(&(0x7f0000000000)="3642926433ef93f6c89c7bd667f2440f34a2ebf717c4dc7518ffc4e24d3ef9d6722b691f1f63ad489e66460fd9cc000000615167660fda9803000000aec4817911350e000000fdc422c5aa717ae5db6726660fdd6244a77e") timer_delete(r1) 15:51:56 executing program 4: clone(0x206, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x0, 0x109000) sendto$inet6(r0, &(0x7f0000000100)="747f5261f796ca12033ac5570b918063cb53f6f90422ac888d07515343c1184b667f2dec16bab0f7ee", 0x29, 0x4040000, 0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x4000) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0xc09, 0xb}) mknod(&(0x7f0000000200)='./file0\x00', 0x1041, 0x0) execve(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) clone(0x200002102001ffb, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000140)=ANY=[@ANYBLOB="0200b100bb48e83ca50101000000000000af4d67b129cef6a7ac0bd8529b9ff88c1522ca90e22e73f8183fb482838f8eeedb8b27ac5d2bedda2b4791a1fbe1c35b27900ba70c2c2cfc846742fda28fbafa4482b4846e177ab39051295549472896e1ee689eb54cfc555a2f63908fd6eaf67dfc9e1fc1efe79457f245e63e5ea8ae35c5ce6694c8e3afa2fadc937f73cb8822a38807840c16661d0b080566a5244df3d7d0ca9fd4e8484ba973c1c9"]) perf_event_open(&(0x7f0000000300)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x2088}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000240)='/proc/self/attr/exec\x00', 0x2, 0x0) write$FUSE_NOTIFY_POLL(r0, &(0x7f0000000280)={0x18, 0x1, 0x0, {0x4}}, 0x18) 15:51:56 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 420.902535][T18057] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:51:56 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 420.985982][T18090] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 421.015202][T18134] bond0: Releasing backup interface bond_slave_1 15:51:56 executing program 4: ioctl$VIDIOC_ENCODER_CMD(0xffffffffffffffff, 0xc028564d, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r0, 0x80045400, 0x0) ioctl$KDSKBSENT(0xffffffffffffffff, 0x4b49, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000280)='IPVS\x00') r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) clone(0x2102001ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) sendmsg$rds(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="5800009712813c930000000000140100000600000000000000000000008fd6e2df04c79d474c2ad6e0000000000000a35e8bcde7ed00eb59de410f24fbb16b7dcd34504b2384ac9223e6547766290fc107bfaf8176acf23b04b6167a4b950aaee63ac9e8879b4fe13a5511e1d44632c9df0df0e9903f360f4cb9576b01507dd1d06a8a32584b082f915d8e007b", @ANYPTR=&(0x7f0000000e80)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00006e6852e4c2968826dbde3b250000000000000000000000000000000000000000000000b951687b30f9f5f0f4a680fa1f000000000000000000000000000000000000"], 0x58}, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$TIOCNXCL(r2, 0x540d) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000280)='/dev/midi#\x00', 0x1, 0x40100) 15:51:56 executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@can, &(0x7f0000000180)=0x80, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f00000001c0)=0x5) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x0, 0x0) preadv(r1, &(0x7f0000000300)=[{&(0x7f0000000040)=""/180, 0xb4}], 0x1, 0x0) 15:51:56 executing program 4: socket(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x101000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x3) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x6, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000100)=0xd) write$FUSE_POLL(r1, &(0x7f0000000000)={0x18}, 0x18) read(r1, &(0x7f0000000140)=""/173, 0xad) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000000300)={0x8000001, 'erspan0\x00\x00\x00\x00\x00\x00\x06\x00'}, 0x34e) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffff9c, 0xc0184900, &(0x7f00000006c0)={0x0, 0x2b, 0x0, 0xffffffffffffff9c}) fcntl$getownex(0xffffffffffffffff, 0x10, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r4 = syz_open_procfs(0x0, &(0x7f00000009c0)='\x00\x00\t\x00\x01\x00\x00\x80\x14\xff\xff\xff\xa3\xa95\xd0?:\x1b%{\x89\a\x9f\x94\x1e\xd5< ^~W\xa3,h\x937\xa8**y\xcd\x7f(\x1a\xd1\x17\xb5!}v\xd4N\xab\xbb\xa4\x04\xf6\xe4\xef\'\xbc%8\xf2eCq\xafny\xb0\xa4\x8e\x8a\x8ed\te\xf0c7wG\x10\xd6\x9b\xda\xd2f\xd4Z^\x95S\xc3\xa7Uw{,\xa7\xcf\xc4\xbc\x1f\xfcj\x8a\\L0(kE\x11\t\xfa}*\xfb\xb7I\\F\xcb\xbb)C\xe3N7\x85\x96\xdd\x84\x11\x1fv\xe4\x90\xfa\xf9\xfd\xc0w\xd7\xb9`a\xd7\\K\v\xf0]\xaa$\x9b\xfb\xc97\x14\xfa\xb3\x19\x17\xc7K7\xdb\x8c:0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 421.602423][T18187] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 421.621277][T18199] bond0: Releasing backup interface bond_slave_1 15:51:57 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x5, 0x0) shmctl$IPC_STAT(0x0, 0x2, 0x0) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000aa46000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9d0000000000000000ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff"]) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0x1, 0x8) setxattr$security_smack_entry(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000180)='/dev/audio#\x00', 0x2fb, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) 15:51:57 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000004, &(0x7f0000000080)={0xa, 0x100000004e22, 0x0, @loopback}, 0x1c) r2 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x80000001, 0x10000) r3 = gettid() mq_notify(r2, &(0x7f0000000040)={0x0, 0x33, 0x1, @tid=r3}) 15:51:57 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 422.042957][T18239] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 422.053029][T18240] bond0: Releasing backup interface bond_slave_1 15:51:57 executing program 1: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r0, 0x8915, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e23, @remote}}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) write$P9_RXATTRWALK(r0, &(0x7f00000003c0)={0xf}, 0xf) 15:51:57 executing program 4: r0 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl(r0, 0x40084146, &(0x7f0000000000)) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000000)={0x0, r0, 0x67b, 0xffffffffffffffc1, 0xffffffffffffff81, 0x6}) 15:51:57 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:57 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 422.176975][T18304] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 422.195728][T18619] bond0: Releasing backup interface bond_slave_1 15:51:57 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x44000) io_setup(0x100002000000105, &(0x7f0000000200)=0x0) r3 = open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) sysfs$3(0x3) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x200000f, 0x11, r3, 0x0) truncate(&(0x7f0000000180)='./bus\x00', 0x800005) recvmmsg(0xffffffffffffffff, &(0x7f0000004300)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) 15:51:57 executing program 1: syz_open_dev$dri(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000200)='/dev/loop#\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) accept4$rose(0xffffffffffffffff, 0x0, &(0x7f00000004c0), 0x800) keyctl$dh_compute(0x17, 0x0, 0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) setsockopt$inet6_MRT6_ADD_MIF(0xffffffffffffffff, 0x29, 0xca, &(0x7f0000000440)={0x0, 0x0, 0x1, 0x2}, 0xc) getsockopt$bt_BT_RCVMTU(0xffffffffffffffff, 0x112, 0xd, 0x0, 0x0) write$P9_RSYMLINK(0xffffffffffffffff, &(0x7f0000000380)={0x14}, 0x14) sysinfo(&(0x7f00000007c0)=""/154) prctl$PR_GET_SECUREBITS(0x1b) r2 = add_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x1}, &(0x7f0000000240)="0f5cf5df952374ba9a2bf8d12029ce04d2f4023c59bf96e8e93f0840721a281fa33f90659b12ae02cad275081d441cc045f5e1e438a987c8ae8bb8daeb79f3e02f49d0f940b44f302fd5d6ebec69c8377725c005011a980e07c71290dc8251aa044e9b71aadb3ce9348c537f846e7621ce45b2b411144b3bdc43208e434f2365ccd9016060b8a494d4278c3afc773b73a8549f340a5cf4ab2740845def89587e29ccc10096", 0xa5, 0xffffffffffffffff) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x2}, &(0x7f0000000080)="6695", 0x2, r2) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) getsockname$packet(r3, &(0x7f00000001c0)={0x11, 0x0, 0x0}, &(0x7f0000000300)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000340)={r4, 0x1, 0x6, @local}, 0x10) ioctl$BLKPG(r0, 0x1269, &(0x7f00000006c0)={0x3, 0x0, 0x0, &(0x7f0000000800)}) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x8) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x10, 0xffffffffffffffff, 0x0) gettid() 15:51:57 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r2 = memfd_create(&(0x7f0000000000)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) fsetxattr$security_evm(r2, &(0x7f0000000040)='security.evm\x00', &(0x7f0000000100)=@v2={0x3, 0x2, 0x9, 0x98d, 0x9b, "472af6c6eef390493fae5100add21b150a30114e0de513054197f8627bc3f8e0ea751ec0dacf81d6e3b5224115fab16798a78403658f86577db9e440b729a2a50507c4061b1002cb762a8e7b9e5fe7ec5e3373b71a0c7e82c19b29ae0be41b55c6ea4536b3fab58fbee951baf634bc55ee369174de3d7cfc2031087213b1dfbb9e6f0d43b9ea66dcd22632910356a362e1316ea8294ce8dd8ee32b"}, 0xa5, 0x3) fallocate(r0, 0xc, 0x1, 0x7fffffff) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x1526, 0x7, 0x2, 0x87, 0x20}, &(0x7f0000000280)=0x98) setsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000002c0)=@assoc_value={r4, 0x7}, 0x8) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000080)='S'}], 0x1, 0x4081001) fallocate(r1, 0x11, 0x0, 0x100000001) 15:51:57 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x50, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)=r1, 0x4) socket$packet(0x11, 0x3, 0x300) syz_emit_ethernet(0x4e, &(0x7f0000000200)={@local, @broadcast, [{[], {0x8100, 0xc8800, 0x1f, 0x3}}], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x2c, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x140]}, @local, {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) [ 422.596391][T18621] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 422.614388][T18739] bond0: Releasing backup interface bond_slave_1 15:51:57 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:51:58 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 423.077430][T18839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 423.103492][T18846] bond0: Releasing backup interface bond_slave_1 15:51:58 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x0, 0x0) socketpair$unix(0x1, 0xffffffffffffffff, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$VIDIOC_G_AUDOUT(r0, 0x80345631, &(0x7f00000003c0)) ioctl$KVM_GET_MSR_INDEX_LIST(r0, 0xc004ae02, &(0x7f00000001c0)={0x4, [0x0, 0x0, 0x0, 0x0]}) ioctl$PPPOEIOCSFWD(r0, 0xc0044dff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @empty, 'bridge_slave_0\x00'}}) accept4$unix(r1, &(0x7f0000000000)=@abs, &(0x7f0000000140)=0x6e, 0x80000) [ 423.242414][T18851] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 423.256511][T18967] bond0: Releasing backup interface bond_slave_1 [ 423.443960][T18969] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 423.453363][T18977] bond0: Releasing backup interface bond_slave_1 [ 423.683279][T18978] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 424.055086][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 424.063693][ T12] Bluetooth: hci0: command tx timeout [ 424.774935][ C1] net_ratelimit: 20 callbacks suppressed [ 424.774941][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.786368][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:00 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 15:52:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:00 executing program 4: r0 = socket$inet(0x10, 0x3, 0xc) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="24000000100a07031dff22946fa283005f200a0009000300001d85687f0000000400ff7e", 0x24}], 0x1}, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x82880, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xfffffffffffffffa, 0x30}, &(0x7f0000000140)=0xc) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={r2, @in={{0x2, 0x4e20, @multicast1}}}, &(0x7f0000000240)=0x84) 15:52:00 executing program 1: r0 = syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0xd, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket(0x10, 0x803, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r2, 0x29, 0x41, 0x0, 0x0) setxattr$trusted_overlay_redirect(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) sendto(r2, &(0x7f0000000000)="120000001600e70d017b00000000000000a1", 0x12, 0x0, 0x0, 0x0) readv(r2, &(0x7f0000000040)=[{&(0x7f00000002c0)=""/188, 0xffffff9a}], 0x1000000000000299) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$EVIOCGMASK(r0, 0x40084504, 0x0) 15:52:00 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 424.854976][ T12] Bluetooth: hci1: command 0xfc11 tx timeout [ 424.855015][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 424.868824][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 424.868873][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 424.938846][T19098] bond0: Releasing backup interface bond_slave_1 15:52:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 425.254965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 425.261000][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 425.750168][T19095] bond0: Releasing backup interface bond_slave_1 [ 425.876514][T19106] bond0: Releasing backup interface bond_slave_1 [ 425.895049][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 425.900885][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 426.008125][T19188] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 426.020322][T19189] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 426.032506][T19203] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 426.053877][T19208] bond0: Releasing backup interface bond_slave_1 [ 426.064966][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 426.070894][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:01 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:02 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 427.015040][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 427.015193][ T5] Bluetooth: hci0: command 0xfc11 tx timeout 15:52:02 executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) syz_mount_image$msdos(&(0x7f0000000500)='msdos\x00', &(0x7f0000000340)='./file0\x00', 0xe800, 0x1, &(0x7f0000000540)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000000400)='/dev/amidi#\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(0x0, &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f00000001c0)='y\x00', 0x2, 0x2) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, 0x0) r0 = open(&(0x7f0000000800)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x124) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, 0x0) fchdir(r0) openat$audio(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = open(&(0x7f0000000200)='./bus\x00', 0x141042, 0x0) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f00000004c0), 0xc4) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) sendmmsg(r2, 0x0, 0x0, 0x24040881) write$UHID_INPUT(r2, &(0x7f00000019c0)={0x8, "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", 0xfffffffffffffe36}, 0x1006) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setfsgid(0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000580)={{{@in6=@empty, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@empty}}, &(0x7f00000002c0)=0xe8) mount$9p_xen(&(0x7f0000000100)='y\x00', &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='9p\x00', 0x80, &(0x7f0000000680)={'trans=xen,', {[{@cachetag={'cachetag', 0x3d, 'trusted.overlay.opaque\x00'}}, {@loose='loose'}, {@cache_fscache='cache=fscache'}, {@access_client='access=client'}, {@noextend='noextend'}, {@fscache='fscache'}, {@cache_fscache='cache=fscache'}], [{@audit='audit'}, {@rootcontext={'rootcontext', 0x3d, 'staff_u'}}, {@subj_role={'subj_role', 0x3d, 'user}GPL{vmnet0#'}}, {@fsuuid={'fsuuid', 0x3d, {[0x0, 0x61, 0x75, 0x77, 0x66, 0x71, 0x3d, 0x39], 0x2d, [0x34, 0x0, 0x35, 0x72], 0x2d, [0x36, 0x37, 0x77, 0x30], 0x2d, [0x0, 0x7f, 0x0, 0x38], 0x2d, [0x64, 0x35, 0x63, 0x3f, 0x62, 0x64, 0x73, 0x63]}}}, {@hash='hash'}, {@subj_user={'subj_user'}}, {@uid_eq={'uid', 0x3d, r3}}, {@smackfsroot={'smackfsroot', 0x3d, 'y\x00'}}, {@obj_user={'obj_user', 0x3d, 'cgroupem0cpuset-wlan0,,vmnet0'}}]}}) sendmsg$TIPC_NL_NET_GET(r2, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10) sendfile(r2, r2, &(0x7f00000000c0), 0x8080fffffffe) [ 427.161611][ T8256] Bluetooth: hci0: Frame reassembly failed (-84) [ 427.195783][T19319] bond0: Releasing backup interface bond_slave_1 15:52:02 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 427.361514][T19335] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 427.371983][T19335] FAT-fs (loop1): Filesystem has been set read-only [ 427.380525][T19335] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000020) 15:52:02 executing program 1: r0 = shmget$private(0x0, 0xf000, 0x0, &(0x7f0000000000/0xf000)=nil) shmat(r0, &(0x7f0000001000/0x1000)=nil, 0x6000) prctl$PR_SET_MM(0x23, 0xf, &(0x7f000000c000/0x2000)=nil) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000008000/0x2000)=nil) madvise(&(0x7f000000e000/0x3000)=nil, 0x3000, 0x9) [ 427.415617][T19443] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000ff0) [ 427.423811][T19443] FAT-fs (loop1): error, fat_get_cluster: invalid cluster chain (i_pos 16) [ 427.435467][T19321] bond0: Releasing backup interface bond_slave_1 15:52:02 executing program 1: r0 = socket$inet(0x10, 0x3, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x84000, 0x0) sendmsg(r0, &(0x7f000001d000)={0x0, 0x0, &(0x7f0000024000)=[{&(0x7f0000000100)="24000000100007031dff22946fa2830020200a0009000300001d85687f0000000400ff7e28000000060a43ba5d806055b6fdd80b40000000090001000029ec2400020cd37e99d69cda45a95e", 0x4c}], 0x1}, 0x0) pkey_alloc(0x0, 0x1) [ 427.564785][T19450] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.620879][T19317] bond0: Releasing backup interface bond_slave_1 [ 427.627680][T19451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 15:52:03 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x1, 0x6, 0x100000001, 0x35, 0x0, 0x1}, 0x2c) r1 = syz_open_dev$swradio(&(0x7f00000002c0)='/dev/swradio#\x00', 0x1, 0x2) r2 = accept4$rose(0xffffffffffffffff, 0x0, &(0x7f0000000140)=0x1ac, 0x80800) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000340)=ANY=[@ANYRES32=r2, @ANYBLOB="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"]) fsetxattr$security_smack_transmute(r0, &(0x7f00000000c0)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000100)='TRUE', 0x4, 0x1) bpf$MAP_CREATE(0x4, &(0x7f0000000040)={0x3, 0x0, 0x740000, 0x0, 0x20820000}, 0x2c) 15:52:03 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 427.810538][T19322] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 427.829271][T19323] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 427.840516][T19324] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:03 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:03 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x521142) getsockopt$inet_dccp_int(r1, 0x21, 0xb, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="020b000007000000000021002d54036205001a00000c9a934d4fe600001000e0c99f3d653c00f0ff9da499df0005dc437eed486dd6000000"], 0x38}}, 0x0) sendmmsg(r2, &(0x7f0000000180), 0x20, 0x0) clock_gettime(0x0, &(0x7f0000000400)={0x0, 0x0}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) recvmmsg(r2, &(0x7f00000009c0), 0x4000000000000ca, 0x22, &(0x7f0000000a80)={0x0, r3+10000000}) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000140)={0x0, 0x2710}, 0x10) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCRSCLRRT(r5, 0x89e4) [ 427.968203][T19458] bond0: Releasing backup interface bond_slave_1 15:52:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 428.218403][T19461] bond0: Releasing backup interface bond_slave_1 [ 428.805605][T19465] bond0: Releasing backup interface bond_slave_1 15:52:04 executing program 0: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 428.926824][T19464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 428.937775][T19466] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 428.948081][T19469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 429.003111][T19585] bond0: Releasing backup interface bond_slave_1 [ 429.175039][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 429.181503][ T7570] Bluetooth: hci0: command 0xfc11 tx timeout 15:52:04 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) 15:52:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:04 executing program 4: r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x20000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r1 = socket$inet(0x10, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000000), &(0x7f00000000c0)=0x14) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) sendmsg(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="24000000180007041dfffd946f610500021081001f0000050200080008000b001200ff7e280000001100ffffba16a0aa1c0900000000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) 15:52:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:04 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) [ 429.219481][T19588] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 429.269291][T19593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 429.343341][ T584] Bluetooth: hci1: Frame reassembly failed (-84) [ 429.551757][T19595] bond0: Releasing backup interface bond_slave_1 [ 429.694445][T19602] bond0: Releasing backup interface bond_slave_1 [ 430.054946][ C1] net_ratelimit: 20 callbacks suppressed [ 430.054955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.066483][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 430.160172][T19604] bond0: Releasing backup interface bond_slave_1 [ 430.215016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.220928][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 430.290338][T19605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 430.300904][T19606] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 430.337693][T19607] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:05 executing program 4: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/hwrng\x00', 0x509102, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffff9c, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x6, [0xfffffffffffffffe, 0x8, 0x100000000, 0x5b, 0x8000, 0x3]}, &(0x7f0000000640)=0x14) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000680)={r1, @in={{0x2, 0x4e24}}}, &(0x7f0000000740)=0x84) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nullb0\x00', 0x4000000004002, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000e, 0x13, r3, 0x0) ioctl$GIO_SCRNMAP(r0, 0x4b40, &(0x7f0000000140)=""/123) fstat(r2, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getgid() r6 = getuid() lstat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000003c0)='./file0\x00', &(0x7f0000001400)={0x0, 0x0, 0x0, 0x0, 0x0}) r9 = getegid() getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000001580)={{{@in6=@empty, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@local}}, &(0x7f0000001480)=0xe8) getgroups(0x2, &(0x7f00000014c0)=[0xee00, 0xee00]) r12 = getuid() getresgid(&(0x7f0000001680), &(0x7f00000016c0)=0x0, &(0x7f0000001700)) write$FUSE_DIRENTPLUS(r0, &(0x7f0000001740)=ANY=[@ANYBLOB="38030000000000000600000000000000060000000000000001000000000000000000000001000000060000000000000003000000c60f000005000000000000000800000000000000000000000000000003000000000000000000000000000000200000000000000002000000ff7f0000f45400000200000004000000", @ANYRES32=r4, @ANYRES32=r5, @ANYBLOB="05000005810000000000000006000000000000003aff0000000000000600f10001000000776c616e31bf0000060000000000000000000000000000000600000000000000ff0f00000000000002000000800000000100000000000000ffffff7f0000f700000051ffffffffff07000000000000000300000000000000e00d000000000000810000000600000004000000f8fffffff8ffffff", @ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02000000f7ffffff000000000000000000000000000000000040000001000000ffffff7f2f000000000000000500000000000000000000000000000004000000000000001b0b000000000000890000000100000001000000000000002400000000000000ff070000000000000100000001000000070000000000000001040000000000000080000004000000030000005427fe7907000000", @ANYRES32=r8, @ANYRES32=r9, @ANYBLOB="05000000b2ffffff0000000000000000000000005d000000000000000c000000080000002f6465762f72666b696c6c00000000000600000000000000010000000000000008000000000000000400000000000000000000000000000005000000000000000104000000000000ff7fffffffffffff97040000000000000ba500000000000007000000000000009600000007000000190500000004000000000000", @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="010000000000008000000000050000000000000000010000000000000d000000ff000000657468302a7365637572697479000000030000000000000000000000000000008b0c00000000000072890000000000004000000004000000040000000000000001000000000000000600000000000000ff07000000000000ff030000000000008000000000000000ffff00004000000001000000fdffffff00800000", @ANYRES32=r12, @ANYRES32=r13, @ANYBLOB="0100000009000000000000000200000000000000ff000000000000000000000001000000"], 0x338) r14 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x0, 0x0) preadv(r14, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4096, 0x8d5af}], 0x10000000000000db, 0x0) r15 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r15, 0x1000000000016) ioctl$VT_DISALLOCATE(r3, 0x5608) ioctl(0xffffffffffffffff, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b0") ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000001500)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001540)={'syzkaller0\x00', r16}) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, 0x0, 0x1f6) openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/conn_reuse_mode\x00', 0x2, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) accept4(r17, &(0x7f0000000200)=@rc, &(0x7f0000000040)=0x80, 0x80800) request_key(&(0x7f0000000440)='id_legacy\x00', 0x0, 0x0, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x0, 0x0) [ 430.433758][T19718] bond0: Releasing backup interface bond_slave_1 15:52:05 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = userfaultfd(0x0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000580)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000d62fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) write$sndseq(r1, &(0x7f0000011fd2), 0xffffffee) write$sndseq(r1, &(0x7f0000000180)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @addr}], 0x30) r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{}, {0x0, 0x1c9c380}}, 0x0) tkill(r3, 0x1000000000016) r4 = dup2(r0, r2) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 15:52:06 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") r1 = socket$packet(0x11, 0x100000000000003, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000006ffc)=0x200, 0xfffffffffffffdcb) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000004500)={'syz_tun\x00', 0x0}) bind$packet(r1, &(0x7f0000000640)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random="32cae4783d32"}, 0x14) sendto$inet6(r1, &(0x7f00000007c0)="050300000300000000000000c52cf7c21975e697b02f00066b2b2ff0dac8897c6b11876d886b6621d8d217ccd51cc5471d130a6632a88161a6fd8f24286a07d057c3be255b3f142fdd95208f", 0x4c, 0x0, 0x0, 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000000000)=""/127, 0x7f}], 0x1) [ 430.855014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 430.860909][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 431.024945][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 431.030884][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 431.094938][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 431.100843][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 431.225821][T19720] bond0: Releasing backup interface bond_slave_1 [ 431.333525][T19722] bond0: Releasing backup interface bond_slave_1 [ 431.340259][ T12] Bluetooth: hci0: command 0x1003 tx timeout [ 431.346735][T18972] Bluetooth: hci0: sending frame failed (-49) 15:52:06 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 431.414992][ T12] Bluetooth: hci1: command 0xfc11 tx timeout [ 431.421126][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:52:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 431.490214][T19726] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 431.510567][T19725] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 431.525542][T19727] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:06 executing program 4: pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f00000008c0)='9p\x00', 0x0, &(0x7f0000000740)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@msize={'msize', 0x3d, 0x3ffff}}]}}) [ 431.610607][T20042] bond0: Releasing backup interface bond_slave_1 [ 432.219890][T20048] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 432.239009][T20046] bond0: Releasing backup interface bond_slave_1 [ 432.399016][T20049] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 433.414975][ T7570] Bluetooth: hci0: command 0x1001 tx timeout [ 433.421164][T18972] Bluetooth: hci0: sending frame failed (-49) [ 433.575038][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 433.575116][ T7751] Bluetooth: hci1: command 0xfc11 tx timeout [ 435.175007][ C1] net_ratelimit: 20 callbacks suppressed [ 435.180702][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.186459][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 435.255021][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.260869][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 435.495108][ T3755] Bluetooth: hci0: command 0x1009 tx timeout [ 435.655093][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 435.660953][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 436.295024][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 436.300835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 436.455094][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 436.460883][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:14 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x1, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x4) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)) 15:52:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:14 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$kcm(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x69) dup3(r0, r1, 0x0) socket$netlink(0x10, 0x3, 0x0) 15:52:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:14 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:14 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 439.707923][T20160] bond0: Releasing backup interface bond_slave_1 15:52:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 439.759992][ T29] Bluetooth: hci0: Frame reassembly failed (-84) 15:52:15 executing program 4: clone(0x4004900, &(0x7f0000000280)="33a4ff67034744c9f2cfa53bfa51208a6aa32a5ddfb8b448c186e415d2e9d7452fa8235959917a9965804c436fa10384dd016cbe6b2f4bab930507cd8659a90e9edc80878b9f8832c367d8902c686bc82208562f993980eb9e36496066dbdcc7a1893febc9fccd671eb4fafed3dfb0aa3b535edf2085dd930c1d", 0x0, 0x0, 0x0) r0 = getpid() r1 = dup(0xffffffffffffffff) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x0, 0x1009}}, 0x20) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r1, 0x81785501, &(0x7f0000000600)=""/237) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8919, &(0x7f0000000240)={'team_slave_1\x00', {0x2, 0x4e23, @remote}}) write$RDMA_USER_CM_CMD_BIND(r1, &(0x7f0000000100)={0x14, 0x88, 0xfa00, {r2, 0x1c, 0x0, @ib={0x1b, 0x8, 0xcaf, {"eca5e7681f00e065ada0a49221a68208"}, 0x65, 0x80000000, 0x5}}}, 0x90) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) fcntl$setownex(r3, 0xf, &(0x7f0000704000)={0x2, r0}) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000001c0), &(0x7f0000000200)=0x8) ioctl$BLKROSET(r1, 0x125d, &(0x7f00000000c0)=0x3) wait4(0x0, 0x0, 0x60000002, 0x0) 15:52:15 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:15 executing program 4: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) getpeername$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000080)={0xa, 0x4e20}, 0x1b) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000100)={@local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "d8652b", 0x14, 0x6, 0x0, @local={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xd]}, @local, {[], @tcp={{0x0, 0x4e20, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40086602, 0x400007) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x63e650b2815bde43) ioctl$sock_TIOCOUTQ(r1, 0x5411, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) ioctl$IOC_PR_PREEMPT(0xffffffffffffffff, 0x401870cb, 0x0) fstat(0xffffffffffffffff, &(0x7f00000003c0)) geteuid() r3 = semget$private(0x0, 0x7, 0x1) semop(r3, &(0x7f0000000200)=[{0x0, 0x8bc, 0x1000}], 0x1) fstat(r0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) lstat(0x0, 0x0) lstat(&(0x7f0000000b40)='./file0\x00', 0x0) dup(r0) socket$inet6(0xa, 0x3, 0x2) sendfile(r2, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x1000, 0x40, &(0x7f0000000b80)="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", &(0x7f0000000240)=""/64, 0x1000}, 0x28) syz_init_net_socket$llc(0x1a, 0x0, 0x0) 15:52:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 15:52:15 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) [ 440.398410][T20390] syz-executor.4 (20390) used greatest stack depth: 21464 bytes left [ 440.454975][ C1] net_ratelimit: 21 callbacks suppressed [ 440.455022][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.466584][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 440.532164][T20165] bond0: Releasing backup interface bond_slave_1 [ 440.614999][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 440.620809][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 440.666958][T20158] bond0: Releasing backup interface bond_slave_1 [ 440.770038][T20192] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 440.784220][T20211] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 440.816958][T20236] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 441.254971][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.260791][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.414955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.420756][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.494975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 441.500799][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 441.814929][ T7751] Bluetooth: hci0: command 0x1003 tx timeout [ 441.821088][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 443.895121][ T7751] Bluetooth: hci0: command 0x1001 tx timeout [ 443.901293][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 445.574978][ C1] net_ratelimit: 20 callbacks suppressed [ 445.574985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.586440][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.654956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 445.660772][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 445.975016][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 446.055025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.060864][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.695037][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.700838][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 446.854981][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 446.860814][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:25 executing program 4: mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0x0, 0x0) fanotify_mark(r1, 0x11, 0x8000010, r0, 0x0) fanotify_mark(r1, 0x80, 0x12, r0, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x141400, 0x0) ioctl$KVM_GET_API_VERSION(r2, 0xae00, 0x0) 15:52:25 executing program 2: ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 15:52:25 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="2adc0d123c123f3188b070") syz_emit_ethernet(0x211d49, &(0x7f0000000000)={@local, @empty=[0x2, 0x7], [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x300004, 0x4, 0x0, @ipv4={[0x2], [], @multicast2}, @mcast2={0xff, 0x3}, {[], @icmpv6=@time_exceed={0xffffff88, 0x0, 0x0, 0x0, [0x9, 0x29], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) close(r0) 15:52:25 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:25 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:25 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 449.955677][T20505] bond0: Releasing backup interface bond_slave_1 15:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:25 executing program 4: ioctl$SNDRV_TIMER_IOCTL_PVERSION(0xffffffffffffffff, 0x80045400, &(0x7f00000000c0)) syz_read_part_table(0x4000000005245, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xd, 0x426000) ioctl$PPPIOCSCOMPRESS(r0, 0x4010744d) 15:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") clone(0x802102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = syz_open_dev$sndpcmp(&(0x7f00000001c0)='/dev/snd/pcmC#D#p\x00', 0x6, 0x201) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffff9c, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x74, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0x7c1, @mcast1, 0xfffffffffffff001}, @in6={0xa, 0x4e22, 0x4, @rand_addr="1ef7f48a092d4c2447b33eab7630654b", 0xfffffffffffffffd}, @in={0x2, 0x4e23, @rand_addr=0x6}, @in={0x2, 0x4e22, @multicast2}, @in6={0xa, 0x4e20, 0x80, @loopback, 0x8001}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000300)={0x1, 0x6, 0x8200, 0x9, 0x9, 0x0, 0x8, 0xaac, r2}, 0x20) r3 = socket$inet(0x2, 0x4000000003, 0x20400000087) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f00000000c0)={'\nat\x00', 0x0, 0x0, 0x0, [], 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x78) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x40, 0x0) getsockopt$netrom_NETROM_IDLE(r4, 0x103, 0x7, &(0x7f0000000140)=0x2, &(0x7f0000000180)=0x4) 15:52:25 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 450.716037][T20506] bond0: Releasing backup interface bond_slave_1 [ 450.835945][T20516] bond0: Releasing backup interface bond_slave_1 [ 450.864941][ C1] net_ratelimit: 20 callbacks suppressed [ 450.864950][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 450.876476][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) pipe(&(0x7f0000000040)) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x3ffc, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0xffffffffffffffff) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x44140, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0x80, 0x0, 0xffffffffffffffff, 0x0, [0x11]}, 0x2c) 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 450.954000][T20535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 450.967003][T20540] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 450.978295][T20605] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 451.024952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.030773][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:26 executing program 4: syz_emit_ethernet(0xe, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb88a2d530a01846275eed44c77ece60b7f804a419799bd9de1e44f93e7988c6f59cfbaaa01eec87a71d30e1555044a9555f5f58c5d34472ee362f20e3cc9c39a82ee94e2d1c7fc5a74c04b22e22ac5e8e406b5560b87d4f30dedece715c0d28286ba2b586efa191e795af5d592aa110c2734ae7d78b27c625a1c7a8d2da6bebae6652b57f6fce50066a80f2d5f1225e534aa524cf476c44cafeedec8495dc6fdecab631e01c3bbca3bd680da8e9837a71f40db69d740985a3bf694e73f6cb89cc37afc9c25cb41e"], 0x0) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000100)='/dev/hwrng\x00', 0x2000, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000040)={0x80081, 0x30, 0x1}) 15:52:26 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 451.115355][T20849] bond0: Releasing backup interface bond_slave_1 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:26 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x246) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000000c0)={0x0, 0x119000}) r3 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xfff, 0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e23, 0xf78d, @remote, 0xffffffff}}, 0xa90f, 0x1, 0x1, 0x8, 0x5}, &(0x7f0000000040)=0x98) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r3, 0x84, 0x23, &(0x7f0000000080)={r4, 0x2}, 0x8) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0x117) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_RUN(r2, 0xae80, 0x0) 15:52:26 executing program 4: r0 = socket$inet6(0xa, 0x400000000001, 0x0) fchdir(r0) getsockopt$inet6_udp_int(r0, 0x11, 0x69, &(0x7f0000001780), &(0x7f00000004c0)=0x4) connect$inet6(r0, &(0x7f0000000400)={0xa, 0x4e26, 0x0, @remote}, 0x1c) r1 = getpid() ptrace$setsig(0x4203, r1, 0x4a6, &(0x7f0000000180)={0x14, 0x8, 0x1ff}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000540)={{{@in6=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000640)=0xe8) stat(&(0x7f0000000680)='./bus\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x438011, 0x0) ioctl$LOOP_CLR_FD(r5, 0x4c01) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) write$UHID_INPUT(r5, &(0x7f0000000740)={0x8, "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", 0x1000}, 0x1006) r6 = socket(0x20000000000000a, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet6_int(r6, 0x29, 0x3e, &(0x7f0000dbb000), &(0x7f00000001c0)=0x4) r7 = syz_open_procfs(r1, &(0x7f00000002c0)='net/udplite\x00') ioctl$TIOCSWINSZ(r7, 0x5414, &(0x7f0000000300)={0x401, 0xa50a, 0x7c69, 0x6}) pipe(&(0x7f0000000080)={0xffffffffffffffff}) getpeername$unix(r7, &(0x7f0000000200), &(0x7f0000000100)=0x6e) chown(&(0x7f0000000500)='./bus\x00', r2, r3) r9 = dup(r0) ioctl$FS_IOC_RESVSP(r8, 0x40305828, &(0x7f0000000340)={0x0, 0x3, 0x69, 0x81}) setsockopt$inet6_tcp_int(r9, 0x6, 0x12, &(0x7f0000000000)=0x7f, 0x4) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000280)='syz_tun\x00', 0x10) r10 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r10, 0x2007fff) sendfile(r9, r10, 0x0, 0x8000fffffffe) 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 451.520881][T20867] bond0: Releasing backup interface bond_slave_1 15:52:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 451.655014][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.660832][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 451.815670][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.821492][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 451.905245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 451.911072][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 452.098141][T20882] bond0: Releasing backup interface bond_slave_1 15:52:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 15:52:27 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000100)='/dev/sg#\x00', 0x0, 0x10008002) write(r0, &(0x7f00000002c0)="d5bcf01998368b42ad2079b4698eb63db85e1e8d020000000000003ef0011dcc606aed69d2bc7037cabc9bc2feff", 0x2e) poll(&(0x7f0000000200)=[{r0}], 0x200000000000004c, 0x0) [ 452.210240][T20889] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 452.220658][T20916] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 452.232750][T20964] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:27 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:27 executing program 1: socket$rxrpc(0x21, 0x2, 0x2) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x800442d3, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="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"]) 15:52:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 452.313839][T21100] bond0: Releasing backup interface bond_slave_1 15:52:27 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, 0x28, 0x829, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) fstat(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000001c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in6=@mcast1}}, &(0x7f00000009c0)=0xe8) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000a00)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000a40)={{{@in6, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000000b40)=0xe8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000bc0)={0x0, 0xffffffffffffffff, 0x0, 0x1, &(0x7f0000000b80)='\x00', 0xffffffffffffffff}, 0x30) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002100)=0x0) fcntl$getownex(r0, 0x10, &(0x7f0000007e40)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000007e80)={0x0, 0x0}, &(0x7f0000007ec0)=0xc) stat(&(0x7f0000007f00)='./file0\x00', &(0x7f0000007f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r0, &(0x7f0000008000)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8021}, 0xc, &(0x7f0000007dc0)=[{&(0x7f0000000300)={0x688, 0x3a, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@nested={0x180, 0x3f, [@generic="4192f6ec9c19ddd2dc51799577978266fd502792a85bb12a249b7417c1e185d30b7b1e1e3c7da3c377024d5fb28e8da3f51a33342d6bc78b5bd1c6c7d5f7b4978baaa54234da079b4bbde9b6de241029367141a44b7c579e29faf2b714f8d9df7265c9ffff666ad9db5828560ce6e07ffd115f4b8870d4bbff8c242e76c04c863c28b7b6682224d9c21fb995fd1d84dd1ea5f0af03976c435efdeeda3f55a59d8f04b5d20bfdb72f8855629af4e9b3cb2aa3f9509430e2bb0a1478093ae0c16471593b92ec2a8214fc123a8aab357794fb4e03756d45c6cafe55fd10a41931b7967853be5b8560928af6d1", @generic="2fe85b6e48f5bcba0993b24034604c559ee546e74e4a0184500fd57af04e595827da54fc532ed5603cb987b44e56ad1edfd2119d820096a41b673a36897ed21ec8a4d64df8d9a959d4c843ee81ca0362013fcadab0cc6215bb23c47f8fb1fec881986eefccc774f8a557ae30701468d1b9f4ea13a7c9825df4d0f83fec2bc3ed39ab0b1f5221a1e0e909410bd06f19ae"]}, @typed={0x4, 0x69}, @nested={0x3b0, 0x4b, [@generic="393262848a73b3d9223b1e1f2e2a038ec7269c05aba8003c8771bffc775e63dd69f297c20bacb0c84c1edc6d125c3cc33e5d60719cdfdb936447455ae4c749cdba96df83d9585288a47151b5499c619fb12564774d8384502efc4bc785b8d1a2c6edf68a92a02aa188c1d7d9d5e679f303d976cc9fc5a632cc0989d0dd80cbeb3c8ed7d192cdb38a596856ab", @typed={0x14, 0x4b, @ipv6=@rand_addr="3813beabb052a7303e33575faa10b47d"}, @typed={0x4, 0x66}, @generic="bae4e3ea4a442c45443fa3b93317b4c32a64dc68e051cb82a927c5e8abeb37b64411a54f253487186c6d56ae0d48c045262a3d8e9f45a4600b8e6a82fda75133ddd0", @generic="e70e062c2b466618f974f2d43e1efb96a4c16c4922e941a89a9de94a63e0699b86c92d89b9ddb1fe848872a15170bf63e2383e359248a4a8eb2badd9ab6a64dde6173b4f628cd732e96618bb1cfdae7c09a00bed732cdca15e35712e9520554cb5e0c09c9fffa3cdf2211355e4cf56c53ce75a", @generic="ea74456b554581126b0ab7a284087ce3b1ac612a178b089b76fb5f94c8fe761883070962afd85dddc3f1476381985983b2d3fda6228751c994981e3e3b4879440dc48747067efc73ee6aca650d98d5021a4d79a01129082ee56f9b5402bf358efd125bf208c07e93b2c81c0a5236f87e72068abe4953c6123cf4409bc24ff5eb28ccd5ed97921f", @generic="730de74e8c596ee4fee61b0d8e9cb5ed2e0ad285bbdd452f9992e2e1a00692f43bfc6f9cba365213618f87fdf22d63c69056c26c75e5a09e37309492f472129f4ceb794a06026252e6adc8cb83b389e788407cbbe183d0b49813fff482d79ad59d95da3e4ff8b650543758ac4cb44e7f5044a7e639a4ab4ccd2fa88414e147b42919514c8feb9296250db87421ef24c7467ae1e169ed809088f48e5fd162803d442d4f5fddfaf2dc5a9107202a12266052e714a6fdd0d136584ed41fd2194e4d6ac105283f04d7aeee29cfc855d648d5e4be69e60fa1a2e0f3ab6d1bb3d80c663a869090970720", @generic="4c701629144b4a5f66c544b24a619299bd538cd9d1e8a49243f28e29428777e5a115c4cfc5b842ccae891c843428af40a1fff178e6f919734e122875105ce35cbd47be09e6e4bfbea69662a2e23e4b18d399a34153974ea9c22fc223f3e95f7d57becf83115743acf707b588ff09a3198b981e5b2670f58e6da702479bca288be83e137e6e3e960adffd2791a151ed3e81bc8cb650d5497dcd60c4eaa330d440d0f9f5d34429ed684fe49533937dc2d2e764de86cd0adf82ca446d402069f7a0afaa5c80df8ade4f1ac38bba9b5012cbbf9c407f5fdc401383b4a6a09dc3576ba3b9ee29df"]}, @generic="b92eb02a781d1a436e51dac0e0007768c7e5cac04e030b0b3776b62ad46bfb038406a81a0e2a2c75bea94dda1a5caeccf7bf49f7864807b5200e1c2171f026e0dbbc379cedc9cf7d649e88b239901e4f65838c37d1adc9c16aa92ed6e8814d1c3384a026886c4feb1d3bda70d102ef12f49e15d4a86dfc946b99abe036943210f8b81bebefc8d6f61076c3b66b85642afb8461236dfeefbe271935d348557ac81428854776355c0b6c8844a672a93b05a799347aa402e0753b74eaef7ce12b0cea424665", @generic="69d2c46b0873901566b255e6f785792b8a9e6a18676e554b5b3dabc73ef5b87cf7943282f6557d20b98e69bb420aef876b770c518ffeb020e8f9bd5952ed6bf3fff0b89a35de08a38610491942c19e2bd3b79041fe88267a594930d34a51d6f899", @nested={0x1c, 0x0, [@typed={0x4, 0x57}, @typed={0x14, 0x53, @ipv6=@mcast1}]}]}, 0x688}, {&(0x7f0000000c00)={0x14fc, 0x27, 0x8, 0x70bd28, 0x25dfdbfe, "", [@generic="823a3c2308deacca8bc1f04e519b5c3364efbb1c6256d739515f353b06b9", @nested={0x2a0, 0x5f, [@typed={0x4, 0x40}, @typed={0x8, 0x67, @uid=r1}, @generic="96a45a9219532b922b8a3167e19c093b16b8ef1bb40edfb63d86cb8aee3bac66394ee958b828a2487d5fb63d0d6e67dee5002893b623bcc63fd863e3b80340f363091e436435a8b0f035ec88ffb6b6fb5c94f82d092703c2a164482ded49bea8fc82c2acc3f9e68cde5fcb70f26aa67cacc08371123795170e0867a9459db771f3b44876a744c789b8c24668b20dee1c9ceb09337bd0d6671c517b81c778", @typed={0x8, 0x5e, @uid=r2}, @typed={0x8, 0x7e, @str='\x00'}, @generic="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", @generic="b572fb05d75837d7f2311e027b4c58cf46404b87492abc3b9885cbb06f3e8289efe5f0dc02a75159f7021e48ed8f2e5b4fa53a5eb53e19c519f16f87c11f1bc41cf34a6daa1ae129cb8a660f9d6716332bbb70669f9b4cbbc8bd272c9da6f92bc7d93c5374538fa1e2b91d567f90cf1b95d01114208a6f6c7ec03788c6f82edf0988b40abdb09deb3d7573c96054d796509a64d6682381a6d362745c715f1c06347f1e2cc42b7f7cdb7fa6d85502518e39", @typed={0x8, 0x3e, @fd=r0}, @typed={0x20, 0x7, @binary="2f9c5321d0e24eb6ad82a08a26369e2bb9a231cc4390d6e9470dc7"}, @typed={0x8, 0x55, @fd=r0}]}, @typed={0x4, 0x80}, @nested={0x3c, 0x1, [@typed={0x8, 0xa, @uid=r3}, @typed={0x8, 0x8d, @pid=r4}, @typed={0x8, 0x82, @ipv4=@multicast2}, @generic="6fc46e56a674e5d318e30079af8836f9642a618b757d612d76d2ca7cd249", @generic]}, @nested={0x60, 0x8b, [@typed={0x8, 0x89, @uid=r5}, @generic="11b1377198a5a57882fa611a2c57dc4da1c2b480c5f58c575d0a6ed89e74a7ec46cdbc93c2dc1177f05c6a8297a620200adad4aa76e3d452995ed14018b9859e14017736081f2132e68f25e75ceccb97fb98"]}, @generic, @nested={0x100c, 0x88, [@typed={0x4, 0x57}, @typed={0x1004, 0x49, @binary="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"}]}, @nested={0x168, 0x19, [@generic="2f0aff398cee9ecd09c0139d61f7603a85607d2c9e4800259198aad93e04", @typed={0x8, 0x19, @pid=r6}, @generic="cbf6dfccec32e1f8fea199fdbbbf1176794ac5cc1fec2b8cad60c254039c544cbfa0e2a6d710ecc3e9bb3f3e9237dfc1decc9861eac9bdaf66afb5378130206b55b95ab7eb6b52eb", @generic="ddecd6b0dcbf8fd83c9d0db8b94060447b0ff2fbc39678f877fed6b4a524220b9665799fca5910231b767781c77203d2ee1518a5b37b574942e88ad2fa3274438a40d5756ebb23e084441bcbda79ba3085220538c58675369f5c8fe255d2c4db281a0ac1098906cc32e64944860906b09da7a76df55c4d0619236f5571cf597cecc7c93c6c394bbbce3fa2f995b5eb732f5b7ac38eb18e9ded45cf553d7d1830fefc1c40b888f85d081159a465979a54799975ec9db7429465df2a0c389809dea7f10f961e31866453e4ae9b39f3435cefad6094d3bdd8903516c7523c4a6cc59fd7c6b63f9b2e44325afceec34a860eb5eafc1bbd86"]}, @generic="bfa597fee26095e966e614ee03c94a29c069bf7297d8ccbf9c"]}, 0x14fc}, {&(0x7f0000002140)={0x4488, 0x35, 0x704, 0x70bd2d, 0x25dfdbfd, "", [@nested={0x2028, 0x32, [@generic="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", @generic="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", @generic="b7a646bb39f0531022741a7af40e18297a118f830c728c203714eb689b8f4c210df0"]}, @generic="7e43c6654e10b16715d38c6aba81a95c3dc2b0d1e191efc1fdd937103124753038016c7f0c4751764a695f6dcbbe1f9b924f400347b04d596fe09112b02a5780a11475102a6d648dd7f49fb3aaced26ed8043fdbe86507053d3ac2536604a16157cd58b7d3d822102257749c117509eabfb17dd943d2bcb4b42ddae27918d64276cd0fce93e39c7ffce9f67bded62dc86da4242827f75861e4c11fc3aaebbcd73d1e015e24becb95048e4960fe08eb", @generic="d12cdd5dc4a560f7d2dc2280413090d291551a12621c30342dc0811fac6c5792cdf0d712e22ef35f3f70d8f15e80650cf436a3114064b642565ddb91ea18e259698df9aa4eb0f956fef9b82071bd0714ff983e260a05e51590e677e06370cad489adb128dbadd8b7b5c24dbeef13666f080782a52817356c755873352574ff741ec2f57d426646ec00c8990cc8c00d085377a638", @generic="469c8da6be83457c24da09d51db74e1561e5901845fdd65f70e7a59a9128538ae9d2767042b3924ed7099a4f251280d0d4b30d7d5c03e23d716d6c03b662bfd56a2550990ce67b85d5a97831dcb6598d0c41400e6c0cd755fcec45384eb6215b7a2ed6bf4233a44b0d5d4f11f0d417bbe561644deddf7409292010acc544ed5db11d3435bed67e2192a8be1dd2b1b4120beea34cb5bf10734a114364008a9e63e15784edef9eb4ce92edf035756ebc46ca371585", @typed={0xcc, 0x53, @binary="f11c5e97683df40dc29608dbc6803ae4c8c058ecdd957b1778ec05d4a9292c97ff23162870dacd399c2726ead916f62357241b9e2e6f15c70f9792dd7071517f6f6711581c193b4c2e3f67620ed4352dd6548d78aa6d0289428a28198785cd21a2cba011c1a23a991042c9378952252dc1f9049be673ec94bb5716e2a09b5dea2f427fcb9cf796317d75b51d500fd2a0677dd67bf18c888ffbe5d3e6956a8e4d2cc0eb0ee1dae4db95d7d5aa3f53f35b1ecd95da60a48b71a4c431283400f66e308272d957d7"}, @nested={0x2170, 0xe, [@generic="4d0c004c4c31613ba1ba51ae9d0987cc7a797d2db59873383abd616e6083a5026faac6dbd3cff111ae010a724b902a361e71e506d37266d1a3d642147b98cd3fded998cdc79f17b11a3de3b16f11884278984aec0ee468c417b7d81d8cd66ffc0787f03fda2ed2ca382b3dcc397ab4ffad8847516f309d903d2b206ba77e691f32cad9214f4cc77e8e6d14b94bbdbccc6ddb1b38d612", @generic="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", @typed={0x1004, 0x57, @binary="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"}, @generic="02c72ac02a5c1a001f9c64d12a9e6215c9925ecfbfcf29175a923f704275ebb1f7f85a7a844d4f5718d899c133d89070f210ccd289e752e4cd288a7676d0e49c5de9d1a6b6f5632d401e90d8ab83de531b7ee574b4b42f9899fca83b36d5b8e873a9e191b2b43b33ff70a126ca2b8669b1b387c9bf4978e29f84e00de719ec4336fcd3662b547dad8a02bba9b808985fd4b49bd6c85b11620f0194b00c4e7833d55e1eb13fd55ab460810366bf1e3972430d3546a045e37b0db944e049f96c732600d1dc51e9c7b1d0ecf2504fcb9e"]}, @nested={0x1c, 0x85, [@typed={0xc, 0x31, @u64=0x6}, @generic='Z', @typed={0x8, 0x2e, @pid=r7}]}]}, 0x4488}, {&(0x7f0000006600)=ANY=[@ANYBLOB="d80300001f0002012dbd7000fddbdf25e40004000c0058000800000000000000f5b1e5db22f70000e19020daac9a9d5a6e110c487bb37fa0d2159340e9a00d6d7909fa990f0f060cadfde2e8713824e3ebb9714d0868650f6052363424703976fb8773f7d2a4e6ccaf90d8bdcdc49526f68a4f419abd9c4cc1f0326a040856988bdd1157bf05b153b18e9ff4235c1e74d3f7311182594290965b7400cc3dbfd7ba70e48326a650804cdbf3fc9811966fc39367590e0ba34c6b31a343a6f698893d975fa57bb055a5251e4a889fbaba3dfa6d21a6d2efc85327d652973da22e1fbd502a80e3aed012317bb1dbf1c67d23350000006fb61f456bd1ad0e1e2f0f1abdfc03d4a7d231e7c06e44d822d6d1648b9852ad89cf4523b405a5e196d5d66df0b8d00aaea00655d3d91302d4cd50a85b4bc18e8882dd43f50eb2a3ae028fde2e15f815c159838268fcd5be9d04a02c0adddb25387124cf9e0bcda1b89b4f7e762a2ab3c3f3195d08bacdbb8273c7514f9548a7cf6314d8dd7c6361a520a8634f8001c6127f5af9359296e85f673596b71cb6bcda9d59cdd1960353a853f4b8717c3367e63a42b53a78ec26b40771be475c96afaeac100133d3a5b24511f336f3a3a04e73fa4fda49180049000c005900ff0700000000005d080029006d000000b6e99f1c21142067c25120d4428adc7a5993cfdb2945453caefef8e6e1e006af4d529f45ede67e4e935a3fff2dddf3b41c07985efea4d8070a0d6b7d176ab2c72cae0c09ec2b4a48f31f2504bd6f7427d67ac925b3ecaf5858c87045ad7869890cb60d6489789c97156522eb24b505a3bf61d69834bc8b81df7568f15972f0ef01be5bbb48b8d80eba07241445bc0345706b9ed063f569fd560ffc427a17745bc97c7991202c0fc8d37f886cd5afa0b1b5c5cbe0a907cbb37f758bcc37df71e2ca4aa20871ac1097ed7e6c46bb5369539578bf910c907376db37e9c143e53b0c0f4610ca7ba99bd7eebc30009d50001e5f68c2b8f9b5196f0324f1c170a0a08737dbb9f8264654cf2c6f10ff85ef9d6df013635b63b744051e43d4689f73289576e88054f591701f776655c903f4eb1205c8d73215fa3c284b145aeef761b2257b2a9e47af9a9dd5badd47105ddc1c1ea7fb24e4e5a228f3e9bdfd4530e86a1ebe5c6776f87f5f6b756c5eb3883f4b49e6e170383bf34faf4e575148301bbbe9c23162764a3f5e492ac1f9b05f61111c92ec108ed575bca108c4d4f8ed041ba005118b21a92c6c718ad5fc148828e48670832999e08c7cd7ee36f0b0481398553710db4bae0a9c968d2fe8a9525dd52d2e845e3fcd018e6222cc686e563bf46d36931f3f866ac209f7bb66097ba3606408030c85734c00"], 0x3d8}, {&(0x7f0000006a00)={0x1234, 0x3d, 0x600, 0x70bd29, 0x25dfdbfc, "", [@nested={0x1100, 0x11, [@generic="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", @generic="8f7d7fd17dd94bac843d040695d3d055828012892ce19786e77870cb031a079a831b38a139976ef8e743d9bc078e194b3a5d18c2b77b9150eaa619e9071bbea20709f86639f55928c5da10c336fbd41139c94e82b4f9f868841bd1b37e54601eafad5414d58f3f15e05e538fefbd594f3d26276e508a0175e976046207ebbc9673b2cd2e4ad1fb51333d7fa36546bb34efa960ba492afa31b57a456ebef2078f4885d0fc6bd5274d3b45d7bc5d84f821340c9ca3d2701215e0", @typed={0x8, 0x4e, @fd=r0}, @generic="361240f12cba0bebb20859f9238fb07af52813c8501109e72f096a89774c60", @typed={0xc, 0x4f, @u64=0x1000}, @generic="308d52e01cce3c11cc23e931e994"]}, @typed={0x4, 0x4a}, @nested={0x10c, 0x19, [@generic="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", @typed={0x8, 0x62, @ipv4=@multicast2}]}, @typed={0xc, 0x70, @u64=0x1}, @typed={0x8, 0x8e, @fd=r0}]}, 0x1234}, {&(0x7f0000007c40)={0x158, 0x1f, 0x300, 0x70bd2d, 0x25dfdbfd, "", [@generic="3bc35d336107a2f14fcdef3085a570b15dbecc1f07ac67baa1ad94f951f136bd969c2eed6b597ab581d283b887110403747c41b5ed370481a53bd1c49471fb615b8af1a54b169d0452befc25ca602b3767f0c487077d279e11caacd9c00c10a2107bc7b039f053efaf23afdf6be4355108b7440053c0f11ebdf8946f036d19c40187c7b07b39510c2415797ecf2108aa67d0e13d054b841c0817", @typed={0x8, 0x77, @fd=r0}, @typed={0x8, 0x54, @ipv4=@dev={0xac, 0x14, 0x14, 0x26}}, @generic="54e1b2553bd0396f4bc2288a4d35910e1ec83b98b1e2d3b648cca63080773192141a96d5b629fdc32596aa47513256928fd8d9b7ab00289332024d3a1587d96080d3685e0cbf648311438105e74cbc024805f54b3bbc09ada18ed8412659abefa2d5e56abd2f2e4b0f20b12fd2658d27de305c5d150aaf59a5debb2a146f045132b83064b07450e1e19f520d39163a1d0bef343f7e65f45e2fe573e267bb"]}, 0x158}], 0x6, &(0x7f0000007fc0)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x20, 0x800}, 0x80) 15:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 15:52:27 executing program 4: clone(0x84007bf7, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x28, &(0x7f00000002c0)) syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x0, 0x2) migrate_pages(r1, 0x0, 0x0, 0x0) 15:52:27 executing program 1: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) open$dir(&(0x7f0000000000)='./file0\x00', 0x2040, 0x0) mount$fuse(0x20000000, &(0x7f0000000000)='./file0\x00', 0x0, 0x17cd, 0x0) mount$fuse(0x20000000, &(0x7f00000000c0)='./file0\x00', 0x0, 0x79fd, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$FUSE_DEV_IOC_CLONE(r1, 0x40086604, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x81, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) select(0x40, &(0x7f00000000c0)={0x8, 0x2, 0x5, 0xb60, 0xe, 0x5, 0xd816, 0x7}, &(0x7f0000000100)={0x314018d, 0x3, 0x937f, 0x2, 0x7fff, 0xfffffffeffffffff, 0xff, 0x4}, &(0x7f0000000140)={0x4, 0xb83, 0x2, 0x6e, 0x8, 0x8, 0x8000, 0xe47b}, &(0x7f00000001c0)={0x0, 0x2710}) read(r3, &(0x7f0000000380)=""/245, 0xfffffffffffffdff) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(0xffffffffffffffff, 0x810c5701, &(0x7f00000004c0)) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40046602, &(0x7f0000000640)=0x84000) syz_open_dev$dri(&(0x7f0000000480)='/dev/dri/card#\x00', 0x4, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f0000000240)) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000040)={0x10000, 0x0, [0x9, 0x8, 0x0, 0xffffffffffff14af, 0x10000, 0x8, 0xff, 0xffff]}) linkat(0xffffffffffffffff, &(0x7f0000000680)='./file0\x00', 0xffffffffffffffff, &(0x7f00000006c0)='./file0\x00', 0x1400) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000900)={{{@in=@initdev, @in6=@remote}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000000780)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000ac0), &(0x7f0000000b00)=0x14) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f00000002c0)=ANY=[@ANYBLOB="72617700000000000000000000000000000002000000000000000000003d00000000000000000000000000000000000000000000000000000000"], 0x1) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000740)={0x0, @multicast2, @multicast1}, 0xc) fcntl$getownex(r3, 0x10, &(0x7f0000000200)) r4 = semget(0x1, 0x7, 0x408) semctl$IPC_INFO(r4, 0x1, 0x3, &(0x7f0000000800)=""/114) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000000)={0x6, @multicast1, 0x0, 0x0, 'dh\x00', 0x20, 0x80000000, 0x17}, 0x2c) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={&(0x7f0000005000), 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffff9c, 0x84, 0x73, &(0x7f000000d000), &(0x7f0000001000)=0xfea6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r3}) 15:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(0xffffffffffffffff, 0x400455c8, 0x9) 15:52:27 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) [ 452.710316][ T29] Bluetooth: hci0: Frame reassembly failed (-84) [ 453.119131][T21104] bond0: Releasing backup interface bond_slave_1 15:52:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:28 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x7ab795ca09c27927) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000400)={0x3, 0x1, &(0x7f0000000200)=""/153, &(0x7f00000002c0)=""/196, &(0x7f00000003c0)=""/36}) ioctl$RTC_AIE_OFF(0xffffffffffffffff, 0x7002) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket(0x2, 0x3, 0x100000001) bind$inet(r1, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x32) r2 = open(&(0x7f0000074000)='./file0\x00', 0x141046, 0x0) link(&(0x7f00000000c0)='./file0\x00', 0x0) ftruncate(r2, 0x8007ffc) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000180)={0x28, 0x2, 0x0, {0x0, 0x9, 0x43}}, 0x28) getsockopt$inet6_dccp_buf(r2, 0x21, 0x2, &(0x7f0000000100)=""/47, &(0x7f0000000140)=0x2f) sendfile(r1, r2, 0x0, 0x400008bca) 15:52:28 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f00000000c0)="0adc1f123c123f3188b070") r1 = openat$vnet(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vhost-net\x00', 0x2, 0x0) close(r1) fsetxattr$security_smack_entry(r1, &(0x7f0000000000)='security.SMACK64EXEC\x00', &(0x7f0000000040)='/dev/vhost-net\x00', 0xf, 0x0) [ 453.241326][T21112] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 453.251170][T21120] bond0: Releasing backup interface bond_slave_1 15:52:28 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 453.408132][T21144] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 453.421675][T21175] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 453.446638][T21347] bond0: Releasing backup interface bond_slave_1 15:52:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000140)={@mcast1}, &(0x7f0000000180)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000280)={'team0\x00'}) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in=@multicast1}}, {{}, 0x0, @in6=@initdev}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000400)={@remote}, &(0x7f0000000440)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000480)={'team0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000004c0)={'team0\x00'}) getpeername$packet(r0, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000540)=0x14) getpeername(r0, &(0x7f00000005c0)=@hci, &(0x7f0000000640)=0x80) getsockopt$inet6_mreq(r0, 0x29, 0x1f, &(0x7f0000000680)={@mcast2}, &(0x7f00000006c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000880)={{{@in=@multicast1, @in=@initdev}}, {{@in=@multicast2}, 0x0, @in6=@local}}, &(0x7f0000000980)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000009c0)={0x0, @local, @loopback}, &(0x7f0000000a00)=0xc) accept4$packet(0xffffffffffffffff, &(0x7f0000000bc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000c00)=0x14, 0x80800) accept4$packet(r0, &(0x7f0000000d00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000d40)=0x14, 0x800) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000f40)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000f80)={'bridge_slave_0\x00'}) accept4$packet(0xffffffffffffffff, &(0x7f0000004b80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000004bc0)=0x14, 0x800) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000004c00)={{{@in6=@remote, @in6=@initdev}}, {{@in6=@mcast1}, 0x0, @in=@initdev}}, &(0x7f0000004d00)=0xe8) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f00000001c0)={'eql\x00', @random="6214b9394c05"}) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004d80)=0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004dc0)={'team0\x00'}) getpeername$packet(0xffffffffffffff9c, &(0x7f0000004e00)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000004e40)=0x14) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000080)) faccessat(r1, &(0x7f0000000200)='./file0\x00', 0x100, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'syz_tun\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="4d00000000000000f9ffffffffffff0200000000000006000000230000000000000000000000000000000000"]}) 15:52:28 executing program 1: syz_open_dev$usbmon(&(0x7f0000000580)='/dev/usbmon#\x00', 0x1, 0x2) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0xea533e66fe132de6) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r2, 0xc0505405, &(0x7f0000000100)={{0x1, 0x3, 0x5, 0x2, 0x3}, 0x7ae, 0x8, 0x1000}) write$UHID_CREATE(r0, &(0x7f0000001080)={0x0, 'syz1\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xe7\xff\x00', 'syz1\x00', 'syz0\x00', &(0x7f00000000c0)=""/11, 0xb, 0x0, 0x0, 0x1, 0xffffffffffffffff}, 0x402) ioctl$KVM_SET_XSAVE(r1, 0x5000aea5, &(0x7f0000000180)={"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"}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000080), 0xa) [ 453.548151][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.564998][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.590674][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.602622][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.610353][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.618075][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.625784][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.633962][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.647765][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.659619][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.667352][ T7570] hid-generic 0000:0000:0001.0003: unknown main item tag 0x0 [ 453.677268][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.684677][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.692679][ T7570] hid-generic 0000:0000:0001.0003: hidraw0: HID vffffff.ff Device [syz1] on syz1 [ 453.706028][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.722222][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.730061][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.737967][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.745788][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.754739][T21389] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 453.763136][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.781750][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 15:52:29 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) setpriority(0x3, 0x0, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 453.789281][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.804948][ T5] hid-generic 0000:0000:0001.0004: unknown main item tag 0x0 [ 453.817610][ T5] hid-generic 0000:0000:0001.0004: hidraw0: HID vffffff.ff Device [syz1] on syz1 15:52:29 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000000)={0x7fd2, 0xfffffffffffffffa}) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vsock\x00', 0x141000, 0x0) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000001500), 0x4) set_mempolicy(0x0, 0x0, 0x0) [ 453.845092][T21459] bond0: Releasing backup interface bond_slave_1 15:52:29 executing program 1: openat$kvm(0xffffffffffffff9c, &(0x7f0000005540)='/dev/kvm\x00', 0x0, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xe, 0x400000) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f0000000080)={&(0x7f0000ff9000/0x4000)=nil, 0x20, 0x0, 0x0, &(0x7f0000ff8000/0x4000)=nil, 0x1f}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket$netlink(0x10, 0x3, 0x4000000000000004) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000100)={0x2, 0x4e20}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f00000000c0)='dctcp\x00', 0x6) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/qat_adf_ctl\x00', 0x521200, 0x0) r4 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, 0x0, 0x0) sendto$inet(r3, 0x0, 0x0, 0x20000000, &(0x7f0000000080)={0x2, 0x4e20}, 0x4f) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xff36) openat$qat_adf_ctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$admmidi(0x0, 0x0, 0x400000) userfaultfd(0x0) ioctl$SCSI_IOCTL_GET_IDLUN(0xffffffffffffffff, 0x5382, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(0xffffffffffffffff, 0x0, 0x82, 0x0, 0x0) sendto$inet(r3, &(0x7f0000000180), 0xffffffffffffff9a, 0x4007ffd, 0x0, 0xb4) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000280)="580000001400192340834b80040d8c5602067fffffff81000000000000dca87086a5c000004f6400940005891550f4a8000000006700008000f0fffeffff09000080fff5dd00000010000100000c0900fcff0000040e05a5", 0x58}], 0x1) fsync(r4) [ 454.372180][T21462] bond0: Releasing backup interface bond_slave_1 15:52:29 executing program 4: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x1, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f00000001c0), 0x0) socketpair(0x4, 0x1000080f, 0x5, &(0x7f0000000740)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0xbec31e7de7c4643d}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x5}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x5}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x282}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x8946, &(0x7f00000000c0)='wlan0\x00') getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000180)=0xe8) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000300)={@local, @dev={0xfe, 0x80, [], 0x26}, @mcast1, 0x100, 0xffffffff, 0x9, 0x400, 0x5, 0x1000000, r3}) r4 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0x3, 0x20000) ioctl$VIDIOC_QUERYSTD(r4, 0x8008563f, &(0x7f0000000080)) [ 454.498855][T21469] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 454.522025][T21468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 454.534512][T21481] bond0: Releasing backup interface bond_slave_1 [ 454.774974][ T3755] Bluetooth: hci0: command 0x1003 tx timeout [ 454.782577][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 454.790074][T21482] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 455.975075][ C1] net_ratelimit: 20 callbacks suppressed [ 455.980773][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 455.986661][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 456.055072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 456.061014][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 456.455067][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 456.460863][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 456.854970][ T3755] Bluetooth: hci0: command 0x1001 tx timeout [ 456.861113][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 457.094968][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.100769][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 457.254997][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 457.260966][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 458.935004][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 461.254976][ C1] net_ratelimit: 20 callbacks suppressed [ 461.254984][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.266578][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 461.415000][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 461.420830][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.054977][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.060749][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.215065][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.220905][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 462.294947][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 462.300749][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:38 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 15:52:38 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:38 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:38 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:38 executing program 4: socketpair(0x1, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) close(r1) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000040)={0x8001}, 0x4) r2 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000980), 0xffffff4d) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0xffffffffffffffab}, 0x8044) 15:52:38 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(0xffffffffffffffff, 0x40046207, 0x0) r1 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000012000)={0x8, 0x0, &(0x7f0000005fd4)=[@acquire], 0x0, 0x0, 0x0}) close(0xffffffffffffffff) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000008fd0)={0x7, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0e630c40000000"], 0x0, 0x0, 0x0}) r2 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x1, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x5, 0x200, 0x4, 0x1, 0x0}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_MAXSEG(r2, 0x84, 0xd, &(0x7f0000000140)=@assoc_id=r3, &(0x7f0000000180)=0x4) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080), 0x0, 0x0, &(0x7f0000000680)}) [ 463.395798][T21703] binder: 21701:21703 Acquire 1 refcount change on invalid ref 0 ret -22 [ 463.416598][T21697] bond0: Releasing backup interface bond_slave_1 15:52:38 executing program 1: socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x243}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x4, @multicast2}]}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) [ 463.445514][T21703] binder: 21701:21703 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 463.460947][T21703] binder: 21701:21703 Acquire 1 refcount change on invalid ref 0 ret -22 [ 463.471690][T21721] binder: 21701:21721 BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 15:52:38 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x6, 0x10}, &(0x7f0000000440)=0xc) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x6, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000800)={0x10004, 0x8000}) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000007c0)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r4 = socket(0x1e, 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) mkdir(&(0x7f0000000300)='./file0\x00', 0x400000000024) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x3, 0x2c9}, &(0x7f0000000480)=0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x00\x00\x00\x00\x00\x00\x00\x00\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}\xddHuI', 0x0, 0x0) syncfs(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r5) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x3, {0x20}}, 0xe) 15:52:39 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x80000, 0x0) ioctl$KVM_GET_REG_LIST(r1, 0xc008aeb0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"]) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000400)={0x0, 0x6, 0x10}, &(0x7f0000000440)=0xc) r2 = syz_open_dev$media(&(0x7f00000001c0)='/dev/media#\x00', 0x6, 0x200) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x40) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000800)={0x10004, 0x8000}) ioctl$FIONREAD(r3, 0x541b, &(0x7f00000007c0)) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000140)='/dev/video1\x00', 0x2, 0x0) r4 = socket(0x1e, 0x2, 0x0) r5 = syz_open_dev$ndb(&(0x7f0000000340)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$NBD_SET_SOCK(r5, 0xab00, r4) mkdir(&(0x7f0000000300)='./file0\x00', 0x400000000024) mount(0x0, &(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000}, &(0x7f0000000100)=0x10) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000002c0)={0x0, 0x6, 0x3, 0x2c9}, &(0x7f0000000480)=0x10) ioctl$DRM_IOCTL_AGP_RELEASE(r3, 0x6431) socket$nl_netfilter(0x10, 0x3, 0xc) pivot_root(&(0x7f00000004c0)='.\x00', &(0x7f00000003c0)='./file0\x00') mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000500)='sysfs\x00*\x86OK\xc0\v\xce\x1b\xdb cr\x13\xb1\xe8\x94\xd1 q_\x9d\xc1\x12[\x04,r&\xeb\x016\xd9bN\xa1\xd23t\xa6`\xfeZ\xc1sr/\xd3g\x00\x00\x00\x00\x00\x00\x00\x00\xbe\v\xc5QCy\xafr\x13\xd3+\x8d]\x06\xdc\x8f\xbf,\x84\x9e\xd9\xcd\xef\xc7K\x03\xdf\xa9\xcbZ\x90\xb2\x8bK$\xd7\x86,=f\xfc\xa51g\xd5BB5CZ=\xbbv\xbc}\xddHuI', 0x0, 0x0) syncfs(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) close(r5) syz_mount_image$ntfs(&(0x7f00000003c0)='ntfs\x00', &(0x7f0000000400)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) bind$bt_l2cap(r0, &(0x7f0000000700)={0x1f, 0x3, {0x20}}, 0xe) 15:52:39 executing program 4: r0 = socket(0x40000000002, 0x3, 0x6) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000012c0)='syz_tun\x00', 0x269) sendto$unix(r0, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) 15:52:39 executing program 4: r0 = syz_open_dev$sg(&(0x7f0000000340)='/dev/sg#\x00', 0x0, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[0x4c00000000000000], 0x0, 0xbd, 0x279d}) 15:52:39 executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x151) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x0, 0x0, @ipv4={[], [], @local}}, 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x200000ee) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f00000002c0)="d7b296eb699af95aecb1cc45dbd103d8a86971586026fae4c0380ccb7b8f7b72c878686a029e01ab4f5e97a81812851fbc361943daf8ea892f37210009ad3260fdc935d40ceefa115ff1640481a034990ab1dae92555bd69104aa891ba83148e9696caa86dddbf031b7a8c596bad2b7f24a7651ea45a6d81486fafb9794f45b558b872b7af89e7dce619c5516ec9212778b772aee688afe58fd12b59998f1325b52b1a8e30ac1ee3934bd31f142e02a5e6c26b229f675da2bf04e24f06c7b7010404cbc76cdc4ed6c75ccc129183e1d9f1adbd0ad5d8a9b27c547b3fcd5527e1a825eefb6535e41c1e0daed0d7") [ 464.197980][T21706] bond0: Releasing backup interface bond_slave_1 [ 464.480551][T21699] bond0: Releasing backup interface bond_slave_1 [ 464.716857][T21712] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 464.732443][T21709] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 465.495002][ T7751] Bluetooth: hci0: command 0x1003 tx timeout [ 465.501166][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 466.374967][ C1] net_ratelimit: 20 callbacks suppressed [ 466.374976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 466.386425][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 466.454979][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 466.460788][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 466.854936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 466.860708][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.495016][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.500838][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 467.575006][ T7751] Bluetooth: hci0: command 0x1001 tx timeout [ 467.581107][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 467.654965][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 467.660747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 469.655060][ T5] Bluetooth: hci0: command 0x1009 tx timeout [ 471.655003][ C1] net_ratelimit: 20 callbacks suppressed [ 471.660693][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.666512][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 471.814987][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 471.820814][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 472.455043][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.460886][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 472.615034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.620819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 472.694936][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 472.700741][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:48 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x0) 15:52:48 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:48 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:48 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000800, &(0x7f0000e68000)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='ip6gre0\x00', 0x10) sendto$inet(r0, &(0x7f0000000000), 0xfffffdef, 0xc0, 0x0, 0x0) 15:52:48 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:48 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = syz_open_dev$binder(&(0x7f00000000c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$SIOCX25SCAUSEDIAG(r2, 0x89ec, &(0x7f0000000080)={0xfffffffffffffff7, 0xffffffff}) ioctl$VHOST_SET_VRING_ERR(r2, 0x4008af22, &(0x7f0000000100)={0x1, r2}) r3 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) prctl$PR_CAPBSET_READ(0x17, 0x16) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000140)) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000600)={0x2e, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="006340400000000000007f000000000000e42f95da0174a6f9a30000000000000000000000000000000000000002"], 0x0, 0x0, 0x0}) [ 473.645356][T22141] bond0: Releasing backup interface bond_slave_1 [ 473.691441][ T29] Bluetooth: hci0: Frame reassembly failed (-84) 15:52:49 executing program 4: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) ioctl$TIOCGPTPEER(r0, 0x5441, 0xa3) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000004fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket(0xa, 0x1, 0x0) ioctl$KDGETKEYCODE(r0, 0x4b4c, &(0x7f0000000140)={0x10000, 0x5}) getsockopt$inet6_int(r2, 0x6, 0x1a, 0x0, &(0x7f0000013000)) mmap(&(0x7f0000000000/0xfe3000)=nil, 0xfe3000, 0x3, 0x32, 0xffffffffffffffff, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x2400, 0x0) close(r1) bind$x25(r2, &(0x7f0000000080)={0x9, @null=' \x00'}, 0x12) getsockopt$sock_int(r2, 0x1, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x4) 15:52:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 473.808629][T22150] bond0: Releasing backup interface bond_slave_1 15:52:49 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x420000, 0x0) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r1, 0x0, 0x705) ioctl$VIDIOC_SUBDEV_S_FMT(r1, 0xc0585605, &(0x7f0000000100)={0x1, 0x0, {0x57b, 0x6, 0x301b, 0xf, 0xb, 0x4, 0x1}}) r2 = socket(0x11, 0x802, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup2(r2, r3) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000080)='trusted.overlay.nlink\x00', &(0x7f00000000c0)={'L-', 0x7}, 0x28, 0x3) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, 0x0) [ 473.998079][T22153] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:49 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 474.057405][T22199] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:52:49 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:49 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 474.181822][T22373] bond0: Releasing backup interface bond_slave_1 [ 474.340395][T22479] bond0: Releasing backup interface bond_slave_1 [ 475.041549][T22480] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 475.052254][T22478] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 475.074298][T22481] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 475.734937][ T7751] Bluetooth: hci0: command 0x1003 tx timeout [ 475.741071][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 476.774959][ C1] net_ratelimit: 20 callbacks suppressed [ 476.774969][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 476.786515][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 476.855023][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 476.860854][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 477.255030][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 477.260906][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 477.814971][ T7751] Bluetooth: hci0: command 0x1001 tx timeout [ 477.821221][ T8398] Bluetooth: hci0: sending frame failed (-49) [ 477.894952][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 477.900750][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 478.055003][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 478.060835][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 479.894962][ T12] Bluetooth: hci0: command 0x1009 tx timeout [ 482.055004][ C1] net_ratelimit: 20 callbacks suppressed [ 482.055009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 482.066464][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 482.215028][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 482.220899][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 482.854981][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 482.860810][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 483.015053][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 483.020861][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 483.094970][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 483.100769][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:52:59 executing program 1: capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="b40000000000000085100000000000009500000000000000d4dac4ba41706570e05037b9018a3f8173eddc971dfd52ec5acfeab5be53fe73a5d1322aca664de9e43b75678950b6c2f8d958ccd33988750a3e6a32f16798ec0790bfc38da236268d29"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195}, 0x48) 15:52:59 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:59 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:59 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:59 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:52:59 executing program 2 (fault-call:2 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:52:59 executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) dup3(r0, r0, 0x80000) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000000), 0x4) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000000040)="e0e31a38eea4cdb34a912680952cd771e70a2d418f51ec8646cdbaa7d2ae68551552b8a4c65dced8240ff890344c478dfcfb", 0x32, r0}, 0x68) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000340)) [ 483.897096][T22496] bond0: Releasing backup interface bond_slave_1 [ 483.920357][T22504] FAULT_INJECTION: forcing a failure. [ 483.920357][T22504] name failslab, interval 1, probability 0, space 0, times 1 [ 483.935378][T22504] CPU: 0 PID: 22504 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 15:52:59 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x20400, 0x0) ioctl$VIDIOC_G_PARM(r0, 0xc0cc5615, &(0x7f0000000280)={0x6, @raw_data="77695514ac45956579a6b66fefb22186b5ed290c4d79f4fc3c8f7021f80059d3f2f2f3b8a12d776accb525f71acb3016b2a47382d2fcf65bfd818b2d3424d4797dd89ffd2e3de021045b0c6f16a131615ba8f26cd5dc643e2deefc1166315267c107aaafc7b68dbe2445731c82b7033e360a9d395aa380a567e807c631e2377670ce262c7d4ed358ff31ffa0d5276b786b1c4f64a37b886a08d4e9aa27bf1c8704277c70f659567e64d9ca843f0a2bd23329fa9948672bce37cd006048937ef4b255a15afd2e2025"}) mkdir(0x0, 0x0) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x8000000200000000, 0x800007f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f0000000240)=r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f00000005c0)={0x0, 0x1c9c380}, 0x0) rename(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='./file0\x00') mknod(&(0x7f0000000440)='./file0/file1\x00', 0x60000000000000, 0x0) [ 483.944079][T22504] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 483.954129][T22504] Call Trace: [ 483.957526][T22504] dump_stack+0x172/0x1f0 [ 483.961946][T22504] should_fail.cold+0xa/0x15 [ 483.966552][T22504] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 483.972419][T22504] ? ___might_sleep+0x163/0x280 [ 483.977322][T22504] __should_failslab+0x121/0x190 [ 483.982324][T22504] should_failslab+0x9/0x14 [ 483.986863][T22504] kmem_cache_alloc_trace+0x2d1/0x760 [ 483.992241][T22504] ? ___might_sleep+0x163/0x280 [ 483.997143][T22504] hci_alloc_dev+0x43/0x1d00 [ 484.001807][T22504] hci_uart_tty_ioctl+0x2d7/0xb00 [ 484.006878][T22504] tty_ioctl+0xac9/0x14d0 [ 484.011776][T22504] ? hci_uart_init_work+0x150/0x150 [ 484.011795][T22504] ? tty_register_device+0x40/0x40 [ 484.011848][T22504] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 484.011889][T22504] ? tomoyo_init_request_info+0x105/0x1d0 [ 484.011904][T22504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.011932][T22504] ? tomoyo_path_number_perm+0x263/0x520 [ 484.028454][T22504] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 484.028511][T22504] ? __fget+0x35a/0x550 [ 484.028534][T22504] ? tty_register_device+0x40/0x40 [ 484.028577][T22504] do_vfs_ioctl+0xd6e/0x1390 [ 484.028594][T22504] ? ioctl_preallocate+0x210/0x210 [ 484.028605][T22504] ? __fget+0x381/0x550 [ 484.028625][T22504] ? ksys_dup3+0x3e0/0x3e0 [ 484.040830][T22504] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 484.040891][T22504] ? fput_many+0x12c/0x1a0 [ 484.040920][T22504] ? tomoyo_file_ioctl+0x23/0x30 [ 484.095271][T22504] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.101588][T22504] ? security_file_ioctl+0x93/0xc0 [ 484.106684][T22504] ksys_ioctl+0xab/0xd0 [ 484.110825][T22504] __x64_sys_ioctl+0x73/0xb0 [ 484.115421][T22504] do_syscall_64+0x103/0x610 [ 484.120008][T22504] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.125878][T22504] RIP: 0033:0x457f29 [ 484.129759][T22504] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.149344][T22504] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.157732][T22504] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 484.165681][T22504] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 484.173632][T22504] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.181581][T22504] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 484.189530][T22504] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 484.212461][T22504] Bluetooth: Can't allocate HCI device 15:52:59 executing program 2 (fault-call:2 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 484.353103][T22627] FAULT_INJECTION: forcing a failure. [ 484.353103][T22627] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 484.366433][T22627] CPU: 0 PID: 22627 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 484.375107][T22627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 484.385164][T22627] Call Trace: [ 484.388471][T22627] dump_stack+0x172/0x1f0 [ 484.392815][T22627] should_fail.cold+0xa/0x15 [ 484.397464][T22627] ? debug_smp_processor_id+0x3c/0x280 [ 484.397489][T22627] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 484.408801][T22627] ? __lock_acquire+0x548/0x3fb0 [ 484.408820][T22627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.408864][T22627] should_fail_alloc_page+0x50/0x60 [ 484.419991][T22627] __alloc_pages_nodemask+0x1a1/0x7e0 [ 484.420015][T22627] ? __alloc_pages_slowpath+0x2900/0x2900 [ 484.420029][T22627] ? find_held_lock+0x35/0x130 [ 484.420054][T22627] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 484.420075][T22627] cache_grow_begin+0x9c/0x860 [ 484.430616][T22627] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 484.430641][T22627] kmem_cache_alloc_trace+0x67f/0x760 [ 484.430670][T22627] hci_alloc_dev+0x43/0x1d00 [ 484.430690][T22627] hci_uart_tty_ioctl+0x2d7/0xb00 [ 484.472850][T22627] tty_ioctl+0xac9/0x14d0 [ 484.477202][T22627] ? hci_uart_init_work+0x150/0x150 [ 484.482409][T22627] ? tty_register_device+0x40/0x40 [ 484.487616][T22627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 484.493960][T22627] ? tomoyo_init_request_info+0x105/0x1d0 [ 484.499689][T22627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.506026][T22627] ? tomoyo_path_number_perm+0x263/0x520 [ 484.511670][T22627] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 484.517496][T22627] ? __fget+0x35a/0x550 [ 484.521686][T22627] ? tty_register_device+0x40/0x40 [ 484.526806][T22627] do_vfs_ioctl+0xd6e/0x1390 [ 484.531410][T22627] ? ioctl_preallocate+0x210/0x210 [ 484.536553][T22627] ? __fget+0x381/0x550 [ 484.540745][T22627] ? ksys_dup3+0x3e0/0x3e0 [ 484.545165][T22627] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 484.551412][T22627] ? fput_many+0x12c/0x1a0 [ 484.555847][T22627] ? tomoyo_file_ioctl+0x23/0x30 [ 484.560804][T22627] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 484.567062][T22627] ? security_file_ioctl+0x93/0xc0 [ 484.572195][T22627] ksys_ioctl+0xab/0xd0 [ 484.576367][T22627] __x64_sys_ioctl+0x73/0xb0 [ 484.580992][T22627] do_syscall_64+0x103/0x610 [ 484.585596][T22627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 484.591488][T22627] RIP: 0033:0x457f29 [ 484.595386][T22627] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 484.615369][T22627] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 484.623792][T22627] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 484.631776][T22627] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 484.639760][T22627] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 484.647739][T22627] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 484.656237][T22627] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 484.667067][T22500] bond0: Releasing backup interface bond_slave_1 15:53:00 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0xffffffffffffff28, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000002780010b000000000000000002000000"], 0x14}}, 0x0) ppoll(&(0x7f0000000080)=[{r0, 0x4000}, {r1, 0x8000}], 0x2, &(0x7f00000000c0)={0x77359400}, &(0x7f0000000100)={0x9}, 0x8) [ 484.856204][T22502] bond0: Releasing backup interface bond_slave_1 [ 484.871679][ T7] attempt to access beyond end of device [ 484.882799][ T7] loop1: rw=1, want=114, limit=112 [ 484.892558][ T7] buffer_io_error: 213 callbacks suppressed [ 484.892714][ T7] Buffer I/O error on dev loop1, logical block 113, lost async page write [ 484.915249][ T7] attempt to access beyond end of device [ 484.937418][ T7] loop1: rw=1, want=115, limit=112 [ 484.957577][ T7] Buffer I/O error on dev loop1, logical block 114, lost async page write [ 484.983407][ T7] attempt to access beyond end of device [ 485.003783][ T7] loop1: rw=1, want=116, limit=112 [ 485.022833][ T7] Buffer I/O error on dev loop1, logical block 115, lost async page write 15:53:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 485.051604][ T7] attempt to access beyond end of device [ 485.070516][ T7] loop1: rw=1, want=117, limit=112 [ 485.088676][ T7] Buffer I/O error on dev loop1, logical block 116, lost async page write [ 485.097480][ T7] attempt to access beyond end of device [ 485.103203][ T7] loop1: rw=1, want=130, limit=112 [ 485.108473][ T7] Buffer I/O error on dev loop1, logical block 129, lost async page write [ 485.117203][ T7] attempt to access beyond end of device [ 485.122933][ T7] loop1: rw=1, want=131, limit=112 [ 485.128188][ T7] Buffer I/O error on dev loop1, logical block 130, lost async page write [ 485.137022][ T7] attempt to access beyond end of device [ 485.142733][ T7] loop1: rw=1, want=132, limit=112 [ 485.147985][ T7] Buffer I/O error on dev loop1, logical block 131, lost async page write [ 485.156613][ T7] attempt to access beyond end of device [ 485.163683][T22505] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 485.168753][ T7] loop1: rw=1, want=133, limit=112 [ 485.177615][T22509] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 485.185195][ T7] Buffer I/O error on dev loop1, logical block 132, lost async page write 15:53:00 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(0xffffffffffffffff, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:00 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0x0, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 485.197038][ T7] attempt to access beyond end of device [ 485.204678][T22520] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 485.221584][ T7] loop1: rw=1, want=149, limit=112 15:53:00 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 485.243433][ T7] attempt to access beyond end of device [ 485.249907][ T7] loop1: rw=1, want=150, limit=112 [ 485.272770][ T7] Buffer I/O error on dev loop1, logical block 149, lost async page write 15:53:00 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x0, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 485.322763][T22697] bond0: Releasing backup interface bond_slave_1 [ 485.330516][ T7] attempt to access beyond end of device [ 485.340435][ T7] loop1: rw=1, want=151, limit=112 [ 485.346840][ T7] Buffer I/O error on dev loop1, logical block 150, lost async page write [ 485.357810][ T7] attempt to access beyond end of device [ 485.363595][ T7] loop1: rw=1, want=152, limit=112 [ 485.370255][ T7] attempt to access beyond end of device [ 485.376645][ T7] loop1: rw=1, want=153, limit=112 [ 485.381888][ T7] attempt to access beyond end of device [ 485.407569][ T7] loop1: rw=1, want=182, limit=112 [ 485.422129][ T7] attempt to access beyond end of device [ 485.445263][ T7] loop1: rw=1, want=183, limit=112 [ 485.451488][ T7] attempt to access beyond end of device [ 485.458193][ T7] loop1: rw=1, want=184, limit=112 [ 485.464040][ T7] attempt to access beyond end of device [ 485.470562][ T7] loop1: rw=1, want=185, limit=112 [ 485.476597][ T7] attempt to access beyond end of device [ 485.482997][ T7] loop1: rw=1, want=206, limit=112 [ 485.489035][ T7] attempt to access beyond end of device [ 485.495656][ T7] loop1: rw=1, want=207, limit=112 [ 485.501564][ T7] attempt to access beyond end of device [ 485.508083][ T7] loop1: rw=1, want=208, limit=112 [ 485.513920][ T7] attempt to access beyond end of device [ 485.521674][ T7] loop1: rw=1, want=209, limit=112 [ 485.527286][ T7] attempt to access beyond end of device [ 485.533010][ T7] loop1: rw=1, want=258, limit=112 [ 485.538795][ T7] attempt to access beyond end of device [ 485.544503][ T7] loop1: rw=1, want=259, limit=112 [ 485.550114][ T7] attempt to access beyond end of device [ 485.556277][ T7] loop1: rw=1, want=260, limit=112 [ 485.561626][ T7] attempt to access beyond end of device [ 485.567921][ T7] loop1: rw=1, want=261, limit=112 [ 485.574372][ T7] attempt to access beyond end of device [ 485.581645][ T7] loop1: rw=1, want=645, limit=112 [ 485.641869][T22709] bond0: Releasing backup interface bond_slave_1 [ 485.827184][T22701] bond0: Releasing backup interface bond_slave_1 15:53:01 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:01 executing program 4: sched_setscheduler(0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x1, 0x2) write$FUSE_NOTIFY_RETRIEVE(r0, &(0x7f00000000c0)={0xffffffffffffffd3, 0x12, 0x100000000000000}, 0xfffffefd) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x32, 0xffffffffffffffff, 0x0) write$P9_RLCREATE(r0, &(0x7f00000002c0)={0x18}, 0x18) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0x11}, @val={0x2, 0x0, 0xfffffffffffffffe, 0x7c, 0x3ff, 0x8}, @mpls={[{0x2, 0x9, 0x6e6, 0xffffffffffff8001}, {0x9, 0x200, 0x40, 0x9}, {0x5, 0xbba3}, {0x46, 0xffffffffffffff31, 0x1, 0x5}, {0x5, 0x7, 0xf3, 0x4}], @ipv6={0x0, 0x6, "3587c2", 0x484, 0x3c, 0x61, @remote, @ipv4={[], [], @rand_addr=0x400}, {[@hopopts={0x29, 0x0, [], [@pad1]}, @hopopts={0x1, 0x7, [], [@hao={0xc9, 0x10, @local}, @hao={0xc9, 0x10, @dev={0xfe, 0x80, [], 0x13}}, @calipso={0x7, 0x18, {0x200, 0x4, 0x100, 0xc1d, [0x5c, 0xfffffffffffff39f]}}]}, @srh={0xae, 0x4, 0x4, 0x2, 0x0, 0x40, 0x200000, [@ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}, @rand_addr="ad362cdf5401f2ac5803f6df23e5f764"]}, @dstopts={0x6, 0x25, [], [@pad1, @generic={0x4, 0xa9, "1ef55c5a120b556ca6ed554a211f031c592b70995e2089e4d01c72bc4c6bb4e43eb1f00626d600cf4f285f365eb3a4d0d815c0c5ff34e80737ec14bb989fbad57138f617b06aa026680b1dfba11a5623a4c0cd33063a78a13859f338b67fdea21f86896d83babdb7b606f755af4cec3b16d4877e2a64e89c069b40577469b84760c44ce8b86ee012b81c648e260f350d4d143825962703c9575b9988319cf19abae5f063fb1c14d8ad"}, @hao={0xc9, 0x10, @rand_addr="e86253e0fab388c7243b3e60da0f2db8"}, @pad1, @enc_lim={0x4, 0x1, 0x2}, @padn={0x1, 0x4, [0x0, 0x0, 0x0, 0x0]}, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x50, {0x1, 0x12, 0x3, 0x4, [0x2, 0x1000, 0x3, 0x7, 0x3, 0x7, 0x101, 0x7, 0x3c537235]}}]}, @dstopts={0x3c, 0xa, [], [@generic={0x1, 0x25, "55da33700737783bfff9d4bc4bc4fd3a0ed6d4a0a2b617db25a33dac13c9ab4eccb103fbd2"}, @jumbo, @pad1, @enc_lim, @pad1, @jumbo={0xc2, 0x4, 0x7}, @pad1, @padn={0x1, 0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x2}]}, @fragment={0x0, 0x0, 0x7fffffff, 0x100000000, 0x0, 0x5, 0x68}], @icmpv6=@ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x100, 0x1286, 0x1, [{0x3f}, {0x1f, 0x12, "8df098d1463e2f4ef2d8b3c138309ea5cb2d471eb929c76a6b3c9cf9db0719f1bf7f23c5c2e9108a71aa9920df0ef02233702b3407ca358de4f2af0121781ffdd643359305bdb16819608fe7d11621a12992a353abcf6684fcf547e6c14cca4afc6bda6d293916403953529268eceef48439ced36d713481066e8dcd2804b697b7dcba099d54d589224fed6441ca13"}, {0x1f, 0x5, "409688c564474d7769b7c1ffd82d20b2f6a82b583e9307bb3b4b29af01bf7a40e6ddbaa3929f20"}, {0x3f, 0x6, "8c77a7c0c4e1078339a269a859dd05aa2e89ff2fdee5f77bc983781ee4d52b180d79f605e7103db33ecc2cd286997c2c53bffec5"}, {0x3, 0xe, "dce16e344dbdcbd780b7d1874cccec78b80e40c452b7b5a273e77e207233f1a927f455079407a1ef26d1ac900ceaf09449c63782f7bd13ec75aa474501563e2831ad2c4aea7b5b292dc17bc074f917186d08bc5c0e83064ec8e33f32ba76c62758352c9ddd658df5f05e517f992d61bf"}, {0x5, 0x19, "7b25a6ab839d517e81ac5a6da5287481b005bb618cf3766a4cbe50c0027a6c2fc4ca0c3afc99ee48fb138dd643909db97868cb7dd42d6ea1f17ef1941e6fc99c2a9a98ef8ca11be4c4031132da4adabede97fc540d04a002d964f7e18265c5b731c7857e946583be9a15c70ce506f1ce557c56b133dab84cc37e684d62cbdf323c3295a6111312e24f221ac7a3c9aec99321fe2bea09683b9c734dcd76e98911975d07d3b81e986c690892707e077e482b1093b81c3ae86e8b9e32ae7af7a2bb8ad8a0f82c98d6a1a01dbd"}, {0x3, 0x5, "4518085a9c740ef1d018c873c13a1de2bbc29a597bb45473363247b612d3eaa32c3c3016324e7bceb4"}]}}}}}, 0x4ce) 15:53:01 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0x0, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 486.160425][T22741] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 486.170977][T22742] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 486.181625][T22743] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:01 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 486.269120][T22858] bond0: Releasing backup interface bond_slave_1 15:53:01 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 486.695031][ T7751] Bluetooth: hci0: command 0xfc11 tx timeout [ 486.701236][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) 15:53:02 executing program 2 (fault-call:2 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 486.852871][T23082] FAULT_INJECTION: forcing a failure. [ 486.852871][T23082] name failslab, interval 1, probability 0, space 0, times 0 [ 486.880435][T23082] CPU: 1 PID: 23082 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 486.889252][T23082] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 486.899305][T23082] Call Trace: [ 486.902600][T23082] dump_stack+0x172/0x1f0 [ 486.906937][T23082] should_fail.cold+0xa/0x15 [ 486.911526][T23082] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 486.917342][T23082] ? ___might_sleep+0x163/0x280 [ 486.922283][T23082] __should_failslab+0x121/0x190 [ 486.927221][T23082] should_failslab+0x9/0x14 [ 486.931725][T23082] __kmalloc+0x2dc/0x740 [ 486.936049][T23082] ? alloc_workqueue+0x13c/0xe70 [ 486.941001][T23082] alloc_workqueue+0x13c/0xe70 [ 486.945863][T23082] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 486.951578][T23082] ? scnprintf+0x140/0x140 [ 486.956091][T23082] ? kmem_cache_alloc_trace+0x354/0x760 [ 486.961636][T23082] hci_register_dev+0x1b8/0x860 [ 486.966491][T23082] ? __raw_spin_lock_init+0x2d/0x100 [ 486.971776][T23082] hci_uart_tty_ioctl+0x766/0xb00 [ 486.976815][T23082] tty_ioctl+0xac9/0x14d0 [ 486.981141][T23082] ? hci_uart_init_work+0x150/0x150 [ 486.986350][T23082] ? tty_register_device+0x40/0x40 [ 486.991490][T23082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 486.997728][T23082] ? tomoyo_init_request_info+0x105/0x1d0 [ 487.003461][T23082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.009699][T23082] ? tomoyo_path_number_perm+0x263/0x520 [ 487.015329][T23082] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 487.021151][T23082] ? __fget+0x35a/0x550 [ 487.025312][T23082] ? tty_register_device+0x40/0x40 [ 487.030509][T23082] do_vfs_ioctl+0xd6e/0x1390 [ 487.035188][T23082] ? ioctl_preallocate+0x210/0x210 [ 487.040293][T23082] ? __fget+0x381/0x550 [ 487.044454][T23082] ? ksys_dup3+0x3e0/0x3e0 [ 487.048865][T23082] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 487.055094][T23082] ? fput_many+0x12c/0x1a0 [ 487.059512][T23082] ? tomoyo_file_ioctl+0x23/0x30 [ 487.064443][T23082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.070680][T23082] ? security_file_ioctl+0x93/0xc0 [ 487.075788][T23082] ksys_ioctl+0xab/0xd0 [ 487.079944][T23082] __x64_sys_ioctl+0x73/0xb0 [ 487.084530][T23082] do_syscall_64+0x103/0x610 [ 487.089120][T23082] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.095005][T23082] RIP: 0033:0x457f29 [ 487.098894][T23082] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.118507][T23082] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.126918][T23082] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 487.134884][T23082] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 487.142845][T23082] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 487.150814][T23082] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 487.158781][T23082] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 487.167144][ C1] net_ratelimit: 18 callbacks suppressed [ 487.167155][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.178601][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.184428][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.190242][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.208624][T23082] Bluetooth: Can't register HCI device [ 487.248783][T22862] bond0: Releasing backup interface bond_slave_1 [ 487.264955][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.270765][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.361418][T22865] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 487.371673][T22870] bond0: Releasing backup interface bond_slave_1 [ 487.489893][T22967] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 487.500903][T22970] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:02 executing program 1: r0 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x28000, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000bfd000/0x400000)=nil, &(0x7f0000d2b000/0x4000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ddd000/0x1000)=nil, &(0x7f0000c52000/0x2000)=nil, &(0x7f0000d48000/0x3000)=nil, &(0x7f0000fa7000/0xc000)=nil, &(0x7f0000dbf000/0x4000)=nil, &(0x7f0000c22000/0x4000)=nil, &(0x7f0000be9000/0x1000)=nil, &(0x7f0000000280)="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", 0x1000, r0}, 0x68) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) mremap(&(0x7f0000a94000/0x1000)=nil, 0x1000, 0x200000, 0x3, &(0x7f0000b1c000/0x200000)=nil) 15:53:02 executing program 2 (fault-call:2 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:02 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:02 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:02 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0x0, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 487.578867][T23088] bond0: Releasing backup interface bond_slave_1 [ 487.607299][T23090] FAULT_INJECTION: forcing a failure. [ 487.607299][T23090] name failslab, interval 1, probability 0, space 0, times 0 [ 487.652922][T23090] CPU: 1 PID: 23090 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 487.661659][T23090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 487.671715][T23090] Call Trace: [ 487.675033][T23090] dump_stack+0x172/0x1f0 [ 487.679385][T23090] should_fail.cold+0xa/0x15 [ 487.684001][T23090] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 487.689842][T23090] ? ___might_sleep+0x163/0x280 [ 487.694710][T23090] __should_failslab+0x121/0x190 [ 487.699654][T23090] should_failslab+0x9/0x14 [ 487.704156][T23090] kmem_cache_alloc_trace+0x2d1/0x760 [ 487.709593][T23090] ? rcu_read_lock_sched_held+0x110/0x130 [ 487.715313][T23090] ? __kmalloc+0x5d5/0x740 [ 487.719739][T23090] alloc_workqueue_attrs+0x82/0x120 [ 487.724942][T23090] alloc_workqueue+0x166/0xe70 [ 487.729722][T23090] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 487.735446][T23090] ? scnprintf+0x140/0x140 [ 487.739879][T23090] ? kmem_cache_alloc_trace+0x354/0x760 [ 487.745437][T23090] hci_register_dev+0x1b8/0x860 [ 487.750290][T23090] ? __raw_spin_lock_init+0x2d/0x100 [ 487.755593][T23090] hci_uart_tty_ioctl+0x766/0xb00 [ 487.760630][T23090] tty_ioctl+0xac9/0x14d0 [ 487.764966][T23090] ? hci_uart_init_work+0x150/0x150 [ 487.770172][T23090] ? tty_register_device+0x40/0x40 [ 487.775371][T23090] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 487.781619][T23090] ? tomoyo_init_request_info+0x105/0x1d0 [ 487.787345][T23090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.793593][T23090] ? tomoyo_path_number_perm+0x263/0x520 15:53:03 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 487.799231][T23090] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 487.805051][T23090] ? __fget+0x35a/0x550 [ 487.809215][T23090] ? tty_register_device+0x40/0x40 [ 487.814332][T23090] do_vfs_ioctl+0xd6e/0x1390 [ 487.818936][T23090] ? ioctl_preallocate+0x210/0x210 [ 487.824572][T23090] ? __fget+0x381/0x550 [ 487.828865][T23090] ? ksys_dup3+0x3e0/0x3e0 [ 487.833367][T23090] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 487.839620][T23090] ? fput_many+0x12c/0x1a0 [ 487.844145][T23090] ? tomoyo_file_ioctl+0x23/0x30 [ 487.849095][T23090] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 487.855351][T23090] ? security_file_ioctl+0x93/0xc0 [ 487.860564][T23090] ksys_ioctl+0xab/0xd0 [ 487.864740][T23090] __x64_sys_ioctl+0x73/0xb0 [ 487.869339][T23090] do_syscall_64+0x103/0x610 [ 487.873938][T23090] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 487.879811][T23090] RIP: 0033:0x457f29 [ 487.883686][T23090] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 487.903288][T23090] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.911697][T23090] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 487.919663][T23090] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 487.927653][T23090] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 487.935630][T23090] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 487.943609][T23090] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 15:53:03 executing program 2 (fault-call:2 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 487.951841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 487.957785][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 487.974962][T23090] Bluetooth: Can't register HCI device [ 488.050605][T23211] FAULT_INJECTION: forcing a failure. [ 488.050605][T23211] name failslab, interval 1, probability 0, space 0, times 0 [ 488.067239][T23211] CPU: 1 PID: 23211 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 488.075942][T23211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 488.085997][T23211] Call Trace: [ 488.089298][T23211] dump_stack+0x172/0x1f0 [ 488.093635][T23211] should_fail.cold+0xa/0x15 [ 488.098240][T23211] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 488.104144][T23211] ? ___might_sleep+0x163/0x280 [ 488.109002][T23211] __should_failslab+0x121/0x190 [ 488.113947][T23211] should_failslab+0x9/0x14 [ 488.118449][T23211] __kmalloc_track_caller+0x2d8/0x740 [ 488.123818][T23211] ? pointer+0x910/0x910 [ 488.128055][T23211] ? set_precision+0x180/0x180 [ 488.132821][T23211] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 488.138515][T23211] ? kasprintf+0xbb/0xf0 [ 488.142769][T23211] kvasprintf+0xc8/0x170 [ 488.147008][T23211] ? bust_spinlocks+0xe0/0xe0 [ 488.151689][T23211] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 488.157411][T23211] ? find_next_bit+0x107/0x130 [ 488.162177][T23211] kasprintf+0xbb/0xf0 [ 488.166242][T23211] ? kvasprintf_const+0x190/0x190 [ 488.171276][T23211] ? kasan_check_read+0x11/0x20 [ 488.176137][T23211] alloc_workqueue+0x442/0xe70 [ 488.180914][T23211] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 488.186650][T23211] ? kmem_cache_alloc_trace+0x354/0x760 [ 488.192233][T23211] hci_register_dev+0x1b8/0x860 [ 488.197081][T23211] ? __raw_spin_lock_init+0x2d/0x100 [ 488.202374][T23211] hci_uart_tty_ioctl+0x766/0xb00 [ 488.207401][T23211] tty_ioctl+0xac9/0x14d0 [ 488.211740][T23211] ? hci_uart_init_work+0x150/0x150 [ 488.216939][T23211] ? tty_register_device+0x40/0x40 [ 488.222050][T23211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 488.228292][T23211] ? tomoyo_init_request_info+0x105/0x1d0 [ 488.234034][T23211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 488.240358][T23211] ? tomoyo_path_number_perm+0x263/0x520 [ 488.245990][T23211] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 488.251809][T23211] ? __fget+0x35a/0x550 [ 488.255971][T23211] ? tty_register_device+0x40/0x40 [ 488.261081][T23211] do_vfs_ioctl+0xd6e/0x1390 [ 488.265762][T23211] ? ioctl_preallocate+0x210/0x210 [ 488.270871][T23211] ? __fget+0x381/0x550 [ 488.275030][T23211] ? ksys_dup3+0x3e0/0x3e0 [ 488.279453][T23211] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 488.285686][T23211] ? fput_many+0x12c/0x1a0 [ 488.290107][T23211] ? tomoyo_file_ioctl+0x23/0x30 [ 488.295061][T23211] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 488.301300][T23211] ? security_file_ioctl+0x93/0xc0 [ 488.306412][T23211] ksys_ioctl+0xab/0xd0 [ 488.310571][T23211] __x64_sys_ioctl+0x73/0xb0 [ 488.315204][T23211] do_syscall_64+0x103/0x610 [ 488.319895][T23211] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 488.325779][T23211] RIP: 0033:0x457f29 [ 488.329675][T23211] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 488.349272][T23211] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 488.357679][T23211] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 488.365646][T23211] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 488.373700][T23211] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 488.381666][T23211] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 488.389650][T23211] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 488.398149][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 488.403957][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 488.449927][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 488.462491][ T7] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:03 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 488.498676][T23096] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 488.511769][T23093] bond0: Releasing backup interface bond_slave_1 [ 488.635998][T23098] bond0: Releasing backup interface bond_slave_1 [ 488.767451][T23202] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:04 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:04 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x0, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:04 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 488.807877][T23203] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 488.839921][T23216] bond0: Releasing backup interface bond_slave_1 15:53:04 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) statfs(0x0, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f00000003c0)={0x0, r0, 0x1000, 0x1, 0x1f, 0x3}) fstat(r0, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000001740)='./file0\x00', &(0x7f0000001780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001800)={0x0, 0x0, 0x0}, &(0x7f0000001840)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000001880)={{{@in6=@mcast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@dev}}, &(0x7f0000001980)=0xe8) mount$9p_rdma(&(0x7f0000001600)='127.0.0.1\x00', &(0x7f0000001640)='./file0\x00', &(0x7f0000001680)='9p\x00', 0x2080020, &(0x7f00000019c0)={'trans=rdma,', {'port', 0x3d, 0x4e24}, 0x2c, {[{@sq={'sq', 0x3d, 0x91cc}}, {@sq={'sq', 0x3d, 0x9ae}}, {@sq={'sq', 0x3d, 0x8}}, {@rq={'rq', 0x3d, 0x9f}}, {@sq={'sq', 0x3d, 0x5}}], [{@fowner_lt={'fowner<', r1}}, {@uid_gt={'uid>', r2}}, {@euid_gt={'euid>', r4}}, {@mask={'mask', 0x3d, '^MAY_APPEND'}}, {@hash='hash'}, {@fsuuid={'fsuuid', 0x3d, {[0x62, 0x77, 0x66, 0x34, 0x77, 0x63, 0x30, 0x32], 0x2d, [0x75, 0x66, 0x34, 0x66], 0x2d, [0x37, 0x71, 0x0, 0x65], 0x2d, [0x39, 0x63, 0x31, 0x63], 0x2d, [0x7d, 0x32, 0x71, 0x33, 0x36, 0x37, 0x38, 0x66]}}}, {@fsmagic={'fsmagic', 0x3d, 0x3ff}}, {@fsmagic={'fsmagic', 0x3d, 0xfffffffffffffffb}}, {@euid_gt={'euid>', r6}}]}}) r7 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000001440)='big_key\x00', &(0x7f0000001480)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000015c0)={0x0, 0x0, 0x0}, &(0x7f0000001b80)=0xc) add_key$keyring(&(0x7f00000014c0)='keyring\x00', &(0x7f0000001500)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffe) r9 = request_key(&(0x7f0000001540)='cifs.spnego\x00', &(0x7f0000001580)={'syz', 0x1}, &(0x7f0000001b40)='rq', 0xffffffffffffffff) add_key(&(0x7f0000000000)='user\x00', 0x0, &(0x7f00000000c0)="3058020af10cb8b56c96d27c44d58e94ea51a7dfc59e92e80d9482ca7839173a8f1143a711f5a939b4fd0072693a46c08df6616dd21be3453ecf73039a20f43acbc5376139a9070ae27dd847474d1e59b2697801e6ebd80f75ca", 0x5a, r9) getsockopt$packet_buf(r7, 0x107, 0xf, &(0x7f0000000400)=""/4096, &(0x7f0000001400)=0x1000) prctl$PR_MPX_ENABLE_MANAGEMENT(0x2b) getresuid(&(0x7f0000000300), 0x0, 0x0) fsetxattr$system_posix_acl(r0, &(0x7f0000001bc0)='system.posix_acl_access\x00', &(0x7f0000001c00)={{}, {0x1, 0x7}, [{0x2, 0x1, r1}, {0x2, 0x0, r4}], {0x4, 0x3}, [{0x8, 0x3, r5}, {0x8, 0x0, r3}, {0x8, 0x1, r8}, {0x8, 0x7, r5}, {0x8, 0x0, r3}, {0x8, 0x4, r8}, {0x8, 0x6, r3}, {0x8, 0x2, r5}, {0x8, 0x1, r5}], {0x10, 0x1}, {0x20, 0x7}}, 0x7c, 0x3) getsockopt$inet_IP_XFRM_POLICY(r7, 0x0, 0x11, &(0x7f0000002940)={{{@in6=@mcast1, @in=@initdev}}, {{@in=@multicast1}, 0x0, @in6=@loopback}}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000380), &(0x7f0000006080)=0xc) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r7, 0x84, 0x6c, &(0x7f0000000040)={0x0, 0x11, "e228d31ccb15c86531e73a2d1b3685b744"}, &(0x7f0000000080)=0x19) fsetxattr$security_evm(r7, &(0x7f0000001c80)='security.evm\x00', &(0x7f0000001cc0)=@ng={0x4, 0x1, "595b4d2a76c0bc88"}, 0xa, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r7, 0x84, 0x18, &(0x7f0000000140)={0x0, 0x7f}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r7, 0x84, 0xe, &(0x7f0000000240)={r10, 0x0, 0x1000, 0x2, 0x5, 0x9, 0x0, 0x4, {r11, @in={{0x2, 0x4e21, @broadcast}}, 0xf988, 0x1000, 0xfffffffffffffffc, 0xd, 0x7fff800000}}, &(0x7f0000000340)=0xb0) 15:53:04 executing program 1: perf_event_open(&(0x7f000001d000)={0x200000000001, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x600, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r0, 0xc0305602, &(0x7f0000000080)={0x0, 0x3ff, 0x7013}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$nfc_llcp(r0, 0x118, 0x7, &(0x7f0000000280)=""/128, 0x80) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000300)=0x3) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000000)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00 \x00'}) fadvise64(0xffffffffffffffff, 0x0, 0x10001, 0x3) ioctl$VIDIOC_SUBSCRIBE_EVENT(r0, 0x4020565a, &(0x7f00000000c0)={0x8001001, 0x3, 0x1}) syz_open_dev$radio(0x0, 0x3, 0x2) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f0000000240)={0x3, [0x401, 0x9, 0x5]}, 0xa) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x0, @mcast2, 0x2}}, 0x7, 0x7eda, 0x9, 0x4, 0x81}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000200)={r2}, 0x8) [ 489.301886][T23217] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 489.311876][T23223] bond0: Releasing backup interface bond_slave_1 15:53:04 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:05 executing program 4: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) fcntl$setstatus(r1, 0x4, 0x42000) mmap(&(0x7f0000077000/0x4000)=nil, 0x4000, 0x0, 0x12, r1, 0x0) setsockopt$sock_int(r1, 0x1, 0xa, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000080)={&(0x7f0000077000/0x3000)=nil, 0x3000}, &(0x7f00000000c0)=0x10) [ 489.736608][T23224] bond0: Releasing backup interface bond_slave_1 15:53:05 executing program 4: ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffff9c}) getsockopt$inet_dccp_int(r0, 0x21, 0x13, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f0000000040)=0x72, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000b86000)={0x1, &(0x7f0000f40ff8)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r1, 0x0, 0x47, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) pipe2(&(0x7f0000000100)={0xffffffffffffffff}, 0x84800) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f0000000140)={0x0, 0x0, 0x57}) r5 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0x40080, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r3, 0xc00c642e, &(0x7f0000000200)={r4, 0x80000, r5}) write$binfmt_script(r1, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x330) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000280)=0xda9, 0x4) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000ec0)="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", 0x53c}], 0x1) [ 489.840926][T23228] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 489.853237][T23276] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:05 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x0, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:05 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 489.890334][T23341] bond0: Releasing backup interface bond_slave_1 [ 490.052152][T23345] bond0: Releasing backup interface bond_slave_1 [ 490.252189][T23346] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.276344][T23457] bond0: Releasing backup interface bond_slave_1 15:53:05 executing program 2 (fault-call:2 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:05 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000200)='/dev/hwrng\x00', 0x800, 0x0) write$FUSE_NOTIFY_DELETE(r0, &(0x7f0000000100)={0x34, 0x6, 0x0, {0x3, 0x2, 0xb, 0x0, '/dev/hwrng\x00'}}, 0x34) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x200001f5, &(0x7f0000000280)=@raw=[@generic={0x7e, 0x7ff, 0x2, 0x40, 0xff}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xeb0}, @call={0x85, 0x0, 0x0, 0x57}, @map={0x18, 0xf, 0x1, 0x0, r0}], &(0x7f0000000500)='GPL\x00', 0x8, 0xc3, &(0x7f00000002c0)=""/195, 0x0, 0x1}, 0x48) r1 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60, 0x800) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f00000000c0)) 15:53:05 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:05 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 490.435758][T23459] bond0: Releasing backup interface bond_slave_1 [ 490.455065][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 490.455224][ T3755] Bluetooth: hci0: command 0xfc11 tx timeout 15:53:05 executing program 1: r0 = socket$caif_stream(0x25, 0x1, 0x0) sendto(r0, 0x0, 0x621, 0x840, 0x0, 0xfffffe6a) [ 490.565814][T23576] FAULT_INJECTION: forcing a failure. [ 490.565814][T23576] name failslab, interval 1, probability 0, space 0, times 0 [ 490.586682][T23576] CPU: 0 PID: 23576 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 490.595397][T23576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 490.605478][T23576] Call Trace: [ 490.608777][T23576] dump_stack+0x172/0x1f0 [ 490.613124][T23576] should_fail.cold+0xa/0x15 [ 490.617720][T23576] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 490.623529][T23576] ? ___might_sleep+0x163/0x280 [ 490.628390][T23576] __should_failslab+0x121/0x190 [ 490.633432][T23576] should_failslab+0x9/0x14 [ 490.637930][T23576] __kmalloc_track_caller+0x2d8/0x740 [ 490.643295][T23576] ? pointer+0x910/0x910 [ 490.647563][T23576] ? set_precision+0x180/0x180 [ 490.652777][T23576] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 490.658416][T23576] ? kasprintf+0xbb/0xf0 [ 490.662667][T23576] kvasprintf+0xc8/0x170 [ 490.666907][T23576] ? bust_spinlocks+0xe0/0xe0 [ 490.671592][T23576] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 490.677314][T23576] ? find_next_bit+0x107/0x130 [ 490.682084][T23576] kasprintf+0xbb/0xf0 [ 490.686148][T23576] ? kvasprintf_const+0x190/0x190 [ 490.691179][T23576] ? kasan_check_read+0x11/0x20 [ 490.696038][T23576] alloc_workqueue+0x442/0xe70 [ 490.700808][T23576] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 490.706548][T23576] ? kmem_cache_alloc_trace+0x354/0x760 [ 490.712097][T23576] hci_register_dev+0x1b8/0x860 [ 490.717054][T23576] ? __raw_spin_lock_init+0x2d/0x100 [ 490.722371][T23576] hci_uart_tty_ioctl+0x766/0xb00 [ 490.727408][T23576] tty_ioctl+0xac9/0x14d0 [ 490.731747][T23576] ? hci_uart_init_work+0x150/0x150 [ 490.736943][T23576] ? tty_register_device+0x40/0x40 [ 490.736960][T23576] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 490.736977][T23576] ? tomoyo_init_request_info+0x105/0x1d0 [ 490.737002][T23576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 490.755832][T23511] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.760246][T23576] ? tomoyo_path_number_perm+0x263/0x520 [ 490.760264][T23576] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 490.760291][T23576] ? __fget+0x35a/0x550 [ 490.784111][T23576] ? tty_register_device+0x40/0x40 [ 490.789235][T23576] do_vfs_ioctl+0xd6e/0x1390 [ 490.793837][T23576] ? ioctl_preallocate+0x210/0x210 [ 490.798962][T23576] ? __fget+0x381/0x550 [ 490.803117][T23576] ? ksys_dup3+0x3e0/0x3e0 [ 490.803133][T23576] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 490.803147][T23576] ? fput_many+0x12c/0x1a0 [ 490.803169][T23576] ? tomoyo_file_ioctl+0x23/0x30 [ 490.803188][T23576] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 490.823466][T23476] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 490.823856][T23576] ? security_file_ioctl+0x93/0xc0 [ 490.823878][T23576] ksys_ioctl+0xab/0xd0 [ 490.823902][T23576] __x64_sys_ioctl+0x73/0xb0 [ 490.852147][T23576] do_syscall_64+0x103/0x610 [ 490.856745][T23576] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 490.862635][T23576] RIP: 0033:0x457f29 [ 490.866527][T23576] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 490.886132][T23576] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 490.894544][T23576] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 490.902493][T23576] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 490.910443][T23576] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 490.918478][T23576] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 490.926435][T23576] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 15:53:06 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$loop(0x0, 0x0, 0x0) fcntl$getflags(0xffffffffffffffff, 0x0) sysinfo(&(0x7f00000007c0)=""/154) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000200)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000340)='./file0\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f00000003c0)=@known='com.apple.FinderInfo\x00', &(0x7f0000000400)='TIPC\x00', 0x5, 0x2) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000000)={0x8, 0x0, 0x10001, 0xffffffffffffffff}) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f0000000040)={0x7ff, r1, 0x10001, 0x40}) r2 = openat$cgroup_subtree(r0, &(0x7f00000001c0)='cgroup.subtree_control\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x6) write$cgroup_subtree(r2, &(0x7f00000000c0)={[{0x2d, 'pids'}]}, 0x6) r3 = accept4$inet(0xffffffffffffffff, 0x0, &(0x7f0000000480), 0x800) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x12) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$DRM_IOCTL_NEW_CTX(0xffffffffffffffff, 0x40086425, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(0xffffffffffffffff, 0x0, 0x0) madvise(&(0x7f000092d000/0x400000)=nil, 0x400000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup\x00', 0x200002, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, 0x0, 0x0) 15:53:06 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 490.966476][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 490.982993][T23574] bond0: Releasing backup interface bond_slave_1 15:53:06 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:06 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x0, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:06 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = syz_open_dev$media(&(0x7f0000000180)='/dev/media#\x00', 0x4, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r2, 0xc058534b, &(0x7f0000000400)={0x100400000000002, 0x3, 0x2, 0x9, 0x5, 0x80}) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000200)) ioctl$sock_kcm_SIOCKCMUNATTACH(r2, 0x89e1, 0x0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f00000001c0)) r3 = syz_open_dev$swradio(&(0x7f00000000c0)='/dev/swradio#\x00', 0xffffffffffffffff, 0x2) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f00000002c0), 0x4) move_pages(r1, 0x8, &(0x7f0000000040)=[&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000909000/0x2000)=nil, &(0x7f0000ff5000/0xa000)=nil, &(0x7f000090c000/0x2000)=nil, &(0x7f000090a000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000909000/0x4000)=nil], &(0x7f0000000100)=[0x0, 0x2, 0x5], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], 0x4) r4 = userfaultfd(0x0) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(0xffffffffffffffff, &(0x7f0000000240)='J', 0x1, 0x4004084, 0x0, 0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000380)={0xaa, 0x74}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000909000/0x4000)=nil, 0x4000}, 0x1}) read$alg(r3, &(0x7f0000000300)=""/33, 0x21) mremap(&(0x7f000090a000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffc000/0x2000)=nil) clone(0x10000000, 0x0, 0x0, 0x0, &(0x7f0000000700)="81d72e196c20ee9f41decbfaffffff1e682f6eb137ec89b3a397e60b56f6361265cf18665f2f5499363ab1c4763877db9ce245de0a2ae3cfc12510a2bf05c49e9dbbeef07acc4abf66d24fc0f522bd60c39e1dbb9d527d402177f9d69ef17e2410b468c50ed7846403df2efcc4e1b180c1c8862438008cfb35b3b81f5b9fec79f7115c") read(r4, &(0x7f0000009f9c)=""/100, 0x64) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000340)='IPVS\x00') bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={r2, 0x3, 0x1, 0x9, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6}, 0x20) sendmsg$IPVS_CMD_DEL_DEST(r4, &(0x7f00000004c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="000325bd7000fddbdf25070000e80c000600a2000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) ioctl$DRM_IOCTL_CONTROL(0xffffffffffffffff, 0x80489439, &(0x7f0000000080)) 15:53:06 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 491.365904][T23632] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 491.383892][T23692] bond0: Releasing backup interface bond_slave_1 [ 491.946894][T23693] bond0: Releasing backup interface bond_slave_1 15:53:07 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000025c0)='/dev/audio\x00', 0x20000, 0x0) getsockopt$inet_int(r2, 0x0, 0xd, &(0x7f0000002600), &(0x7f0000002640)=0x4) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="6a3f006ee2f588daae9243512a03002260aeea56f6d725a159ceb0179553c0afc05d79c25635e8c6c024a7ecf99a237e6ae63fa8d4d2a6b565e8053ee384e98a1b4d1d0000000000000000000000000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100", @ANYRES32=r3, @ANYBLOB="3c00020038000100240001006d636173745f72656a6f696e5f696e74657276616c000000000000000000000008000300020000000800040000000000"], 0x58}}, 0x0) [ 492.062694][T23694] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.073006][T23697] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.116347][T23698] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.156575][T23712] bond0: Releasing backup interface bond_slave_1 [ 492.349577][T23713] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 492.534936][ C1] net_ratelimit: 22 callbacks suppressed [ 492.534948][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 492.546692][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 492.614976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 492.620816][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:08 executing program 2 (fault-call:2 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:08 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:08 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:08 executing program 4: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000080)=0x9, 0x4) accept$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000000140)=0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newlink={0x3c, 0x10, 0x601, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @bond={{0xc, 0x1, 'bond\x00'}, {0xc, 0x2, [@IFLA_BOND_UPDELAY={0x8, 0x16}]}}}]}, 0x3c}}, 0x4) 15:53:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000480)='/dev/snapshot\x00', 0x200, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f00000004c0)) r1 = socket$l2tp(0x18, 0x1, 0x1) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000000080)="c239a26e9ec7094ae29aed5e08313d64bda2544146cfbafe", 0x18, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f00000003c0)={r2, 0x1, 0x80}, &(0x7f0000000400)={'enc=', 'oaep', ' hash=', {'crc32-generic\x00'}}, &(0x7f0000000540)="a7ca8b5f0b48fc097296bfda05b0d61aa8556a54970c7d8bc6087222e13e866b4bf752ab02de1b0cbcb443ff81cf84d57b56eacc9453bfe10500607c99ec114e3d9a0b66a5e2830a0477bf5453e823de5c6d68ef77571e0177adfe440749267c9ada185d6f06fb6683b1c778ff3268012b471470783332c44d2022283d6605f2eab59c298a8614b6f0d4e9f1a45715067baa8ca59822b7ffcbb2f5c5e36cc80fb85c91451b828c7361b801b13b98a89d4c4b42e77cc103fbc0f12f72439e748c98b0", &(0x7f0000000640)=""/140) r3 = socket$inet6_udp(0xa, 0x2, 0x0) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140)='TIPCv2\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_INFO(r4, 0xc10c5541, &(0x7f0000000700)={0x80000000, 0x3, 0x7, 0x0, 0x0, [], [], [], 0x7fffffff, 0x3}) sendmsg$TIPC_NL_LINK_SET(r4, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000340)={&(0x7f0000000200)={0x11c, r5, 0x200, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_LINK={0x80, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x76}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2e7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd88}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffffffff8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1cf5}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x10001}]}]}, 0x11c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) r6 = socket$l2tp(0x18, 0x1, 0x1) connect$l2tp(r6, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @multicast2}, 0x4}}, 0x2e) connect$l2tp(r1, &(0x7f0000000500)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {}, 0x4, 0x1}}, 0x2e) 15:53:08 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 493.014984][ T3755] Bluetooth: hci0: command 0xfc11 tx timeout [ 493.015059][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 493.080437][T23732] bond0: Releasing backup interface bond_slave_1 15:53:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffb000/0x3000)=nil) shmctl$IPC_STAT(0x0, 0x2, 0x0) socket$inet(0x2, 0x2, 0x2) r0 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000000)=ANY=[@ANYBLOB="0000000000000000000700000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000108000000000021855e9deea40c7b2dd716ee000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00"]) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200)=0x1, 0x8) ioctl$BLKGETSIZE64(0xffffffffffffffff, 0x80081272, &(0x7f0000000240)) write$RDMA_USER_CM_CMD_GET_EVENT(0xffffffffffffffff, 0x0, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r0, 0x10e, 0xa, &(0x7f0000000100)=0x2, 0x4) [ 493.145818][T23741] FAULT_INJECTION: forcing a failure. [ 493.145818][T23741] name failslab, interval 1, probability 0, space 0, times 0 [ 493.191843][T23741] CPU: 1 PID: 23741 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 493.200571][T23741] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.210630][T23741] Call Trace: [ 493.213935][T23741] dump_stack+0x172/0x1f0 [ 493.218283][T23741] should_fail.cold+0xa/0x15 [ 493.222899][T23741] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 493.228726][T23741] ? ___might_sleep+0x163/0x280 [ 493.233591][T23741] __should_failslab+0x121/0x190 [ 493.238540][T23741] should_failslab+0x9/0x14 [ 493.243045][T23741] kmem_cache_alloc_trace+0x2d1/0x760 [ 493.248421][T23741] ? rcu_read_lock_sched_held+0x110/0x130 [ 493.254151][T23741] ? __kmalloc+0x5d5/0x740 [ 493.258577][T23741] alloc_workqueue_attrs+0x82/0x120 [ 493.263797][T23741] apply_wqattrs_prepare+0xbb/0x970 [ 493.269096][T23741] apply_workqueue_attrs_locked+0xcb/0x140 [ 493.274918][T23741] apply_workqueue_attrs+0x31/0x50 [ 493.280032][T23741] alloc_workqueue+0x84c/0xe70 [ 493.284812][T23741] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 493.290548][T23741] ? kmem_cache_alloc_trace+0x354/0x760 [ 493.296111][T23741] hci_register_dev+0x1b8/0x860 [ 493.300967][T23741] ? __raw_spin_lock_init+0x2d/0x100 [ 493.306267][T23741] hci_uart_tty_ioctl+0x766/0xb00 [ 493.311297][T23741] tty_ioctl+0xac9/0x14d0 [ 493.315628][T23741] ? hci_uart_init_work+0x150/0x150 [ 493.320834][T23741] ? tty_register_device+0x40/0x40 [ 493.325943][T23741] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 493.332190][T23741] ? tomoyo_init_request_info+0x105/0x1d0 [ 493.337919][T23741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.344160][T23741] ? tomoyo_path_number_perm+0x263/0x520 [ 493.349802][T23741] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 493.355624][T23741] ? __fget+0x35a/0x550 [ 493.359785][T23741] ? tty_register_device+0x40/0x40 [ 493.364900][T23741] do_vfs_ioctl+0xd6e/0x1390 [ 493.369501][T23741] ? ioctl_preallocate+0x210/0x210 [ 493.374615][T23741] ? __fget+0x381/0x550 [ 493.378779][T23741] ? ksys_dup3+0x3e0/0x3e0 [ 493.383194][T23741] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 493.389434][T23741] ? fput_many+0x12c/0x1a0 [ 493.393942][T23741] ? tomoyo_file_ioctl+0x23/0x30 [ 493.398877][T23741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 493.405133][T23741] ? security_file_ioctl+0x93/0xc0 [ 493.410257][T23741] ksys_ioctl+0xab/0xd0 [ 493.414419][T23741] __x64_sys_ioctl+0x73/0xb0 [ 493.419018][T23741] do_syscall_64+0x103/0x610 [ 493.423630][T23741] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 493.429525][T23741] RIP: 0033:0x457f29 [ 493.433418][T23741] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 493.453022][T23741] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 493.461434][T23741] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 493.469404][T23741] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 493.477371][T23741] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 493.485343][T23741] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 493.493313][T23741] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 493.501653][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 493.507484][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 493.513318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 493.519165][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 493.525102][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 493.530889][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 493.550069][T23741] Bluetooth: Can't register HCI device 15:53:08 executing program 2 (fault-call:2 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:08 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440)='/dev/kvm\x00', 0x34300, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="15bd"]) r3 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000300)='/dev/video2\x00', 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) r4 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x1, 0x0) ioctl$KVM_CREATE_DEVICE(r3, 0xc00caee0, &(0x7f0000000340)={0x7, r1}) sendmsg$nl_generic(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000000c0)={&(0x7f00000001c0)={0x9c, 0x31, 0x704, 0x70bd2c, 0x25dfdbfc, {0x14}, [@generic="903791f2c2a5058e6d2da948768607fbaa0fec72dbad064ba9eacad8a35916cf4cd8ca63957b932be82d1186069b557afa4c31dfb932706a9fde0b851efddf8b00797945e8d837fc301af3055fd35325e66a24fd9c06df54cc9dcd378598", @generic="897dfa1a8d316d456c668a6eb1ba3d3c70f9dbb0c1e8b3e13b5987f020889761ebc6ad14e02b02e628"]}, 0x9c}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) 15:53:08 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, 0x0, &(0x7f00000000c0)) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = memfd_create(&(0x7f0000000240)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) pwritev(r1, &(0x7f0000000040)=[{&(0x7f00001f2000)="aa", 0x1}], 0x1, 0x800000) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x801, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f00000001c0), 0x4) bind$unix(r2, &(0x7f0000000100)=@abs={0x0, 0x0, 0x4e24}, 0x6e) getsockopt$inet_mreq(r2, 0x0, 0x27, &(0x7f0000000080)={@dev, @initdev}, &(0x7f0000000180)=0x8) sendfile(r0, r1, 0x0, 0x1ffe09) 15:53:09 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = open(&(0x7f00000000c0)='./bus\x00', 0x80042, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r1, 0x0) perf_event_open(&(0x7f000025c000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unlink(&(0x7f0000000080)='./bus\x00') getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0}, &(0x7f0000000180)=0xc) lstat(&(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000280), &(0x7f00000002c0), &(0x7f0000000300)=0x0) mount$9p_tcp(&(0x7f0000000000)='127.0.0.1\x00', &(0x7f0000000040)='./bus\x00', &(0x7f0000000100)='9p\x00', 0x2000, &(0x7f0000000340)={'trans=tcp,', {'port', 0x3d, 0x4e21}, 0x2c, {[{@version_9p2000='version=9p2000'}, {@cachetag={'cachetag'}}, {@cache_loose='cache=loose'}, {@access_client='access=client'}, {@dfltuid={'dfltuid', 0x3d, r2}}, {@access_client='access=client'}, {@version_L='version=9p2000.L'}, {@dfltuid={'dfltuid', 0x3d, r3}}, {@cache_mmap='cache=mmap'}], [{@fsmagic={'fsmagic', 0x3d, 0x80000000}}, {@uid_lt={'uid<', r4}}, {@mask={'mask', 0x3d, 'MAY_EXEC'}}]}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) [ 493.809550][T23768] FAULT_INJECTION: forcing a failure. [ 493.809550][T23768] name failslab, interval 1, probability 0, space 0, times 0 [ 493.875061][T23768] CPU: 0 PID: 23768 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 493.883870][T23768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 493.893917][T23768] Call Trace: [ 493.897293][T23768] dump_stack+0x172/0x1f0 [ 493.901613][T23768] should_fail.cold+0xa/0x15 [ 493.906219][T23768] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 493.912009][T23768] ? ___might_sleep+0x163/0x280 [ 493.916846][T23768] __should_failslab+0x121/0x190 [ 493.921764][T23768] should_failslab+0x9/0x14 [ 493.926246][T23768] kmem_cache_alloc_trace+0x2d1/0x760 [ 493.931595][T23768] ? rcu_read_lock_sched_held+0x110/0x130 [ 493.937292][T23768] ? __kmalloc+0x5d5/0x740 [ 493.941697][T23768] alloc_workqueue_attrs+0x82/0x120 [ 493.946877][T23768] apply_wqattrs_prepare+0xc8/0x970 [ 493.952068][T23768] apply_workqueue_attrs_locked+0xcb/0x140 [ 493.957859][T23768] apply_workqueue_attrs+0x31/0x50 [ 493.962964][T23768] alloc_workqueue+0x84c/0xe70 [ 493.967716][T23768] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 493.973425][T23768] ? kmem_cache_alloc_trace+0x354/0x760 [ 493.978953][T23768] hci_register_dev+0x1b8/0x860 [ 493.983781][T23768] ? __raw_spin_lock_init+0x2d/0x100 [ 493.989063][T23768] hci_uart_tty_ioctl+0x766/0xb00 [ 493.994073][T23768] tty_ioctl+0xac9/0x14d0 [ 493.998381][T23768] ? hci_uart_init_work+0x150/0x150 [ 494.003558][T23768] ? tty_register_device+0x40/0x40 [ 494.008663][T23768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 494.014886][T23768] ? tomoyo_init_request_info+0x105/0x1d0 [ 494.020584][T23768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.026801][T23768] ? tomoyo_path_number_perm+0x263/0x520 [ 494.032414][T23768] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 494.038215][T23768] ? __fget+0x35a/0x550 [ 494.042355][T23768] ? tty_register_device+0x40/0x40 [ 494.047450][T23768] do_vfs_ioctl+0xd6e/0x1390 [ 494.052026][T23768] ? ioctl_preallocate+0x210/0x210 [ 494.057142][T23768] ? __fget+0x381/0x550 [ 494.061285][T23768] ? ksys_dup3+0x3e0/0x3e0 [ 494.065679][T23768] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 494.071908][T23768] ? fput_many+0x12c/0x1a0 [ 494.076311][T23768] ? tomoyo_file_ioctl+0x23/0x30 [ 494.081316][T23768] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 494.087536][T23768] ? security_file_ioctl+0x93/0xc0 [ 494.092630][T23768] ksys_ioctl+0xab/0xd0 [ 494.096875][T23768] __x64_sys_ioctl+0x73/0xb0 [ 494.101450][T23768] do_syscall_64+0x103/0x610 [ 494.106025][T23768] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 494.111901][T23768] RIP: 0033:0x457f29 [ 494.115778][T23768] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 494.135376][T23768] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.143768][T23768] RAX: ffffffffffffffda RBX: 00007f664fe1fc90 RCX: 0000000000457f29 [ 494.151732][T23768] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 494.159691][T23768] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 494.167668][T23768] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 494.175619][T23768] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 0000000000000004 [ 494.203516][T23768] Bluetooth: Can't register HCI device 15:53:09 executing program 2 (fault-call:2 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 494.403744][T23731] bond0: Releasing backup interface bond_slave_1 15:53:09 executing program 4: r0 = memfd_create(&(0x7f0000000000)='+\x8b\x8a\x06\x00\x00\x00\xdfk(F\x99\xdf\x92\xd5>oT\x02u\x9b\x94a\xac', 0x5) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x40000, 0x0) ioctl$BLKIOOPT(r1, 0x1279, &(0x7f00000000c0)) lseek(r0, 0xffffffffffffffff, 0x3) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000180)=@filter={'filter\x00', 0xe, 0x4, 0x490, 0x3c0, 0xf0, 0x2a0, 0x0, 0x2a0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x3c0, 0x4, &(0x7f0000000140), {[{{@uncond, 0x0, 0xc8, 0xf0}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}, {{@uncond, 0x0, 0x188, 0x1b0, 0x0, {}, [@common=@unspec=@string={0xc0, 'string\x00', 0x1, {0x20, 0x4, 'bm\x00', "92ffcdce751fd2886aa9daaf489f12c1aa8ea3d85fde2fac7c1a5aa2404038edf2216025357065912a15dcb61064872d43013b44eb64e5aff12135d39f409dcf3a047a42c95bbefa6cb98ad4da0de78de7d27cf9c39f280ebe0b88057b348013e79a6c87dc56d4b182905e55811bbb11947f3dd9de6ced1022f17df15f25e007", 0x6, 0x3}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x100000000, 0x1}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@unspec=@realm={0x30, 'realm\x00', 0x0, {0x0, 0x1}}]}, @REJECT={0x28, 'REJECT\x00'}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4f0) ioctl$BLKALIGNOFF(r1, 0x127a, &(0x7f0000000100)) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000980)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x8002}, 0xc, &(0x7f0000000940)={&(0x7f0000000700)={0x204, r2, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x200}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK={0x144, 0x4, [@TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xad}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffffffffffe1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}]}, @TIPC_NLA_LINK_PROP={0x4c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x52}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK={0x7c, 0x4, [@TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffaac}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x400}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}]}, 0x204}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) openat$apparmor_task_exec(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/exec\x00', 0x2, 0x0) [ 494.712896][T23735] bond0: Releasing backup interface bond_slave_1 [ 494.959675][T23740] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 494.981511][T23743] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 495.027664][T23739] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:10 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:10 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$uid(0x3, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000200)="5fb88c750196077aa3214bebc13f7d74ad4d9320611cf5a33f2a3f09e1c926359dcfe2000ac781cb67f79cb0c6001000000000000076c22ad4d900000b00000069ec67906e7df93b05b19ba5360f2eab62812070fc181a2483366595113b240804d882a7dcd7ac4ba53e06d02558968b978122716d1823dcc7d40155c1bc1e8433f5ba15f5ee48c0ca941fce872e497d1377e2a5bde956f003caaf58c7520f82d7346c266e8ea70dab3bb7af6d78602a31ab8d232b07f6e3ef524b552ed88a1b1c02bc89f4f67185", 0xc8, 0x0, 0x0, 0x0) r0 = socket$pppoe(0x18, 0x1, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000100), 0x4) syz_open_dev$dspn(&(0x7f0000000440)='/dev/dsp#\x00', 0x4, 0x101a40) connect$pppoe(r0, &(0x7f00000000c0)={0x18, 0x0, {0x1, @local, 'team0\x00'}}, 0x1e) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000000)={'teql0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x12}}}) sendmmsg(r0, &(0x7f000000d180), 0x255, 0x0) semget$private(0x0, 0x3, 0x82) semctl$GETVAL(0x0, 0x4, 0xc, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x400452c8, 0x0) r2 = open(0x0, 0x0, 0x9) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x7f, &(0x7f0000000140), &(0x7f0000000180)=0x4) ioctl$DRM_IOCTL_GEM_FLINK(0xffffffffffffffff, 0xc008640a, &(0x7f0000000040)={0x0, 0x0}) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffff9c, 0xc010640b, &(0x7f0000000080)={0x0, 0x0, 0x400}) ioctl$DRM_IOCTL_GEM_OPEN(r2, 0xc010640b, &(0x7f00000000c0)={r3, r4}) 15:53:10 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:10 executing program 1: write$FUSE_NOTIFY_INVAL_INODE(0xffffffffffffffff, &(0x7f0000000080)={0x28}, 0x28) r0 = socket$inet6(0xa, 0x3, 0x7) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$CAPI_MANUFACTURER_CMD(r1, 0xc0104320, &(0x7f0000000040)={0x8, &(0x7f0000000140)="20c027268df30bbd71b62829ef4995a4330a9fb3b0e96d111e5b50521d834cf4cd8b20cc43752643f45a392cb83135ae37089590a22ffda71a8c3263cc1f393ac3e329d1b472e61db2f6b0d8d9c871407320056458055f885e1338c49d12855e16dcdea97586efd5fbe922fd1215acbac704af26048a9f3047736652a1b0615e7927e68f4b68ba02322a887e45813303d1365fa77cdfdb2cc62fabfe7919b5555af8e73f796b2e0bd449f6fa63a0131fd09266440985919145bc098c2df915ef4ea401313ec4b4947c199c406d3d4d31"}) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) recvmsg(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=""/36, 0x12}, 0x0) sendmmsg(r0, &(0x7f00000002c0), 0x40000000000001c, 0x0) 15:53:10 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c00000010000106100000000000000000000200", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c00020008000500ffffffff"], 0x3c}}, 0x0) [ 495.176561][T23789] bond0: Releasing backup interface bond_slave_1 15:53:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:10 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x8a8, 0x80000) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) recvfrom$packet(r1, &(0x7f0000000040)=""/2, 0x2, 0x10000, &(0x7f0000000140)={0x11, 0xff, r2, 0x1, 0x1, 0x6, @remote}, 0x14) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:10 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 495.633404][ T29] Bluetooth: hci0: Frame reassembly failed (-84) [ 495.669157][ T29] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:11 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 495.961284][T23801] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 495.971931][T23800] bond0: Releasing backup interface bond_slave_1 15:53:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 496.103382][T23808] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 496.114244][T23817] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 496.139823][T23817] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 496.185177][T23829] bond0: Releasing backup interface bond_slave_1 15:53:11 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 496.508572][T23831] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 496.523503][T23837] bond0: Releasing backup interface bond_slave_1 15:53:11 executing program 4: socketpair$unix(0x1, 0xf800000000000001, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_mount_image$hfs(&(0x7f0000000040)='hfs\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) ioctl$CAPI_GET_MANUFACTURER(r1, 0xc0044306, &(0x7f0000000100)=0x8000) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) 15:53:12 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:12 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 496.867149][T23839] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 496.876157][T23841] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 496.894973][T23841] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 496.906727][T23845] bond0: Releasing backup interface bond_slave_1 15:53:12 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 497.043321][T23846] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 497.055121][T23851] bond0: Releasing backup interface bond_slave_1 15:53:12 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ip_vs_stats\x00') pread64(r0, 0x0, 0x0, 0x7ffffffff000) 15:53:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000080)={0x5, 0x40, 0x5, 0x400, 0x80000001}) chdir(0x0) symlink(0x0, &(0x7f0000000540)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) mount(&(0x7f0000000580)=ANY=[@ANYBLOB="3157768f8b53988e5e050000006d43a9ce552fbbb0571e67d9b001191166e141943df45b3da30d238a27edc709f518c692989029ef8ec74b403ef3f5d5825a6a1073896716975f5a74496f0c109a91b0a3de068b95a3f56abdc235c0692b89e4ef0c405a5b583b5cfe2eb9899fb9ebe416188c0a7919327e32c1c01a8fc933f45bb529e6559f2180a25b7a3305fa4e9ba4d2084266a91c090000006abf53df0c16802ae226715c5af471d803f84c6fd667af042b136999c48350889f6350897f000000000000313089dfc296a6ffd0ff360342fca2ffc2b55d6b388d3fca"], 0x0, 0x0, 0x5010, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x7, 0x0) link(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) ioctl$sock_inet_SIOCDARP(0xffffffffffffffff, 0x8953, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = getpid() process_vm_writev(r3, &(0x7f0000001780)=[{&(0x7f0000000240)=""/232, 0xe8}, {&(0x7f0000000340)=""/233, 0xe9}, {0x0}, {0x0}, {0x0}, {&(0x7f00000016c0)=""/145, 0x91}], 0x6, &(0x7f00000018c0)=[{&(0x7f0000000140)=""/38, 0x26}, {&(0x7f0000000500)=""/28, 0x1c}, {&(0x7f0000001800)=""/139, 0x8b}], 0x3, 0x0) r4 = dup(r2) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r5 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r5, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r4, r5, 0x0, 0x8000dffffffe) 15:53:12 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 497.253963][T23854] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 497.278207][T23859] bond0: Releasing backup interface bond_slave_1 [ 497.655016][ C1] net_ratelimit: 18 callbacks suppressed [ 497.655025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 497.655102][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 497.660789][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 497.674245][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 497.685846][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 497.691638][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 497.697405][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 497.735253][ T7751] Bluetooth: hci1: command 0xfc11 tx timeout [ 497.741518][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000100)={0x5, 0xffffffff7fffffff, 0x586, 0x0, 0x7f}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x928) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-monitor\x00', 0x101000, 0x0) ioctl$CAPI_GET_ERRCODE(r1, 0x80024321, &(0x7f0000000180)) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x4, 0x100) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x81, 0x7, 0x0, "4e58312de287d42366e35c575d9bdf8aa22165d64718a8e5225b896852a11925", 0x7776574e}) getsockopt$inet_udp_int(r2, 0x11, 0xb, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$DRM_IOCTL_IRQ_BUSID(r2, 0xc0106403, &(0x7f0000000080)={0x2, 0x9, 0x80000001, 0x10000}) 15:53:13 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_MON_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000300", @ANYRES16=r1, @ANYBLOB="0104000000000000000012000000"], 0x14}}, 0x0) [ 497.831004][T23862] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 497.841531][T23863] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:13 executing program 1: r0 = socket$bt_cmtp(0x1f, 0x3, 0x5) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x2, 0x0) ioctl$KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f00000001c0)={0x2, 0x0, [{}, {}]}) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) r3 = getpgrp(r2) waitid(0x2, r3, 0x0, 0x9a69dc892a1b9bb6, 0x0) r4 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20, 0x0, 0x0, 0x3}, r3, 0x0, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r4, 0x0) r6 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ubi_ctrl\x00', 0x400000, 0x0) ioctl$TCSBRKP(r6, 0x5425, 0x1) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000100)=0x8, 0x4) ioctl$PPPIOCSMAXCID(r6, 0x40047451, &(0x7f0000000280)) readv(r5, &(0x7f0000000180)=[{&(0x7f0000001200)=""/4096, 0xfffffe19}], 0x1) ioctl$DRM_IOCTL_RES_CTX(r6, 0xc0106426, &(0x7f0000000240)={0x2, &(0x7f0000000200)=[{0x0}, {}]}) ioctl$DRM_IOCTL_GET_SAREA_CTX(r1, 0xc010641d, &(0x7f00000002c0)={r7, &(0x7f0000000280)}) 15:53:13 executing program 4: r0 = open(&(0x7f00000001c0)='./file0\x00', 0x8040, 0x0) clone(0xfffffff, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000000)={0x15, 0x100000000, 0x0, 0x1}) [ 497.911925][T23869] bond0: Releasing backup interface bond_slave_1 15:53:13 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vcs\x00', 0x0, 0x0) mkdir(0x0, 0x3) perf_event_open(&(0x7f000000a000)={0x0, 0x70, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x5) syz_mount_image$vfat(&(0x7f0000000000)='vfat\x00', &(0x7f00000004c0)='./file0\x00', 0xe000, 0x1, &(0x7f0000000040)=[{&(0x7f0000000100)="eb3c906d6b66732e666174000204010002000270f7f8", 0x16}], 0x0, 0x0) r1 = creat(&(0x7f0000000180)='./file0/file0\x00', 0x0) write$binfmt_elf64(r1, &(0x7f0000000180)=ANY=[], 0xfffffd97) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) perf_event_open(&(0x7f0000000380)={0x4, 0x70, 0x9, 0x0, 0x7, 0x800, 0x0, 0x9, 0x40, 0x9, 0xbc1f, 0x0, 0x0, 0x1, 0x61a9, 0x2, 0x3ff, 0xc0000000000000, 0x8, 0x63, 0x8, 0x7, 0x100, 0x7, 0x7, 0x3, 0x0, 0x6, 0xb7, 0xca8, 0x7fffffff, 0xae, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4ff62551, 0x0, 0x0, 0x3, @perf_config_ext={0x9, 0x80000001}, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7, 0x4}, 0x0, 0xc, r0, 0x8) r2 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000240)='./file0/file0\x00', 0x440, 0x0) rename(&(0x7f00000000c0)='./file0\x00', 0x0) fstat(r2, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockname$unix(r0, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) mount$9p_rdma(&(0x7f0000000400)='127.0.0.1\x00', &(0x7f00000005c0)='./file0/file1\x00', &(0x7f0000000600)='9p\x00', 0x10, &(0x7f0000000640)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@rq={'rq'}}, {@common=@cache_loose='cache=loose'}], [{@mask={'mask', 0x3d, '^MAY_READ'}}, {@uid_eq={'uid', 0x3d, r3}}, {@obj_type={'obj_type', 0x3d, '9p\x00'}}]}}) mount$9p_rdma(&(0x7f0000000200)='127.0.0.1\x00', &(0x7f0000000280)='./file0/file0\x00', &(0x7f00000002c0)='9p\x00', 0x1000, &(0x7f0000000500)={'trans=rdma,', {'port', 0x3d, 0x4e20}, 0x2c, {[{@sq={'sq', 0x3d, 0xfd9400}}, {@sq={'sq', 0x3d, 0x2}}, {@common=@mmap='mmap'}, {@sq={'sq', 0x3d, 0x8}}, {@sq={'sq', 0x3d, 0xfffffffffffffff9}}], [{@fowner_gt={'fowner>', r3}}]}}) mknod(&(0x7f0000000440)='./file0/file1\x00', 0x0, 0x0) linkat(r0, &(0x7f0000000480)='./file0/file0\x00', r0, 0x0, 0x400) mount$overlay(0x0, 0x0, 0x0, 0x80000, 0x0) 15:53:13 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 498.009028][T23898] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 21 (only 16 groups) 15:53:13 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000080)='/dev/input/mice\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000200)={[{0x2d, 'io'}, {0x2b, 'memory'}, {0x2b, 'pids'}, {0x2d, 'pids'}, {0x2d, 'pids'}, {0x2f, 'memory'}, {0x2d, 'memory'}, {0x2d, 'rdma'}]}, 0x34) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x20800, 0x0) recvfrom$packet(r2, &(0x7f0000000100)=""/195, 0xc3, 0x40000000, 0x0, 0x0) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 498.108889][T23905] EXT4-fs warning (device sda1): verify_group_input:104: Cannot add at group 21 (only 16 groups) 15:53:13 executing program 4: r0 = openat$ion(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ion\x00', 0x80, 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r0, 0x6612) r1 = socket$alg(0x26, 0x5, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer\x00', 0x1, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f00000001c0)={0x1, 0x7, 0x3, "c532b6fc94e6327a5d2febfce0470d75d0f07df65b0eb92a09d08be9e186cbf6"}) r3 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000240)={@mcast1}, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r1, 0x4038564f, &(0x7f0000000000)={{0x7, @addr=0x200}, 0x8, 0x0, 0x9}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = dup3(r0, r3, 0x80000) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000140)={0x0, @multicast1, @loopback}, &(0x7f0000000180)=0xc) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$nl_generic(r4, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbb94, 0x0, 0xd}, 0xc, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x1c}}, 0x0) [ 498.294975][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 498.300802][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 498.454494][ T29] Bluetooth: hci0: Frame reassembly failed (-84) [ 498.637039][ T584] Bluetooth: hci1: Frame reassembly failed (-84) [ 498.774985][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 498.781012][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 498.832560][T23870] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 498.848815][T23880] bond0: Releasing backup interface bond_slave_1 15:53:14 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 499.013341][T23881] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.035021][T23906] bond0: Releasing backup interface bond_slave_1 15:53:14 executing program 1: lsetxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f00000000c0)=@md5={0x1, "9adda182a91d5f8778fc313e806a7c61"}, 0x11, 0x2) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000140)="18c2dcca0adc1f123c123fcf500a5ad8b83d3688b070") r1 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x800455d1, &(0x7f0000001000)) 15:53:14 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) userfaultfd(0x800) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 499.280554][T23910] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.307427][T23924] bond0: Releasing backup interface bond_slave_1 15:53:14 executing program 0: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 499.472843][T23925] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.495196][T23930] bond0: Releasing backup interface bond_slave_1 15:53:14 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:15 executing program 4: r0 = syz_open_dev$midi(0x0, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0xa4, 0x0, &(0x7f0000002240)=@ipx={0x4, 0x0, 0x0, "5d6f634e9e66"}, 0xffffffffffffff5f) r1 = open(&(0x7f0000000140)='./file0\x00', 0x2d808763c6322b89, 0x101) ftruncate(r1, 0x2) ioctl$VIDIOC_G_PRIORITY(r0, 0x80045643, 0x2) signalfd4(r1, &(0x7f0000000000)={0x9}, 0x8, 0x80800) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x806, 0x0) r3 = semget(0x1, 0x7, 0x204) semop(r3, &(0x7f0000000580)=[{0x0, 0x9, 0x800}, {0x3, 0x2, 0x800}, {0x2, 0x447, 0x1800}], 0x3) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000540)={r0, &(0x7f0000000400)="e73d79f13c66f48c4ee15c31d9dd0eb404006da455ebcfa9b7f22db32cac83ff74e6f108ec74b8de85fa4145dbaa53c16bd66e014e9d867c2c64d65b46351d7cdf7a1722d2af3e80e0dba350d49de27ae36ec5de374eab2269793364cb50282f0f343158ee455f14bbe433a97e6ca13a99d43253a3149ecbe608cf94c320ab24c2f5a7475f3d2485b82f6eae97cff0f93772cf060055e9bbd7a03152524f387da354bcd0effcb99de2a2016477af3392f35f19b0282a56695d4de03734d678c968eb8ff79c925cf0089d2e704331e921cdfd86d7359c2e", &(0x7f0000000500)=""/63}, 0x18) sendfile(r2, r1, 0x0, 0x40801001) readv(r2, &(0x7f0000000100)=[{&(0x7f0000000080)=""/4, 0x4}], 0x2dc) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x3, @mcast2, 0xfffffffffffffffc}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000380)={r4, 0x1, 0x9}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000280)={r4, @in6={{0xa, 0x4e20, 0x7, @local}}, 0x0, 0x2, 0xffffffff, 0x0, 0x60}, &(0x7f0000000340)=0x98) ioctl$TIOCGWINSZ(r2, 0x5413, &(0x7f00000000c0)) [ 499.650601][T23931] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 499.668010][T23937] bond0: Releasing backup interface bond_slave_1 15:53:15 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) prctl$PR_TASK_PERF_EVENTS_ENABLE(0x20) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgr\xefR^\xd1oup.cont\x12\xf4;<', 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x13d}], 0x1, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='syscall\x00') getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x2}, &(0x7f0000000280)=0xc) ioctl$EVIOCGKEY(r2, 0x80404518, &(0x7f0000000340)=""/215) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000002c0)={r3, 0x3}, &(0x7f0000000300)=0x8) r4 = getpgrp(0x0) perf_event_open(&(0x7f0000000100)={0x0, 0x70, 0x1ff, 0xcd8, 0xffffffffffffff26, 0xcc6, 0x0, 0x3, 0x0, 0x8, 0x7, 0x7415, 0x7f, 0x1, 0x7, 0xfc, 0x5, 0x3, 0x9f, 0x0, 0xffffffffffffffff, 0x8, 0x4, 0x0, 0xff, 0x0, 0xf1b, 0x6, 0x80000000, 0x1000, 0x0, 0x3, 0x8, 0x0, 0x1b87, 0x401, 0x8000, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x0, 0xfffffffffffffffa}, 0x44, 0x56, 0x7, 0x0, 0xffffffff, 0x200, 0x101}, r4, 0x10, r0, 0x0) setsockopt$netlink_NETLINK_PKTINFO(0xffffffffffffffff, 0x10e, 0x3, 0x0, 0x0) preadv(r2, &(0x7f0000000480), 0x1000000000000293, 0x0) 15:53:15 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:15 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 500.204817][T23940] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.221989][T23944] bond0: Releasing backup interface bond_slave_1 [ 500.408989][T23945] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.418863][T23954] bond0: Releasing backup interface bond_slave_1 [ 500.455089][ T12] Bluetooth: hci0: command 0xfc11 tx timeout [ 500.461497][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 500.535154][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 500.591017][T23960] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.610359][T23963] bond0: Releasing backup interface bond_slave_1 15:53:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000240)=0xb) r1 = socket(0xb, 0x80007, 0x3) getsockopt$inet_dccp_buf(r1, 0x21, 0x2, &(0x7f0000000100)=""/178, &(0x7f0000000080)=0xb2) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$IPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x43, &(0x7f00000000c0)={'IDLETIMER\x00'}, &(0x7f0000000040)=0x6e) shmget$private(0x0, 0x3000, 0x1001, &(0x7f0000ffc000/0x3000)=nil) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0xc04c5349, &(0x7f00000001c0)={0xfffffffffffffffd, 0xaa, 0xffff}) 15:53:16 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:16 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:16 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 500.782961][T23962] bond0: Releasing backup interface bond_slave_1 15:53:16 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x4) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = dup(r0) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f00000000c0)="cf46f33107c099abc7f767206576049d8c8bd0b00dcdfff2a7b660ae0ee87a76722d678bd534b6b1a6ef727cd67a704bfb7883412026d17f161515eaef50d428df8f73a2cfed4583aeb03812027d65c3ccc4c5b1399b6bd85d0160e21103ed4d09df5a5132e0b9db8e6d8b6c779b3a7dc188a001c6d0d90df31b7773e90a314b91217ebf046be67449d7b1ee81237ca429ab27adf6e642989385226d22b5059c895c9dad1a165ff54f214bb81e73021ef28dd52815cb5f1ebebb00c3432d6cb88f719bdb32673129676b6c98ec5ae635eb08f47632805bc66a313acf2bb7ffb308e481b17b98cb35851e7cbadd8a42275423", 0xf2) 15:53:16 executing program 2: r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000)={0xb33, 0x9, 0x1, 0x2, 0x5, 0xfffffffffffffff9, 0x3ff, 0xf31, 0x6, 0x2, 0xffffffffffffff75}, 0xb) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r1, 0x400455c8, 0x9) [ 500.980745][T23966] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 500.999448][T23967] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:16 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 501.029259][T23976] bond0: Releasing backup interface bond_slave_1 15:53:16 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 501.077328][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 501.111149][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 501.568000][T23978] bond0: Releasing backup interface bond_slave_1 [ 501.715677][T23979] bond0: Releasing backup interface bond_slave_1 15:53:17 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 501.829871][T23983] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 501.840401][T23985] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 501.857106][T23984] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:17 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:17 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 501.887174][T24010] bond0: Releasing backup interface bond_slave_1 [ 502.042221][T24009] bond0: Releasing backup interface bond_slave_1 15:53:17 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 502.163499][T24012] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 502.174164][T24011] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:17 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 502.207901][T24019] bond0: Releasing backup interface bond_slave_1 [ 502.410740][T24021] bond0: Releasing backup interface bond_slave_1 [ 502.836969][T24022] bond0: Releasing backup interface bond_slave_1 15:53:18 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 502.935036][ C1] net_ratelimit: 22 callbacks suppressed [ 502.935044][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 502.946548][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 502.954582][T24023] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 502.965813][T24024] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:18 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:18 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x0) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 502.996972][T24025] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 503.014937][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 503.020740][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 503.030398][T24033] bond0: Releasing backup interface bond_slave_1 [ 503.095051][ T22] Bluetooth: hci0: command 0xfc11 tx timeout [ 503.095071][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 503.174946][ T12] Bluetooth: hci1: command 0xfc11 tx timeout [ 503.175020][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:18 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x80000, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 503.238717][T24036] bond0: Releasing backup interface bond_slave_1 [ 503.311561][ T2542] Bluetooth: hci0: Frame reassembly failed (-84) [ 503.338376][ T21] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:18 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000200)={{{@in=@multicast1, @in6=@local}}, {{@in6=@loopback}, 0x0, @in6=@mcast2}}, &(0x7f0000000300)=0xe8) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x2b91d9d7783d50d, 0x0) recvfrom$unix(r2, &(0x7f0000000100)=""/112, 0x70, 0x40, &(0x7f0000000180)=@abs={0x1, 0x0, 0x4e21}, 0x6e) prctl$PR_SET_NAME(0xf, &(0x7f0000000340)='cpuset.memory_pressure\x00') writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)="39000000130009006900000000000000ab0080480300000046000107000000141900280000000000000003f5000000000000ef38bf461e59d7", 0x39}], 0x1) [ 503.388082][T24037] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 503.401089][T24038] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:18 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 503.443521][T24043] bond0: Releasing backup interface bond_slave_1 [ 503.876746][T24046] bond0: Releasing backup interface bond_slave_1 [ 503.894933][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 503.900868][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 503.906725][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 503.912481][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 503.918306][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 503.924043][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:19 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 504.004387][T24047] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.014336][T24049] bond0: Releasing backup interface bond_slave_1 15:53:19 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 504.138344][T24050] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.153808][T24053] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.163292][T24063] netlink: 'cpuset.memory_p': attribute type 40 has an invalid length. 15:53:19 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 504.184572][T24066] bond0: Releasing backup interface bond_slave_1 15:53:19 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 504.316634][T24067] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.326011][T24071] bond0: Releasing backup interface bond_slave_1 15:53:20 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:20 executing program 4: r0 = socket$kcm(0x10, 0x2, 0x10) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x2000, 0x0) ioctl$ASHMEM_GET_SIZE(r1, 0x7704, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="2e0000001d00810fe00f80ecdb4cb9d91563190400000000000000fb120001000e00da1b40d819a9060015000000", 0x2e}], 0x1}, 0x0) [ 504.898235][T24072] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 504.906974][T24077] netlink: 'syz-executor.4': attribute type 40 has an invalid length. [ 504.930226][T24079] bond0: Releasing backup interface bond_slave_1 [ 505.100324][T24081] bond0: Releasing backup interface bond_slave_1 15:53:20 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:20 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 505.220291][T24082] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 505.231512][T24083] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 505.243797][T24090] bond0: Releasing backup interface bond_slave_1 [ 505.335003][ T5] Bluetooth: hci0: command 0xfc11 tx timeout [ 505.335077][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 505.414519][T24091] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 505.415053][ T5] Bluetooth: hci1: command 0xfc11 tx timeout [ 505.428950][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:20 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 505.461303][T24095] bond0: Releasing backup interface bond_slave_1 15:53:20 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'eql\x00\x00\x00\x05\x00\x00\x10\x00', 0x5001}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_ifreq(r1, 0x8914, &(0x7f00000000c0)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x3) [ 505.594535][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:21 executing program 4: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000003780)='/dev/sequencer\x00', 0x208002, 0x0) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f00000037c0)=0x8, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000003800)='/dev/dlm-monitor\x00', 0x40001, 0x0) ioctl$KVM_S390_UCAS_MAP(r0, 0x4018ae50, &(0x7f0000003840)={0x6, 0x800, 0xc97e}) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0xdbd) ioctl$DRM_IOCTL_SET_MASTER(r0, 0x641e) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000003880)) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000038c0)='/proc/self/net/pfkey\x00', 0x1, 0x0) r3 = epoll_create1(0x80000) fsetxattr$security_selinux(r3, &(0x7f0000003900)='security.selinux\x00', &(0x7f0000003940)='system_u:object_r:udev_helper_exec_t:s0\x00', 0x28, 0x1) r4 = syz_open_dev$usb(&(0x7f0000003980)='/dev/bus/usb/00#/00#\x00', 0x7, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000039c0)={0x0, 0x0, 0x0}, &(0x7f0000003a00)=0xc) ioprio_get$pid(0x3, r5) r8 = open(&(0x7f0000003a40)='./file0\x00', 0x381003, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000003a80), 0x4) poll(&(0x7f0000003ac0)=[{r1, 0x101}], 0x1, 0xfffffffffffff840) semget(0x1, 0x2, 0x80) setsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000003b00)=0x5, 0x4) getsockopt$inet_opts(r8, 0x0, 0x0, &(0x7f0000003b40)=""/33, &(0x7f0000003b80)=0x21) recvfrom$rose(r4, &(0x7f0000003bc0)=""/110, 0x6e, 0x40000040, &(0x7f0000003c40)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @bcast, 0x1, @bcast}, 0x1c) r9 = timerfd_create(0x7, 0x800) mq_unlink(&(0x7f0000003c80)='/dev/dlm-monitor\x00') setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000003cc0)='tls\x00', 0x4) process_vm_readv(r5, &(0x7f0000004f80)=[{&(0x7f0000003d00)=""/107, 0x6b}, {&(0x7f0000003d80)=""/107, 0x6b}, {&(0x7f0000003e00)=""/4096, 0x1000}, {&(0x7f0000004e00)=""/64, 0x40}, {&(0x7f0000004e40)=""/21, 0x15}, {&(0x7f0000004e80)=""/174, 0xae}, {&(0x7f0000004f40)=""/13, 0xd}], 0x7, &(0x7f0000005040)=[{&(0x7f0000005000)}], 0x1, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r0, 0x40045731, &(0x7f0000005080)) munlock(&(0x7f0000ffb000/0x4000)=nil, 0x4000) chown(&(0x7f00000050c0)='./file0\x00', r6, r7) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000005100)=0x7ff, 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r1, 0xc0405519, &(0x7f0000005140)={0x2, 0x1, 0x3, 0x1f, '\x00', 0x2}) fsetxattr$security_smack_transmute(r9, &(0x7f0000005180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000051c0)='TRUE', 0x4, 0x1) [ 505.846777][T24097] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.4'. [ 505.862103][T24098] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:21 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 505.889012][T24103] bond0: Releasing backup interface bond_slave_1 [ 506.044818][T24105] bond0: Releasing backup interface bond_slave_1 15:53:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'nr0\x00', 0x2}) r2 = socket(0x0, 0x8000f, 0x4) sendmsg$nfc_llcp(r2, &(0x7f0000000300)={&(0x7f0000000080)={0x27, 0x0, 0x0, 0x7, 0x101, 0xff, "11d5ab06deb950bf8a80a57d51803d1078bb24f19180840501d4fe2ee1726007faa7b0377d3582a7585c8062ec43fb031ae5febb12793e9db2b9c19be080b8", 0x37}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000140)="e010ca2e4c9c12bd0d62b294634ac24c0597af0f0c2e279cb1325f06961270a8b0a7db7d7d3ab059e29aa76650d6a4e3056c78ac48e06204ef72647266cfb71634a211ac7f46a6c5a58c8dfaaeda06d4957abb5aba525caf4d7f0d20f738be48b51909eafa47cca3d7", 0x69}, {&(0x7f00000001c0)="c592b563c8faafcf7b877915575ccaf95a53164046eba7561fb994b6e7f533b645955f49648e577373953cef14f52edf5085695f9d60282aeba12f5c54bdc961f5253926337f3d3bd1bd5fc8f12268b93bbf5181a3548410186f2ee0775fd350581f8713b3d38c542f37178229dd12449770b7ded5d213246b2679a091aa835950cdef5bec47ab5b8b4df3f1e38a1e661ab4dbee40edb1c4e002267915e6d8d1683f487e6356b388bcfbe9b817648005480f7a1e48332e3137e7b8e7b5944893e605c57ec83206836f25", 0xca}, {&(0x7f00000003c0)="92d7b0b58cd3507637365f5d15eefce1ca9fe5d252962ba1f5b1608d4b58a1e1238b45c3931a6697a2cc3301a0baf00922d8f22df02b4eace8f62aada83f93b588bde8d2cd77bb2bf882101461f4b7bdd9490147abd61c1c5c8685f7a263b2166f6d2fe78316c9c5c60c86701a1a36ca56544f1eff158bc3bb439f7abaf23ab6e79e07e490dbdcbc4b411a06f3f5dac65ea972dfce8ddba470c1b44896f6390b07235afc4d4c8785bf43d0a2e4bd5e79368f25e7e3415413fee332d48db399a19648e549191464", 0xc7}], 0x3}, 0x800) ioctl$TUNSETLINK(r1, 0x400454cd, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8924, &(0x7f0000000000)={'bridge_slave_1\x00'}) r3 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x3, 0x2000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r3, 0xc02c5341, &(0x7f00000004c0)) 15:53:21 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 506.184571][T24106] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 506.195788][T24107] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 506.223579][T24114] bond0: Releasing backup interface bond_slave_1 [ 506.360921][T24116] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 506.398315][ T584] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:21 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 506.416040][T24131] bond0: Releasing backup interface bond_slave_1 15:53:22 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000498000)={0x0, 0x0, &(0x7f00008b7ff0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2400000001010100000000003f2c11b91e6143481000020004000100080002000000e100"], 0x24}}, 0x0) r1 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='net/sockstat6\x00') ioctl$UI_END_FF_ERASE(r1, 0x400c55cb, &(0x7f0000000040)={0x7, 0x3, 0x2}) 15:53:22 executing program 4: ioctl$TCSBRKP(0xffffffffffffffff, 0x5425, 0x80000000000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x40000080806, 0x0) setsockopt$inet6_int(r0, 0x29, 0x7d, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000000) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r2 = accept4(r0, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r2, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) sendmmsg(r2, &(0x7f0000003d40)=[{{&(0x7f0000001b00)=@l2={0x1f, 0x0, {0x1100}}, 0x80, &(0x7f0000001d00), 0x0, &(0x7f0000001d40)}}, {{&(0x7f0000002300)=@nl, 0x80, &(0x7f0000003740), 0x0, &(0x7f00000037c0)}}], 0x4000000000001eb, 0x0) read(0xffffffffffffffff, &(0x7f0000000900)=""/4096, 0x1000) ioctl$int_in(r2, 0x5452, &(0x7f0000000300)=0xf6c) [ 506.795149][T24157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.817837][T24157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 506.836778][T24133] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:22 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 506.858988][T24140] bond0: Releasing backup interface bond_slave_1 [ 507.084678][T24142] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:22 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:22 executing program 4: setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000008000)={0x7ffe}, 0x88) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x200000c, 0x31, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80820) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000040)) ioctl$UFFDIO_UNREGISTER(r0, 0x8010aa01, &(0x7f0000007ffc)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}) 15:53:22 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x2, 0x2) ioctl$PPPIOCGUNIT(r1, 0x80047456, &(0x7f0000000040)) syz_read_part_table(0x0, 0x1, &(0x7f0000000200)=[{&(0x7f0000010000)="000000000000000000000000000000000000000000000000e0e5153241a9e50b0200880126000100000064000000000127008e030c00650000006400000000030d00f0043100c90000006400000000043200052020002d010000d306000055aa", 0x60, 0x1a0}]) ioctl(r0, 0x21000008912, &(0x7f0000000280)="0adc1f123c12a41d88b070") [ 507.435897][T24151] bond0: Releasing backup interface bond_slave_1 [ 507.554364][T24152] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 507.564526][T24163] bond0: Releasing backup interface bond_slave_1 [ 507.655126][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 507.665123][ T22] Bluetooth: hci0: command tx timeout [ 507.698245][T24164] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 507.708982][T24170] bond0: Releasing backup interface bond_slave_1 [ 507.874509][T24171] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 508.054925][ C1] net_ratelimit: 18 callbacks suppressed [ 508.054931][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.066372][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 508.072120][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.077862][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 508.083636][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.089459][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:23 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x10, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:23 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:23 executing program 4: syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101040, 0x0) madvise(&(0x7f0000003000/0x2000)=nil, 0x2000, 0xc) clone(0x0, 0x0, 0x0, 0x0, 0x0) 15:53:23 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:23 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:23 executing program 1: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0x6, &(0x7f0000000180)={0x1, 0x1, 0x1, 0x10001}, 0x10) ioctl$EVIOCGNAME(r0, 0x80404506, &(0x7f0000000240)=""/4096) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000001280)={0xfffffffffffffff8, 0x3}, 0x4) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r3 = socket$inet6(0xa, 0x3, 0x84) connect$inet6(r3, &(0x7f0000000080), 0x1c) sendmmsg(r3, &(0x7f00000092c0), 0x3fffffffffffe9f, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, r0, 0x0) clock_gettime(0x0, &(0x7f0000001240)={0x0, 0x0}) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1b9}, &(0x7f0000000200)={0x0, r4+30000000}, 0x0) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f00000012c0)={0x0, @output={0x1000, 0x1, {0x3, 0xbb}, 0xe7, 0x8}}) [ 508.454967][ T12] Bluetooth: hci1: command 0xfc11 tx timeout [ 508.455139][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:23 executing program 4: openat$dsp(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dsp\x00', 0x10200, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x111080, 0x0) ioctl$VIDIOC_G_FMT(r0, 0xc0d05604, &(0x7f00000000c0)={0x3, @sdr={0x7773774f, 0x2}}) r1 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r1, 0x10d, 0x10, &(0x7f0000000000), &(0x7f0000000080)=0x4) [ 508.522340][T24191] bond0: Releasing backup interface bond_slave_1 [ 508.548583][ T584] Bluetooth: hci0: Frame reassembly failed (-84) [ 508.599572][ T584] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:23 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x141, 0x0, 0x0, 0xff76) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000740)) r1 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) ioprio_get$uid(0x3, r2) lstat(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r0, 0x0, 0x8, &(0x7f00000006c0)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = getpgid(r3) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, {0xccce, 0x4, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0xa}, 0xe) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x0, r2, 0x0, 0x0, 0x0, 0x8, 0xb}, 0x0, 0xffc, 0x0, 0x8000, r4, r4, 0x81}) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f0000762fff), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x10001, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x27) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000002c0)=0xfffffcb6) sendto$inet(r5, 0x0, 0x0, 0x8090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) pipe(0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)={@mcast1}, &(0x7f0000000580)=0xfe87) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000200)={'irlan0\x00', 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast1, @random="93e3ce93d3a1", @dev}}}}, 0x0) [ 508.694945][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 508.700764][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 508.752661][T24189] bond0: Releasing backup interface bond_slave_1 15:53:24 executing program 4: r0 = syz_open_dev$usbmon(0x0, 0x0, 0x0) recvfrom$inet(r0, 0x0, 0x141, 0x0, 0x0, 0xff76) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, &(0x7f0000000740)) r1 = shmget(0xffffffffffffffff, 0x1000, 0xa08, &(0x7f0000ffe000/0x1000)=nil) stat(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000009c0)={{{@in6=@remote, @in=@remote}}, {{@in6=@dev}, 0x0, @in6=@mcast2}}, &(0x7f0000000380)=0xe8) ioprio_get$uid(0x3, r2) lstat(&(0x7f0000000180)='./file0/file0/file0\x00', &(0x7f0000000200)) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000700)={0x0, r0, 0x0, 0x8, &(0x7f00000006c0)='keyring\x00', 0xffffffffffffffff}, 0x30) r4 = getpgid(r3) connect$bt_l2cap(r0, &(0x7f0000000340)={0x1f, 0x7, {0xccce, 0x4, 0x80000001, 0x8, 0x7, 0x5}, 0xe0, 0xa}, 0xe) shmctl$IPC_SET(r1, 0x1, &(0x7f0000000840)={{0x0, r2, 0x0, 0x0, 0x0, 0x8, 0xb}, 0x0, 0xffc, 0x0, 0x8000, r4, r4, 0x81}) syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x4, 0x2000) r5 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) sendto$inet(r5, &(0x7f0000762fff), 0x0, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x7, 0x10001, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x1}, 0x27) bpf$OBJ_PIN_MAP(0x6, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f00000003c0), &(0x7f00000002c0)=0xfffffcb6) sendto$inet(r5, 0x0, 0x0, 0x8090, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bind$inet(r5, &(0x7f0000000280)={0x2, 0x4e22, @remote}, 0x10) pipe(0x0) connect$vsock_dgram(0xffffffffffffffff, &(0x7f00000004c0)={0x28, 0x0, 0x2710, @my=0x0}, 0x10) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000480)={@mcast1}, &(0x7f0000000580)=0xfe87) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, &(0x7f0000000200)={'irlan0\x00', 0x7}) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@broadcast, @empty, [], {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @empty, @multicast1, @random="93e3ce93d3a1", @dev}}}}, 0x0) 15:53:24 executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x80000001) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vet\x00\x00\x00\x00\x00\x00\x00\x00\x00\xbdh\x00', 0x43732e5398416f1a}) ioctl$TUNSETSTEERINGEBPF(r0, 0x800454e1, &(0x7f0000000280)) [ 508.933051][T24184] bond0: Releasing backup interface bond_slave_1 15:53:24 executing program 4: r0 = socket(0x5, 0x20080005, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 15:53:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020700001000000000000000000000000800120000000100000000000000000006000000000000000000000000000200e00040e0ff00000000000000000000000000ada8008004000000200000000000030006000000000002000080ac14ffbbf00000000000000003000500000000000200423b1d632bd7b8200000000000c7"], 0x80}}, 0x0) recvmsg(r0, &(0x7f00000017c0)={&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000001640)=[{&(0x7f00000000c0)=""/148, 0x94}, {&(0x7f0000000280)=""/195, 0xc3}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000001380)=""/128, 0x80}, {&(0x7f0000001400)=""/52, 0x34}, {&(0x7f0000001440)=""/13, 0xd}, {&(0x7f0000001480)=""/135, 0x87}, {&(0x7f0000001540)=""/238, 0xee}], 0x8, &(0x7f00000016c0)=""/255, 0xff}, 0x20) connect$netrom(r2, &(0x7f0000001800)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x1}, [@null, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) [ 509.134088][T24200] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 509.174988][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 509.180956][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 509.203925][T24201] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 509.282808][T24199] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 510.614992][ T7570] Bluetooth: hci1: command 0xfc11 tx timeout [ 510.615033][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 510.621314][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:26 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = socket(0x9, 0x3, 0x5) ioctl$SIOCRSGCAUSE(r1, 0x89e0, &(0x7f0000000000)) 15:53:26 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:26 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:26 executing program 1: r0 = socket(0xa, 0x400000002, 0x40000000000000) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000040)) sendto(r0, &(0x7f0000000080)="dd32b766dfd4d253a816dfaa5043deb53c29ced404", 0x15, 0x10, 0x0, 0x0) write(r0, &(0x7f0000000000)="1f0000000406ff00fd4354c00711004d99c41300036c468d220423dcffdf00", 0x1f) 15:53:26 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) getsockopt$inet_mtu(0xffffffffffffffff, 0x0, 0xa, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) mount(0x0, &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f0000000180)='./file0\x00') symlink(&(0x7f0000000100)='.\x00', &(0x7f0000000540)='./file0\x00') mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', 0x0, 0x20000, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000080)=0x9) mount(&(0x7f0000000300)=ANY=[@ANYBLOB="d9583fdda203beea31e31266433c8ca0ca2fb5def1c5d2812427ace1bcdef850e35248bf02000000000000004d01387d8b307908056fb92765402e259d0e23069ba40b6379b9ce69809ef52ecbb88466c04adee52d275dd31f8312da77da56d292d50d28e9d03e2953a10f86838eaf01f3d8eae826196986c0bf9ec1ff862174bac9ec224003a2f35f8735af1c5d"], 0x0, 0x0, 0x5010, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x7, 0x0) link(&(0x7f00000001c0)='./file0/file0/file0\x00', &(0x7f0000000100)='./file0/file0\x00') perf_event_open$cgroup(0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffff9c, 0x0) lseek(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, 0x0) r2 = socket$inet6(0xa, 0x400000000001, 0x0) r3 = dup(r2) setsockopt$inet6_tcp_int(r3, 0x6, 0xa, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e20}, 0x1c) sendto$inet6(r2, 0x0, 0x0, 0x20000005, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r4 = open(&(0x7f0000000040)='./bus\x00', 0x141042, 0x0) ftruncate(r4, 0x7fff) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) sendfile(r3, r4, 0x0, 0x8000dffffffe) ioctl$sock_SIOCGPGRP(r0, 0x8904, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x373) ioctl$EXT4_IOC_MOVE_EXT(0xffffffffffffffff, 0xc028660f, 0x0) [ 510.805356][T24262] bond0: Releasing backup interface bond_slave_1 15:53:26 executing program 1: setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000900)={0x0, @in6={{0xa, 0x4e20, 0x0, @mcast1}}}, 0x90) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) ioprio_get$pid(0x3, r0) ioctl(0xffffffffffffffff, 0x7, &(0x7f0000000100)) setpriority(0x0, r0, 0x10000) r1 = open(&(0x7f0000000000)='./file1\x00', 0x200, 0x100) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f00000000c0)=0x9, 0x4) r2 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0xffffffffffffffff) getsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, &(0x7f0000000100)=0x6, &(0x7f0000000140)=0x2) syz_open_dev$radio(&(0x7f0000000200)='/dev/radio#\x00', 0x1, 0x2) lsetxattr$trusted_overlay_nlink(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000540)='trusted.overlay.nlink\x00', &(0x7f00000005c0)={'L+', 0x10001}, 0x28, 0x1) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, &(0x7f00000002c0)) syz_open_pts(r1, 0xc0000) setxattr$security_capability(0x0, &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x0, 0x2}]}, 0x18, 0x2) readlink(&(0x7f0000000880)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) ioctl$TCSETSF(r2, 0x5404, &(0x7f0000000280)={0x20b7, 0x8, 0x80000000, 0x1, 0x11, 0xea97, 0x3, 0x1, 0x7, 0x8001, 0x6, 0x7fffffff}) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', &(0x7f0000000240)='security.capability\x00', &(0x7f0000000780)=@v2={0x2000000, [{0xe24, 0xffff}, {0x2}]}, 0x14, 0x1) pivot_root(&(0x7f0000000080)='./file0\x00', &(0x7f0000000580)='./file0\x00') clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000640), 0xffffffffffffffff) execve(&(0x7f0000000300)='./file0\x00', &(0x7f0000000480)=[&(0x7f00000004c0)='/\x00', &(0x7f0000000400)='security.capability\xf6', &(0x7f0000000440)='security.capability\x00'], &(0x7f0000000ac0)) [ 510.871108][ T7] Bluetooth: hci0: Frame reassembly failed (-84) [ 510.918669][ T7812] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:26 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000200)={0x10, 0x6c}, 0xc, &(0x7f0000000180)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x707, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, @ipip6={{0xc, 0x1, 'ip6tnl\x00'}, {0xc, 0x2, [@tunl6_policy=[@IFLA_IPTUN_FLOWINFO={0x8, 0x10}]]}}}]}, 0x3c}}, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x10000, 0x0) ioctl$TCSETAF(r1, 0x5408, &(0x7f00000000c0)={0x7f, 0x31, 0x8, 0x464, 0x10, 0x3ff, 0x0, 0x7ff, 0x8000000000004, 0x7}) 15:53:26 executing program 4: modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/30, 0x1e) sched_setattr(0x0, &(0x7f0000000000)={0x0, 0x6, 0x0, 0x0, 0x0, 0x9917, 0xffff}, 0x0) mount(&(0x7f0000000080)=@sg0='/dev/sg0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='hugetlbfs\x00', 0x80, &(0x7f0000000180)='proc\x00') syz_mount_image$ntfs(&(0x7f0000000000)='ntfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0xfffffffffffffe92, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB='nls=c']) 15:53:26 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x22, &(0x7f00000000c0)=0x1, 0xfd41) write$binfmt_elf32(r1, &(0x7f0000000140)=ANY=[@ANYBLOB='h'], 0x1) getsockopt$sock_buf(r2, 0x1, 0x1a, &(0x7f0000000180)=""/147, &(0x7f0000000000)=0x93) recvmmsg(r2, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000002b00), 0x185, &(0x7f0000002b80)=""/62, 0x70}}], 0x5e2, 0x0, 0x0) [ 511.247115][T24259] bond0: Releasing backup interface bond_slave_1 [ 511.639212][T24270] bond0: Releasing backup interface bond_slave_1 15:53:27 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 511.776403][T24272] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.789583][T24274] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:27 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 511.817175][T24273] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 511.833251][T24300] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 511.886679][T24300] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 511.925991][T24313] bond0: Releasing backup interface bond_slave_1 [ 512.103137][T24315] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 512.935040][ T7570] Bluetooth: hci1: command 0xfc11 tx timeout [ 512.935047][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 512.941217][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 512.948794][ T22] Bluetooth: hci0: command 0xfc11 tx timeout 15:53:28 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000180)=0xf) ioctl$TIOCLINUX3(r0, 0x541c, &(0x7f0000000000)) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x100, 0x0) ioctl$KVM_GET_PIT(r1, 0xc048ae65, &(0x7f0000000100)) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000080)={0x1, r1, 0x1}) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f00000001c0)) 15:53:28 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:28 executing program 4: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:28 executing program 1: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = dup2(r0, r0) setsockopt$bt_hci_HCI_FILTER(r2, 0x0, 0x2, &(0x7f0000000040)={0x101, 0xed, 0x1, 0xfffffffffffffff7}, 0x10) preadv(r1, &(0x7f0000000380)=[{&(0x7f0000000280)=""/202, 0xca}], 0x1, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r3, 0x409, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x8001, 0x0, {0x8, 0x11, 0xff}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x20044000}, 0x4000000) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000200)=0x1, 0x4) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000440)=0xc) sched_getaffinity(r4, 0x8, &(0x7f00000004c0)) mount$9p_fd(0x0, &(0x7f0000000480)='./file0\x00', &(0x7f0000000400)='9p\x00', 0x0, &(0x7f0000000100)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) 15:53:28 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 513.105682][T24326] bond0: Releasing backup interface bond_slave_1 [ 513.121889][T24330] 9pnet: Insufficient options for proto=fd [ 513.140839][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:28 executing program 1: r0 = socket$inet6(0x10, 0x7, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x8000, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f00000000c0)="ae1eca860a87bea161eaf963574aa19b732f665451b3f99f43f2f2bba095f710f6587f5f423fbdbfd1623e6b01329cf32e459824ba30460cb5d9259fb9a741d299cf0316e31cd7ebcfbed7aa") sendmsg(r0, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="5500000018007f1412fe01b2a4a280930a06000000a84306910000000b000f0035020000060000001900154002000001d40000dc1338d54400009b84136ef75afb83de44110016000d0003000000060cec4faba7d4", 0x55}], 0x1}, 0x0) openat$selinux_attr(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/attr/sockcreate\x00', 0x2, 0x0) [ 513.168107][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 513.184998][ T7] Bluetooth: hci1: Frame reassembly failed (-84) [ 513.192404][T24330] 9pnet: Insufficient options for proto=fd 15:53:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(0xffffffffffffffff, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:28 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000b40)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0x0) recvmmsg(r1, &(0x7f0000007e00)=[{{&(0x7f0000001240)=@alg, 0x80, &(0x7f0000004700)=[{&(0x7f00000012c0)=""/167, 0xa7}, {&(0x7f0000003580)=""/4096, 0x7fffef59}], 0x2, &(0x7f0000004780)=""/245, 0xf5}}], 0x1, 0x0, 0x0) [ 513.334999][ C1] net_ratelimit: 22 callbacks suppressed [ 513.335009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 513.346589][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008913, &(0x7f0000000040)="29f51fed06000000000000") prctl$PR_SVE_GET_VL(0x33, 0xd772) r1 = socket$inet(0x10, 0x1, 0xe) sendmsg(r1, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000009ff0)=[{&(0x7f0000000140)="24000000040a07031dfffd946fa2830020200a0009000300001d85680c1ba3a20400ff7e280000001100ffff760a00001c0009b356da5a80d18bec4c8546c8243929db6215426c3900694598", 0x4c}], 0x1}, 0x0) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x582, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000080)=""/148, &(0x7f00000001c0)=0x94) [ 513.415018][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 513.421041][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:28 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:28 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = socket$netlink(0x10, 0x3, 0x5) getsockopt$netlink(r1, 0x10e, 0x800000000b, &(0x7f00007e0000)=""/4, &(0x7f0000000040)=0x4) [ 513.676655][T24324] bond0: Releasing backup interface bond_slave_1 [ 513.993898][T24329] bond0: Releasing backup interface bond_slave_1 [ 514.108572][T24336] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 514.120278][T24335] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 514.142205][T24334] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 514.181785][T24370] bond0: Releasing backup interface bond_slave_1 [ 514.294956][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 514.300819][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 514.306713][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 514.312452][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 514.318284][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 514.324018][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 514.337565][T24374] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 515.175030][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 515.175168][ T22] Bluetooth: hci0: command 0xfc11 tx timeout [ 515.254955][ T3755] Bluetooth: hci1: command 0xfc11 tx timeout [ 515.255032][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) 15:53:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x501801, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:30 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:30 executing program 4: lookup_dcookie(0x79b8, &(0x7f0000000000)=""/55, 0x37) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f00000002c0)=ANY=[@ANYBLOB="73797a302fd1d0d1d0b1ab8f381a79f9bc0c85b6bad2d66c3b48705fb45f97d284941666ff16208860c07e456882f4e38525860bc9a1f81d01dce094c8ccca8c11f51cb97934cafe037176ff943c8e2c2eb8d6a2c234461f023f39b457bed565b19edad7dc5bb4947396cf8e18e6205f6b8e32ecd7f9cd28b56205f9cecfbc2088ea498f53cf467256895cada9f552189b2b20209c0aed3e58a8ea8459e8c3f0ec8ccd6e92f8287bdafe0c07cce87cce0d43b1e3fade04fbf89baad602cfd4f025027bd566791a6a355d73d42c3197100b680fdf64"], 0x5d) recvmsg(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000003c0)=""/92, 0x5c}], 0x1}, 0x0) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x40, 0x0) getsockopt$inet6_dccp_buf(r2, 0x21, 0x82, &(0x7f0000000080)=""/17, &(0x7f00000000c0)=0x11) 15:53:30 executing program 5: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:30 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:30 executing program 1: socketpair$unix(0x1, 0xfffffffffffffffe, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000b7a000)={0x10, 0x4, &(0x7f0000000100)=@framed={{}, [@alu={0x8000000201a7f19, 0x5, 0x7, 0x0, 0x1, 0x8}]}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0xfb, &(0x7f00001a7f05)=""/251}, 0x48) 15:53:30 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) r1 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) setsockopt$IP_VS_SO_SET_ADDDEST(r1, 0x0, 0x487, &(0x7f0000000140)={{0x0, @multicast2, 0x4e23, 0x2, 'lblc\x00', 0xd}, {@local, 0x4e22, 0x3, 0x8516, 0x4, 0x10001}}, 0x44) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x40) openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x400, 0x0) [ 515.443702][T24391] bond0: Releasing backup interface bond_slave_1 [ 515.529989][ T584] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:30 executing program 4: 15:53:30 executing program 1: 15:53:30 executing program 4: [ 515.585195][ T7812] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:30 executing program 1: 15:53:31 executing program 4: 15:53:31 executing program 1: [ 515.813761][T24396] bond0: Releasing backup interface bond_slave_1 [ 515.935644][T24393] bond0: Releasing backup interface bond_slave_1 15:53:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:31 executing program 4: [ 516.216901][T24399] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 516.227860][T24400] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 516.244015][T24401] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:31 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:31 executing program 1: 15:53:31 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 516.282819][T24429] bond0: Releasing backup interface bond_slave_1 [ 516.493515][T24435] bond0: Releasing backup interface bond_slave_1 [ 517.168773][T24433] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 517.181362][T24437] bond0: Releasing backup interface bond_slave_1 [ 517.300410][T24439] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 517.312172][T24440] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 517.575200][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) 15:53:32 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x6) 15:53:32 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/loop-control\x00', 0x2115a00, 0x0) r2 = socket$bt_rfcomm(0x1f, 0x1, 0x3) r3 = accept4$unix(0xffffffffffffff9c, 0x0, &(0x7f0000000040), 0x80800) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-vsock\x00', 0x2, 0x0) r5 = accept$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000200)=0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240)='/dev/net/tun\x00', 0x0, 0x0) r7 = perf_event_open$cgroup(&(0x7f00000002c0)={0x4, 0x70, 0x2, 0x5, 0x100, 0xfff, 0x0, 0x6, 0x1, 0x5, 0x3f, 0x80, 0x101, 0x5, 0xfff, 0x0, 0x0, 0x1, 0x5, 0x0, 0xffffffff00000001, 0x3, 0x3c, 0xfffffffffffffffe, 0x8, 0x80, 0xde, 0x0, 0x6, 0x5, 0x1, 0x8, 0x8, 0xfffffffffffffffa, 0x7, 0x7, 0x0, 0x2, 0x0, 0xb3c, 0x0, @perf_bp={0x0}, 0x8000, 0x2, 0x6, 0x0, 0x80, 0x9, 0x6}, 0xffffffffffffffff, 0x7, 0xffffffffffffff9c, 0xd) poll(&(0x7f0000000340)=[{r0, 0x2436}, {r1, 0x10}, {r2, 0x5000}, {r3, 0x400}, {r4}, {r5, 0x20}, {r6, 0x20}, {r7, 0x300}], 0x8, 0x8001) mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) close(0xffffffffffffffff) close(0xffffffffffffffff) r8 = socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) ioctl$UI_BEGIN_FF_ERASE(0xffffffffffffffff, 0xc00c55ca, &(0x7f0000000100)={0x6, 0x9d, 0x400}) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f00000002c0)={0x3, {0x0, 0x1, 0x0, 0x7, 0x10001, 0x20}}) connect$inet(r8, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r8, &(0x7f0000007fc0), 0x62, 0x0) 15:53:32 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000440)={0x2, 0x0, @broadcast}, 0x10) 15:53:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:32 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:32 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 517.654991][ T3755] Bluetooth: hci1: command 0xfc11 tx timeout [ 517.655029][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 517.725526][T24452] bond0: Releasing backup interface bond_slave_1 15:53:33 executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:33 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$VT_OPENQRY(r0, 0x5600, &(0x7f0000000040)) [ 517.957332][ T584] Bluetooth: hci0: Frame reassembly failed (-84) [ 517.989210][ T584] Bluetooth: hci1: Frame reassembly failed (-84) [ 518.104298][T24455] bond0: Releasing backup interface bond_slave_1 [ 518.242084][T24457] bond0: Releasing backup interface bond_slave_1 [ 518.381853][T24462] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 518.427002][T24464] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 518.447417][T24468] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 518.455833][ C1] net_ratelimit: 18 callbacks suppressed [ 518.455841][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 518.455892][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:33 executing program 5: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) ioctl$TIOCSBRK(r0, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r1) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r0, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:33 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 518.456001][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 518.456042][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 518.456121][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 518.456162][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 518.497925][T24473] bond0: Releasing backup interface bond_slave_1 15:53:34 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 518.758352][T24477] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 518.779961][T24485] bond0: Releasing backup interface bond_slave_1 15:53:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setreuid(0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 518.921619][T24486] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 518.932148][T24490] bond0: Releasing backup interface bond_slave_1 [ 519.056503][T24493] bond0: Releasing backup interface bond_slave_1 [ 519.094967][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.100834][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 519.218953][T24494] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:34 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_buf(r0, 0x29, 0x8000000039, &(0x7f0000000180)="d1020400005800200007000613f32e1c00ce5fe1b471985e", 0x18) sendto$inet6(r0, &(0x7f0000000040)="cd", 0x1, 0x0, 0x0, 0x0) listen(r0, 0x5) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000000)={0x1, 0x7}, 0x8) accept(r0, &(0x7f0000000340)=@hci, &(0x7f0000000240)=0xfffffffffffffff6) 15:53:34 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:34 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 519.273569][T24495] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 519.302810][T24500] bond0: Releasing backup interface bond_slave_1 15:53:34 executing program 4: socketpair$unix(0x1, 0x2000000001, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0xf, 0x80002, 0x0) setsockopt$netlink_NETLINK_CAP_ACK(r2, 0x10e, 0xa, &(0x7f0000000b80)=0xd6b4, 0x4) openat$cgroup_subtree(r2, &(0x7f0000000280)='cgroup.subtree_control\x00', 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2000000013002903ff509ad32a00000000000000", @ANYRES32=0x0, @ANYBLOB="0014176d05aab50fbb3a"], 0x20}}, 0x0) getpeername$unix(r0, &(0x7f0000000980)=@abs, &(0x7f00000001c0)=0x6e) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) sendmmsg$alg(r2, &(0x7f0000000140)=[{0x0, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000100)}], 0x492492492492805, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000a00)={0x0, 0xff}, &(0x7f0000000b40)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000880)={r3, 0x3, 0xffffffffffffffe1, 0x101, 0x0, 0x9, 0x400, 0x7, {0x0, @in={{0x2, 0x4e24, @empty}}, 0x4653, 0xd6d, 0x9, 0x40}}, &(0x7f0000000940)=0xfffffffffffffdd5) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000a80)={r4, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x22}}}, 0x1ff, 0x7f9f0b69}, 0xff60) r5 = getegid() fstat(r1, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000005c0)={{{@in6=@empty, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@initdev}}, &(0x7f0000000180)=0xe8) getresuid(&(0x7f00000003c0)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) r9 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000cc0)='/dev/dlm-monitor\x00', 0x400400, 0x0) ioctl$TUNGETSNDBUF(r9, 0x800454d3, &(0x7f0000000d00)) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000bc0)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r2, &(0x7f0000000c80)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000d40)={&(0x7f0000000c00)={0x28, r10, 0x600, 0x70bd26, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1f}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x10) syz_mount_image$ntfs(&(0x7f0000000040)='ntfs\x00', &(0x7f0000000080)='./file0\x00', 0x8, 0x3, &(0x7f0000000200)=[{&(0x7f00000002c0)="70618828bfcc01033ab973e6fe7c41ceeb082e97120cb4c2d5328f4aa1b7827c0052cc9f1f020799d74952015cbd2591143732e7541de85ce9504eba08c35ed6e584bd6a8b824e342a95ddbc5c2d523ba94d22c54860568c5baf42ff78c0a46db768e70b4ea8cf3ad2a1fdd19ba9c689a9442ea7278cd4df38e64b44df02285de72aa0ec9d9d3af64b29afdc6e21da646eb9de917bf343929a5ee862f96579ba5754b33617890ee3f13714879fe694e8f993399eef36caeb27ef9350a8cd866e52f2adbff78fb6", 0xc7, 0x8}, {&(0x7f0000000480)="63abd231f85d0454441fb60ad63ea2e1bd4d402f0c9e1db58253aa81672c498d8b5795216801192980ee24a7a82d8d6d629d5aae36c11777fc8f543eb1cfa512e14c80fc38b0e5616ee589cf6381ab6083b5d3f4cbb605c2b0cc92d0fe48bfa623e6dc0ca85dfe2a6851d338230de4b12a8f01762783dd02ecf20611846dfa9e9bc5c2dc85aa90", 0x87}, {&(0x7f0000000100)='n', 0x1, 0xfffffffffffffff7}], 0x40000, &(0x7f0000000740)={[{@errors_recover='errors=recover'}, {@show_sys_files_yes='show_sys_files=yes'}, {@disable_sparse_yes='disable_sparse=yes'}, {@disable_sparse_yes='disable_sparse=yes'}, {@nls={'nls', 0x3d, 'maccenteuro'}}, {@show_sys_files_no='show_sys_files=no'}, {@gid={'gid', 0x3d, r5}}, {@show_sys_files_yes='show_sys_files=yes'}, {@utf8='utf8'}], [{@dont_appraise='dont_appraise'}, {@euid_lt={'euid<', r6}}, {@mask={'mask', 0x3d, 'MAY_READ'}}, {@uid_lt={'uid<', r7}}, {@dont_hash='dont_hash'}, {@smackfsroot={'smackfsroot', 0x3d, 'self%'}}, {@euid_lt={'euid<', r8}}]}) chdir(&(0x7f0000000c40)='./file0\x00') [ 519.575081][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 519.580984][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 519.707633][T24502] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 519.729932][T24507] bond0: Releasing backup interface bond_slave_1 15:53:35 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 519.864689][T24508] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 519.884209][T24513] bond0: Releasing backup interface bond_slave_1 [ 519.974993][ T22] Bluetooth: hci0: command 0xfc11 tx timeout [ 519.975107][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) 15:53:35 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/rfkill\x00', 0x442400, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001800), 0x4) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 520.037910][T24516] bond0: Releasing backup interface bond_slave_1 [ 520.055119][ T7751] Bluetooth: hci1: command 0xfc11 tx timeout [ 520.061336][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 520.144321][ T584] Bluetooth: hci0: Frame reassembly failed (-84) [ 520.168869][ T7] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:35 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:35 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 520.261955][T24518] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.274794][T24521] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.289612][T24528] bond0: Releasing backup interface bond_slave_1 15:53:35 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r2, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r3 = userfaultfd(0x800) fcntl$addseals(r3, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r4 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r2, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r5, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r4, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 520.480420][T24529] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.489938][T24534] bond0: Releasing backup interface bond_slave_1 15:53:35 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x6b56d32ebefe6920, 0x1, 0x9) fstat(r0, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000001880)=0x0) fcntl$getownex(r0, 0x10, &(0x7f00000018c0)={0x0, 0x0}) r5 = gettid() r6 = getpgrp(0xffffffffffffffff) setsockopt$TIPC_GROUP_LEAVE(r0, 0x10f, 0x88) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004c00)={0x0}, &(0x7f0000004c40)=0xc) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004c80)={{{@in6=@local, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @remote}}, 0x0, @in=@multicast1}}, &(0x7f0000004d80)=0xe8) stat(&(0x7f0000004dc0)='./file0\x00', &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r1, &(0x7f0000004ec0)={&(0x7f0000000000)=@kern={0x10, 0x0, 0x0, 0x408001}, 0xc, &(0x7f0000004b40)=[{&(0x7f0000000040)={0x132c, 0x37, 0x100, 0x70bd27, 0x25dfdbfd, "", [@typed={0x4, 0x8b}, @typed={0xc, 0x7a, @u64=0x126a}, @nested={0xc4, 0x7a, [@typed={0x14, 0x82, @ipv6=@loopback}, @generic="cd786401c75fc13f6c0625bd1225e89dc2a7f6ace115d2a77f009285d8db938b7bf80f3a42bb2824111ea266778ebbf0cab851a49e8fdb61293b308cfa8a4da77c103b0bdd272a5e02b60306bd14c792ea3fafa3becaf7f06d4db4e86c859407ddd4db3f0060d983b17eb0e7f247248d4b7b7ad4bb68bf4a0edf62b6ee87a038bcfdfac5e08a9a01ab1896bd9645f8940383000e79207aa9ad2e343ba1e1826b26ed411a17583832bfa60a"]}, @generic, @generic="c872f1bf2feda59253ebb556762b0e4fb9105be7d2585b52b896cd32707bea4458211b79b41611f59ee0ccf340952e7ecffcb705dcfa53e1a1860cc4017f83289c6f468197fe58efa447b7073f8056889bb7af691e82097102c740b12b41b76f0dd0db4f49bdb57a8e544631cb7a9814169c0ec1", @nested={0x10d8, 0x38, [@generic="3fa35a5130e3e1f49d487a903a76a928748fb409cc7c69987591d86296450dc35db347e09b40dc8ac782771dd959e4a4be97f77719df7b5a87cca91bebf9369ee8f44e9ab563d3e373ed475b5c5056ac5d446fa592e355f3a471a77add31c572efe20785ae389220f6b881ebde0bf1aafda1c8bfeb96517cd9fa09100da2deeaf5a4117e7386a15d68aa08846768075d0a400d5268fc4ea1f615257df2c4c618b3c4fd1665cac44a974f350fa74f422f02a7ea92ec6c27dd5774f54156ba58abd6d8c996f5a80f346bf9ffb6ec80d7f22de2606e7c5fc90ab807521cec49e866e4971bc0842367c1f9ae170e7f386f0ca88bd5e8e7786c36f87057215e97094249b7234eace5771aa581e2241c19fc96bb82a1199ab507796a147a50c262ebaa7fc675495413d9eb0c69d2832f0ea90f8abc74874da1659a9ded6b15df81509186d36a9ff61a720032625f3497e30970e0a41c73acd405395a02a9372615a2fb4aed1fd0cfcd13e1ed2fbf4ff7ee6cd150170d6687643b98dd0a8013d51dba9469c798b92c394a39e95e8e10ede17d1deb567e952ff2368850b0cf96cfe2e3dc1872005761475e058f7db65d3aefbf8cf83e5fffc17d6082e1dc47c9122a4f51a9222294401aa1627f39f6606844fb73c32f11fb559cb24d838b6f272bb4f2c9b25ccf0600d04b7f612e33606ba65a444db6ef76123cba35f46a2a0153d7598b865da2e6dd8559392a3905869f2e93c04826b1762f4e6c84dfa701654cb88842185381f9083ffcbe81a994d1d85d1a9b149e497eba56da1a9d38ab89f33ddf855ed37a2a01dcf6abcb68670429f51e5f52df5595709f4c5c32eed0b2f3eab548143af64c568ec8a281d492e4aecf3d168afff7ec4d38658972c691569404b1c98497f7a9a664ef031b5527596db9c1782c603fb298a794d105927a7a0a237f66113af133f803d5aa76980c2ce7258f40218817923ab63a037637f8948fff62af6f00c30d37549d563b62c825d503d54df271e10d2a91977a5d88490402462ef117d5ad8582f6fa1bf88c0fd6903312fc09bfaf37024f71419586ac252532be0d084bcd5440d78751842979d15195065b3271f08e530563b0ad1f7b5c41f7da6a9911bca71f3f83d77ede5eede624abb52579c1fd59d24ab5c6d4c6811ac1c4ff322f5ecda22218d4c8b5462ac16349871134bc61a26e12ef1c2389c69b33386716762d017be8b9f1de1512eccbef8171cbb65390015d0832b7fc245547997abddcff494bff272472f3454ac0643e133b86f91e444a0cfe8cf1876b06dbbd4b484c970036cc0ba8c63465c7115e1394600a2ead9d07fd3d2fac20d032418920d92e4158e7604e9828333686ef82fcd1b2c67d664b7173ed7a61bb759d438f983e158b2b0e4774cb80d9ec9936e680631a47956add77b87f4accc823deb9730f2a6f0917117f615401bf4be4e615e4bfb74c674a8fd2a159682eccf38bfba1e7b07d550530a9f467e3eaa47fe3a03c6b9d9aaa0d1243d28d0662ed0589a2d8ed5e12f57fc2cea451abe4f9343128740511b621a6700a5c570c3ef3b799021beed0e5b41b9ae7fca73d2822aa29f42ff3808ec7ed5d4fe76c9898e07b5fa554329ac54caf5ccffe1c89db4ccdfdb362348e5b257e04a2da41c2aa9ecf3dfd43c4720f0023202041b7c9f5588b94fbf91c9d27a12d70d51968dbb50417bafc135ca99a007a042bd0a0be043f047e017f9fabd9252da61fc6d80aeec58c1af333c65549be260daf617608d08815e2570508c49f543ec4b6db46d1135466a35a66e7755438c962e04d63f6e3d8f40a0448b431b2879b52c8ba65cb38b7df74e677932fb8107582e36ff894caf6f2c88ed1eeda225f622fc2416fc56b33a98229cf2d8272482f8f083ded869372c496bcb4d5f71ec22d82113fe6e732901f5964e7820e5d8476e74791aedc36b7c4082f08762141d5436e9f4bac555ca37eeb20cf998d914b6e0c9cd2bfeb76f6cd618451095713864a092e19b3e25da1cde8bf776166bebaf32026baaf0a77f1c891a047cbd6a6cb62c68f3330d3ed7e1f27c73360331455a3a8588f0a46f0c8f1e3a97e85275fee917c62330257bb29954b187c3c7cab22712dcd4438cb503885f058076e4c4e68037119aded678f3b8ff0a0a24d555c9f8a0bcf5ea27a37da66c4b6eec6f1a301d5d1601e7d1016b30a36942522e2720b6efba160e39801bea76170b7295aac1e5be6f5d0ea595040933558260f03654d6eaaa48ec249b1046a90038dea7518dd25a7488888b94eb7517e09ccde440135d4ade46640a5321777343e249ecf76a8134888a1f9dca82a42c0a916b9f4764706ed63072e96fadc861f278c6c34379f5db1de2ad922d87c80703971af1c4d924918ae80c597dc92d3f65dc5891788642bfe7d7ec7edfd2e8bcbac8e18b08ac16549c2377059f697a71456bbb3effa01b2f390c527a3266c279637db184a730f4a607a7ebddea3892648ad4c0a98a2292613080f06e3691f7683341d797d4d728924b3d077e2c01bd08aeabd4075f789105f243739577f4e9562d8129761f21e0501a100dd814f1b310cb534d1fb08a0b18ec2796bd25d8ed99b95360d7318d22c0a476cd9bae16623ea3a61ebae57a4112486ea5fd59d18a8c4f6ea033eade13f06f4ab7e6b9243c255c6befe91cb9d879c684931795d128b5dacd15356dfeb2af7b78036c4d39af3d19198f0db54d977c82ed3cd9acaa35fb0ef550edf7c672e66efccb06d949d123d240f69cddf7b145a579467f728fcec38dde0d4e69bff4b73902b5afda5c237bad422af5a86ce3005946f8ccdfc7582c8e3f048453a680e4fc550b09e9af4cdabe841332bd1bd18797a2e611b807171e6bf0fb3c852964a4dcdb71a7ed532b016cb00f31f49af381857e3a46461df4298be4af054ca9b3268ef2f7e2a2070323fe05d3af64f839a6735a35798aae5674988f1b07c1d79cd7fd2fa44bb0be37f32a203835cdc1b4445b735d469f67157c48d88b7474ee2afe083286496b004dd5eb2bddca73f83b39f2471bb951f9c79567be9a0719c3a9928fd4be233380474fc15d62cff753ad21fc8a2d9870566cf4bf8a19b5628c2831b56f01d7f9f3433623ed9ca27bca20e76ee7886fe24e61b1c0a03536a03b328f9c1983a9a0f9f312a5d7baf4a8eaf48d31489080327e882e1d18d1725a18cbb940dc30587aa8394aa54502480e4971aec799f72891b1b64071d985d81bd1ad5c6fa40c53dae5467cfab48273c2d7d94c8cb94a517ac60fd5ca5e3b07ee1aff9fb4fc83d9bfc09f49853723aea567d8ec22e16d3a5964707691bf8a7ae069ae415e6f282fb21d12d1596938953a6448cd68ed9deaeda8167b34f1b81d0ce653ff7162f189585c6fc4181cdfdaed15e42d418bd80e3e54566b6714a1ecec5458454a001f30bb050a92e8a4ce5a9114ec85ba1681d40c1119f0933224944d2a1451a8ca25cbbed29510aade44ff3fb39e70906b6c5bb9747f82a4d41177809fca903216de31842e73ce2da08941f078a4f9042f21197ad9bfcddfcb0d28e36b9a700544b4edb9d1aba1479c2686bfe1855ea68da5dd02a093484006330a0e713fd0ab9290c07262d58891686663dfcd2752d5b6237ed399a8d44b07f2fc33c78f125f326924bd9e41bd17f543d374c11b48d6adc963a107fd2d7889cb8745364cc5313deb56d9964f2f0aa4f24786b1e145f43470e026c93b8ed244a5bdbe9f1915a8da957b4e18b9733b3423bcb7f077e97dbbb937a74c75eba8c7121c74903c7310396e8a05417844713ab416e5260adb9f8f79a9ef0189a311f3bc90222dfce9b56e62428244043420db67e265f17e7fd50600b522c45edde92642c9ed5ab1a6b326a4c76bf75a6abe729e857fbbc9cce75dd0202b4bb3db7cb7b79315aa0b34ddc2526499c229711b328b047c909d86fa22dd254426d66b2b51519912e8234abda8559fc045e6c725ecb8bec43f68aec823f2831ee424a628c6af169f025cb36c595fd478c6ac5eac05fcabe73844c06aefc29b9335cc5ec5f977adfc308a6c251706340bda42a2727ad1d9d0b6e5146f38568d088fe6b108808d0e29341e50f9f0984bc56d36363354c8788597eb95cee33c00415dee83c1764c11d7a7902ce60185690836860b22dc65c7845d7c6f547d63b7fe85c81a040bb5a4709367593ac7af3bc701d2d31c4a98f6f47aeb55d743494fea98cf4935e8f874c8b9f0ffd2c68f5901928876fac8f13fdfc187f3229b34e32bb262b17f506f8ae9d7f113cd068e8b3535deac804b0248b8023fb55b5f966e85b3b2cca33fd6c83e90e236512ffe9c07d94771396050914cb158c3a62a040f143fc89b9b3754394e9ecf9ac5966576a182a24246b218af8f340b60e29d72daae28948c19b92ee01771a85a051fdd8c7d4ed703fafc70279f818f20e9cae408e4af2292a8a584d04b009780a6f008d8efee1878296ee45cdb4086f4071d7f6be57e31813e3650fc4014ba3ad83807e9ae830b06891559b0e2f2f066daaf653660f5540e94fe63bafdc112bd9d3fd44d5e3da4c2cef6434c6661e95b9dbba7d5f4f280a517c20857860d8084306cce9758a41bfa8d6995a06540a36eab8c0e26a5877e313e0cd575d00c34983c91153a34a406d3fc337754a0e4b3809346a06d9cbee8f0a03cdb3466a4ebe513bd9228a289e7d3980b123cc9ad00b74c51d5216056b730a78c3a3dfbfe581bea5af16ff66eaa770e29ccd3e5185ba6e895c690c2656e2f0a0e553e599a78d92344f21c9cc799afcea4bdab80a508a27ce23511a343aa02654c85830fc2cc4cd93f6aa44edb66487f6164491fa3bf5fb4a98317bd0484313ed875736f2803f35d66e1e83291cced872ae2382484d5152a9ad3ab1f7ae1d0fff0c345f16d5f158dd0d37100b397d68966c83471e2e571f5f3ccdccd34febd435bf46c7074c2d34c25f77d432b28c409e04a9dff71a35f776c6d0fe54727ed70d97b7d47f57d896030f5066d3b82911da3d469d34c6b8905905903bffcce1aefa1d7f7e8184dfe584272677f6f82054b3923cfaf51fab3386d0d8cc161d32dcc907feaf6caace38dcbbae6b3f8dda1f998bc09ff73e18aa71f4e1d22592029d77db4a6bbe62c28bd7720fbd6a101ee6a0c470d30895fc438c9a387c04f844cef956cfc4c62eb59c26b8e4cfaeac4e372b5ddc23468867266dd4e7ee41766f18fd3aaa2e7df4e74f62a10349a6f56daf3577804b76a88f680c0319000c71dd696a61af9a9ccdeea25081740e9f67edccd701862c7709e38e061e9c8103346407c0e37034509739c71feccacbad5ad181c27a8cfbd0778d9e0cb91eceb84bc670a6adc8aa2a9bc7b878f461b92f05da102ca9a5e60386c4838d56765fbc14a178f715ed22ae60a08c8e9eda74164bf8d0122fe3e59c173eba9f0187769f014a9d74390b9dd3fe62b1ff7045630dd6c50876230e53baa39487f8bf2607e222a1bbecf1e8c06340c1e2bbc5972c1393d1c5d5ec2559b6f76bf6f5de4bdbacfa1b22b4540bda22c6e7371dae24601b8232c4801d236a94d2a27bba79ceea3a21b6c6face3c9b09c7460cd583d34ed9e9e752b5cb78fbb3386370abcbae2aa088e50d94885d19f2043bc3b82ecce67aa76dc7b44519baea27f5bcc6a29ca9483f8d4294303282593bd67784b163893768bc5b1e05756b6f4693836050689b14f16ebf091ab07f7c0fac630d2a3c47ea8623391ec93011f87bee7165b2a558674c15da1c6008bc", @typed={0x8, 0x16, @ipv4=@local}, @typed={0xcc, 0x27, @binary="5b6badc3011f2d9059f7eb31ca4c001a16d6b9292b42e9a11e1803b808f6d978cf6e9ad68cadd3a02df88eaa923a98964825f9bf0c347bf8328e1d871cd11be74c0096f8f441cbe3546ba6de95dcf01e1c5542d4cc4eceb5f04f01facdf96e07f67a3b7e4d5efbcc7fcd9014630b7f3668e40d7714405052ba6e33da2272b800b756f9e0db875e2d0036375e76c33be2bb89193bbe6f86d1045c65afee47c75df0aad1dfbe76671e8409e0e89fc31c74aa714b559776b89f7154790ac062434b6ca0a5ffa781b995"}]}, @generic="605795f525639a0e9081a1a4378a6527280c78b967262b49b9c7ef8e9ace64cddee61e3ef3dac145c05519eddba28d80c59f83e5c02c456ab6fd413c1b55b0ada28ace9eec932718089583e2a81d55c762be6858b938e48e04ef9be89669c8429f80c16ecdd9899da0b09cd97c4613fc156e15c7ee0ca8e10d61852b91e5553d7e27a95fbac1c117e1f0c454fbc73a08bd1d507cf2a592f5431f69c207c18e23ff5d7ff9de4d5988124456d41fdbd28833a9ea033e5c6fc73018d02d423a7bd1739c042e7d97e3698db1a05c4b535aed2eca6db9192d97351356e123dadddf7e2b962664768251c5541183f68542ee9eb38b", @typed={0x8, 0x22, @fd=r0}]}, 0x132c}, {&(0x7f0000001380)={0x46c, 0x3a, 0x110, 0x70bd2d, 0x25dfdbff, "", [@typed={0x8, 0x96, @fd=r0}, @typed={0x8, 0x13, @str='\x00'}, @nested={0x268, 0x39, [@generic="9b17089624b67dd372585f4190c120f4350d2eef542e3b0a76548dfd599cd1d60f227582f680cf142828bab2c77ac1be8df127217331f1eab58ab93a8502cff1f411a68c568e411b899969a7eef1a643fd2772ba256e8419011e55adf2b26cd2091e6a93c85fbb2086080ae01fc5472bf536f7c84de82f14bf17f602186a7c1a6d41814c64562fd36493c860d05803ee45b8eb7a7e2edb5ecf7d84b1b7fa38830bba8bd56f706b01612496142adeda4c25042e5af0becf13b20d5076", @typed={0x4, 0x2a}, @typed={0x4, 0x1e}, @typed={0x8, 0x74, @fd=r0}, @generic="fc4aecc8f907fb5f3a89f95347722b2d219105ec64668eae28dd9471efb7f0188f52dbd8a1fc06371f71872fa71ede627436c9b524542cee28758321778a2b32918a63bfbcab1a8b176380c5dd4ec8899cad3f399603b6c289179459a8dccce501e2b8f14603a2665bc705c76f75dad2d3d1c1443f5cc6b5bf579c9430129c1305e23d77199de3c67202b9152b3b62d7a2775664abbc6f9f74a96264c7ed6403d152ea88e0b199943c15", @generic="3035308ef4466391589025aeb60ed62a97a472ac3b960fcc2323784becbfb756d387ac316864b48b6a232c57a34ddd37cb1ee27cb479d0146a872d2b48db06acecc148ad5641802491db9eeaa7c7848484e18665d187a64df573917b90a973eccba819d8947fff1eda2ad63d1a0825e96dd7a1b0725759fde75d14f0177b47fc0a35855b25ff48e4fe6d8e132ccfc8807456a5822fb0589c1f8ab1fcec5caee53fcbec061fc5fb344ae1471fbbbbac29ad7fb0bda953306026a88a761266882d4bc1ae7584ec3d3fddb1c07580aec162867d70f6894f94b798bb0846817890ca3e408c68341d48ed6e2ae1"]}, @generic="90254db1e4ce23476b8cd3772266ee6b20f2b91485770243d53e6b6ad4193fe40674fdd7c1861c3561ed2bc237139f5d52d451095f971bc0af11ea78d16bfe5892c1743d1a759124853a9375044c1dea79d36ec3e72f64e48e902b61894596c4f674ed6d0dac048515e4b8593c6e42aab6c93c6f5c0494ade675cb79244875c92d7fa7577e8848ff806143703f011bf4544bee9c32926e426b0c0b37d367c31a7d05065b1bffab31c0f640ae998323144f7c894244c39bca046ee147c16c410fba9de4eac836f3e8be0230aa1bd1180f021e55db", @nested={0x110, 0x39, [@generic="55401e635101515c8d394614d132fdaf55e041e9f2a7c03f74e8e386e47dc9a2f01af570d116cbf3d9f408f94244a0d4b2dfeed74d920e5cdd6f43960039fa4813fdbf9e15672ff489d8e1d2c69c1e06537b4fcfab93486174beb4e0828fb0338e6470650f41d592da4cf5b1ead3241483cd234ce092ccf5d041aa32eaaeaf81b16637", @generic="1aedc4402abf9d9f5a16b026aa1efc01f367176e75dd07f37c18d54d6dae1c989aa37a0a9843c510082d1f01065488e7edfc8aeb8570c8e24e", @typed={0x8, 0x51, @ipv4=@remote}, @typed={0x8, 0x8c, @u32=0x10000}, @generic="4ba798d45d10a8164b4218fae172c35116b5fc8545fdc35cb6f307992d06e735d93ef970f6f78c13991b939ef403c5e8e453805f75a4be760099418ca7d428fd"]}]}, 0x46c}, {&(0x7f0000001900)={0x1798, 0x33, 0xa00, 0x70bd29, 0x25dfdbfd, "", [@typed={0x20, 0x5f, @str=':&vboxnet1vboxnet0#security\x00'}, @nested={0x1310, 0x4f, [@generic="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", @typed={0x8, 0x14, @u32=0x7}, @generic="26f25b00f457f10e5488d4b3d79da728e203b1c779f2d66a4eaeb7a0664761d407c230675b131b190d7e18d851744407761290d687f79d712d88ca2597864a3b8a0e34d6a4e0c0f2c223a35a6d9f1d1adcf3bdf7426e9deba1b4d0905dba64d742e08d255bcd0e197f08c305ec093fe8cf77631f7a8a26a393072fbe7d09d04d7215d1b27d9dc112a50f62b3b72ac70e80be13d553111018783be28528ec8544ee02083dd73c6d3b9911a233cf9a608e4b3c8a961310c6cf5e692ba2577b01e2d8528ed4b1f80c8aa12fcb7f334643292469b8b0b3fa2622be47879ba4cd335dbc5829d689", @typed={0x14, 0x79, @ipv6=@ipv4={[], [], @broadcast}}, @generic, @generic="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", @typed={0x8, 0x7a, @u32=0x9}, @typed={0x8, 0x0, @ipv4=@empty}, @typed={0x8, 0x3b, @uid=r2}, @generic="04da97b97e7959f79b59fe61f06052efca83a32d3391334986b9ff6faae53ef7862a783f19030ceb8d441f45dfa47c86ae36c18611f075bd2157b012fa529caecb5b7d005d8f761140cb84d7f5e04aa38c1b6e41c4a04b6493eb4114892571ff72fd09f907da7a8604b135e61abaa250291276d371487a187d9092710399fe373cd7cdc768edf39e96ebc6c3661e2cc0e63ae37c24c9107798cdca367fefc7856d34eb0582cffad0ca2a4b70b3504aa66df5c4720b21d940da763aa98195d76ff103a7a635f47dcb07c1313efaa21a656731de6aa5aee1c63921e6a1158fe11d01e08b25c43a01c7e250d3d2184e3efda2d640b1"]}, @typed={0x8, 0xd, @pid=r3}, @generic="f3b05e94adb48e91dfa138a17f37fecc954d1daa18a00d72dc479dd22abe12060098bb0b9d3fb9923b34d9507ea171acb6aa906ff81e33987fdece84c26e7d00ed2f3b4f37126e95dc4eae03846f445557bc5d493df40f7b2941b189cb55570f126cf7c6709add0170ae142d4c97375d6586cd2558ffefa71fc3dda76ab926ffe7bf0958c0e6434ee9f1590c4bd0397e2c05f980b535281978daa55b5265f51ba0bc315e335320ab718abbd3", @nested={0x1b8, 0x79, [@generic="9bc09cd4443ac42f971da99dd997d7aba2d8afe70e242b0a358ec7cb5d0675b9bcda67761e33b63dfd26ba6ff0ac395440a08c41262648c53b4d475715478bbbbef7bf7dbf2e602dd2756e914124dedfbb7a15c42187ee8706459a03ba1f064924fb69f9d45f34c749bfb047c05f02f80bda9287bbd66276d1f9c2b0fb383e00bb3b43c9b48314b5ffc55fef2898a36bc80a5ceda3c3281e043a18244029cecced0f36464a5c83d035b6a9ab28cce121420d5c8b3843cac502f551647ef1e9daf7057d9aa1716cdc16", @typed={0x8, 0x29, @fd=r0}, @typed={0x8, 0x12, @pid=r4}, @generic="869c2477ecb9c33f3946937a7f4011bba35b3c4c2785eb10c085ea231bb83e4213980b1d3be33ab551d4cc3632301be1dab0659e1490cb4e7df9eaee7054bb88b297eaf1de85ebde0fecfdedbdeded3fdc24983fd70f9b5d0c5071b9788c98edc50a0bfdc7dfd0005736680aae674ddd8244cb8414b0f8e0cbe3b82c81a95f006becfd71eed3dc3032f645d6ddd9a0ce48a1ea27bd45dc59690ba9348f1f38bf53d178f0878d43b48a", @typed={0x1c, 0x52, @str='@\xc8}cpusetvmnet0cpuset\x00'}, @typed={0x4, 0x43}, @typed={0x4, 0x34}, @typed={0x8, 0x1f, @ipv4=@loopback}, @typed={0x4, 0x61}]}, @typed={0x4, 0x36}, @typed={0xc, 0x64, @u64=0x2}, @generic="2e6b4d0b8e9ea38deb38d82c3e393ebdd69a195d57bc4789a285649a1387b33cffc1e21f0bfbcc1df23974a1c0f4b38706e9d8994d32691a764d3c3de7c0036ab92b463075e1188d7a1e4b722f4444b062cb6f1248516f556a761e810ed4a7be63b4143a1c660028580526755af06e5dc4970605f6eeeebb4874bd07e1a5ba4b554afb63e93443fc9748917b82f52bc84a860280b2d0e482d6774d07de8d37e7", @generic="e2eb5f", @nested={0x138, 0x7c, [@typed={0x8, 0x66, @str='\x00'}, @generic="3fdc5b15881c37fa49a30f16ca93b3c6c1e52e90116605186d27ca884cac9540be67b759f594502cf9e3ddf2b1b9eaa90557bd61cd0adc6d8b8057d174cefd74b310e2f934d6bf0cd951dba995e48dc89befadfdb9a390d653a099de50b6ca161931433a703c8bca34d3486baf01c0b498884bd081c0e13ad71b1ea1610e28dfa79490e70a83b068f560c8911fd4d8625facbc2df8648dc4f060599e35c1a7af7c6bc99c728bf4fc6c6c2794ac89b68c2c108bf91806e9075299304339e0d7daf904ff291214fff0e55f4276d02755f1d28340373459e761", @generic="ead625b513c1cd3b63a89252f26b49711ac33c5713dc5417b747623a4bf50d47e816843d492789dfb9ba7923a9e300e5", @generic="40ca492daf3845bb137dd0267cb0e412349eed7f2a0aea7b72ae4cfc4603489f7e0e31"]}]}, 0x1798}, {&(0x7f00000030c0)={0x1010, 0x37, 0x100, 0x70bd2b, 0x25dfdbfc, "", [@generic="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"]}, 0x1010}, {&(0x7f0000004100)={0x210, 0x1f, 0x10, 0x70bd2c, 0x25dfdbfc, "", [@generic="b0a286235c8d15b4ac8b2b8b73edba84a34aea32bb3f943a480152b5a8fb9a72869809d15262d4637f5a95d0b972488c3586ae3eb09948c964490366178e518783b39afca0111eb35b61a074967e17a72cf2cd6aab928de90d6e3bfdd8605f2fffc7d46794093a476b80e353cf3742f08a53a1f59c2f53f8722aa9a174795850", @generic="d61e498080225d505ff0e7108e167892f044e5e7857eb68a97a7496873d45501e02b4321cda2024014e8e6140a9004f96751952178b7c86d575bca2bbdc58363dba0d15c728b4b2f7bc6f9d7c3f0e3bd95fe3ef9bc20b399933f286d68cb6345c36aeb78fb5068d6a8ccb90cf0c5f1f86e953b98f1700eb94125f5d53dbe8f4d9b1263c2d916f2f6da4f8e02a63a28c1404443f63b54ba42c1c19482041cdc277996b811decfb65a4ca1b50bf878fd1f59da565ef2a9042eb6dc7a42e81493d0994aef045d89d4f1d7ce7a9ea0297a593a43b7e72d5d711bcc047f06", @typed={0x8, 0x17, @u32=0x4}, @generic="75a12285da3adc457c6c2bef27f8bc47abb9ed90d8b45650bacd575a9fc89ea5a232f151505fc52bd174a96a58ce2d03c1cc07d584bee351e3eaa338bba92743ebbf69d3f0e6de1e729ab9b9209f5a77542f8a271b404367d24dd897e40039fc25e5b6b1a92cfbd496d53ca116d4dc5a90ffa65e148ec4efb7338714b9692c688ddd28b90c974667892d7986179060076cb5f390cda6856b3fb32f69"]}, 0x210}, {&(0x7f0000004340)={0x10, 0x12, 0x1, 0x70bd28, 0x25dfdbff}, 0x10}, {&(0x7f0000004380)={0x134, 0x31, 0x100, 0x70bd29, 0x25dfdbff, "", [@typed={0x14, 0x19, @ipv6=@loopback}, @typed={0x3c, 0x87, @binary="1218cf6cfcfa4f43b09eb5c8586c94b988fc8fbabe03aaf09bf872b77a5597ea335d3cdea50efc3a2c562d9cb1a8fcc7c1c0e16b05d3e1"}, @generic="884e9f191e165ac1b656ef2c25e58c4ef070e3de2dd649dfee4c45abeebfd4403050703af059df35930a8672eb863e3b84f01865de1a9c0cf0d69d67df822c1cb8709760457881385879924d5bd69388c8767c55b9338d0106bcede9a677384e5974ab7535ea11ab61b395dc6132299938da67352c30ba9bff767411fcb9edf71e3ca6e4f77b9dc1b7be4286ffa4ccba790c40a542b9c5f3e0ca8ccc2e0e5371d4a6359939495c3ef67635fca85ff2487959edd4f58d0580b88e1e820c7cc92b9baf933d4cd02c9a745b891e75ff", @typed={0x4, 0x1b}]}, 0x134}, {&(0x7f00000044c0)={0x440, 0x13, 0x1, 0x70bd2c, 0x25dfdbff, "", [@typed={0x38, 0x6c, @binary="84fba35101f5779c5caeede8741035197752fda3f308329030f48f56a03ec691a758113c9ef116e36d53ec5cb4754c264b"}, @nested={0x198, 0x69, [@generic="70617817c96d8591ce4195c9388256556f5ae073082b64b7a0174ad6fd1bc53ead26f24ef347f0fe248b5b2f0a7eb9f07cfcf632aa5796196da5bbd3a49f554535221077564d01eee65159f577cba39c23d52e3b860ff4bc8e609dfbb3e3283db04ef8b54ea216e1e3d09ad03b5b8b728d23e135c45d69204e03c56a5e041324616b8a8fe0e31b4e7ba496e1c0fad3759d4970b006", @generic="b52c1fb23d94aa8753d992b470c1a8e2233dffa2709c9938104e6c2dc01154576b05491251ff386fa595868a68cfed87fd391b919039746e44ffcd817d60bd16aa505b2c7e121ef71da0b8ac8c0d8235b60cd79e8c2b43d2063ef48fea13eccac59a80d0a271fdddf8ade703a0", @typed={0x14, 0x63, @str='eth1\'nodev\")[\x00'}, @generic="1261cea0c52a40abcafb166331d275c648037aa874b56c78c5bd2d47a3e448f0f8a338c559178adb8470a60190bb2c1c8bf3413093deaa26c8408d9ed2e7546c3ec7b8168d003fffd039166f32a35b496ee4d757bd240203aadc7c56e139935332fa6479003a66454efba364f715104b0816a40d55d2f78d629568"]}, @typed={0x8, 0x4b, @ipv4=@multicast1}, @nested={0x258, 0xd, [@typed={0x8, 0x3b, @fd=r0}, @generic="5a4b9db3a9fcc0474da89862ed0edf773dc57b8d7ef2aab01245f0386f9b7c15bbac8e4244c5b7b69d871d4fedddc3e7d9b9a563a473350d2e60bbd7f721ec4d7ed43cc70f58a40d649184f50d3c11ccf9c6858acdf51c8a84c476bc48f813106cc3", @typed={0x8, 0x28, @pid=r5}, @typed={0x8, 0x8e, @ipv4=@rand_addr=0xfffffffffffff800}, @generic="5ee7e8fb601220ee12e378e7fdffe0ddbae3684581acfa3cfd88706f164dfa5d20bc7ab3e9341a81a9b496c9379ef483899db532523fed26c3870ab722a17fd5ca13e1d677157e00a10e27ad775200f8edcd091855809b685f73fab1f903f69c620c1bd9f96e1b6390d0efbb4ba77523a77298c11e00449d4cc4a1410bf7e73243e75a25baae58cb6db6e670cb7a99a079145bc45b720a04ec7defc3928b4120235fb2a58388e33aa820a26b5c2862ba62f7034b6024dbf7", @generic="848fbcdce26347e3d1a66771094424e2fea2d63f421021a9a446d3371a7c97a4e1b980c4bea55f8655fef3087589ca7673ce826ebc9ef6a991ccb411785fd3e46804457d495be37e2bd928871fde", @generic="a80dd4ae392f8959f93d0acdd616841a1e414dd7085acaa5c2e36fc2cc1350e2d963a08880218b861680255964d8c7b813b3b156522963e073fe0ae93d26b9dc2ce9e9835073889742f0db3c2de8b10cf6674aa330b32620a330050c0f6104b5de158ee9de929ffa841f365bf12fa3d610b7e63cdbbe0099001dd17eb3bcf6449d5565cb099ba57f28be593447c3981f031fad9405f214962aa1c105a7507404d3de9358c430b4849c11ea78a354778d511f32d99f40ecc6dfaf78ea4981976388f164f3012e761f9c4ef2f22c57863c4a40"]}]}, 0x440}, {&(0x7f0000004900)={0x234, 0x17, 0x104, 0x70bd2b, 0x25dfdbfd, "", [@generic="8155ac4619ea04ff5522babd22a9a921bd91f0ad8b94007e41cb6ef6a7e5d4e307dd3deeeb7d33170ae8e27de0a3cb1bcd25e54e6a389fb7badf24bda545a66bb3ffcf487bee284bb1bf59d77f5136f64851bfb86154e79c76fce2fbeb40a2486b386fe9a963deed20a6d0ae0cd645048798f9a8cd9e6d03947fd01a02d873afa65945892e9ea0df0f87f9db75043b6fda91f053d8ee439406bd7319e61d2a30dfeb711c94a7bffa426f710f7204179b610e0b", @generic="092178a1026d07c97bf564e009aef3b7747b499210c334c642da4c37010ac7234cc5afebc3a35a6f24a8db5b5331cef41960a913c752b7e4e103fc9995c46a56e221a2181fa16ce85530a164f492217e2ad398b3713c5a831627aa84a10d6bf5e1e7a2a3a74979ff8c0c69a1639714fc9e44a324c910cce627e505b08183c12297afaeaec99cfea462717a537ae44173ae29813153f240130144625d919cfd8d66881e95285d1dfc9b92d9c67c98e0e873c6bceece8b09bfefdb77f5926827b331b403a4c0", @typed={0x8, 0x91, @pid=r6}, @generic="60f3d032df5c0a53f805b7d7400c8e265a8d993d716351e3d781bbbf9aa002cfa07ba36882b40c6fe3ece3f47b6777bca8484f882fae9a1cd119827c57e08296b35a8804da8dcd291365aaed69207a1b031e994cd0022899a20081a52f60f8c03b2d4380da7cef272961234133cb716578e6f6102fbf652b5b8a72161cf37f0041196156e890a40cf6cd281040c35b8d5cb667974b80bde3df2b683a072f3bdef38d"]}, 0x234}], 0x9, &(0x7f0000004e80)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x20, 0x44000}, 0x90) getpriority(0x2, 0x0) [ 520.626864][T24535] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 520.645746][T24546] bond0: Releasing backup interface bond_slave_1 15:53:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:36 executing program 4: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x2) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000000300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]) setsockopt$inet6_tcp_int(r0, 0x6, 0x0, &(0x7f0000000040)=0x8000, 0x4) 15:53:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x4e22, @loopback}, 0x10) socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$sock_buf(r1, 0x1, 0x1c, 0x0, &(0x7f0000000040)=0x10) [ 520.848952][T24548] bond0: Releasing backup interface bond_slave_1 [ 521.006050][T24549] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:36 executing program 5: r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 521.061659][T24550] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 521.098615][T24556] bond0: Releasing backup interface bond_slave_1 15:53:36 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:36 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x20200, 0xfffffffffffffffd}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2000000000002e, &(0x7f00000005c0)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000000)={0x0, 0x200000007, 0x20, 0xff, 0x20}, &(0x7f0000000040)=0x18) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000080)={r1, 0x7fffffff}, 0x8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) [ 521.251833][T24557] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 521.261166][T24566] bond0: Releasing backup interface bond_slave_1 15:53:36 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 521.416329][T24571] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 521.435047][T24577] bond0: Releasing backup interface bond_slave_1 [ 521.569665][T24580] bond0: Releasing backup interface bond_slave_1 [ 522.009990][T24579] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 522.020733][T24581] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 522.047471][T24591] bond0: Releasing backup interface bond_slave_1 [ 522.168513][T24592] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 522.215081][ T3755] Bluetooth: hci1: command 0xfc11 tx timeout [ 522.215146][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 522.221379][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 522.233131][ T5] Bluetooth: hci0: command 0xfc11 tx timeout 15:53:37 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vcan0\x00', 0x0}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r3, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") clone(0x4000003102041ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r4 = gettid() futex(&(0x7f0000000140)=0x2, 0x0, 0x2, 0x0, 0x0, 0x0) ptrace$setopts(0x4206, r4, 0x0, 0x0) tkill(r4, 0x2f) write$P9_RREAD(0xffffffffffffffff, &(0x7f0000000100)=ANY=[@ANYBLOB="0d2fc73cda1fad51400000000000000061f97404ca3d6bec5def3bbdb6b960f174956bcf4ae575ae10c738acbbb6b170f945dcf9e6e62e501e"], 0x39) ptrace$cont(0x18, r4, 0x0, 0x0) ptrace$setregs(0xd, r4, 0x0, &(0x7f00000000c0)) ptrace$cont(0x7, r4, 0x0, 0x0) unlink(&(0x7f0000000040)='./file0\x00') connect$packet(r1, &(0x7f0000000240)={0x11, 0x0, r2, 0x1, 0x7, 0x6, @local}, 0x14) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:37 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:37 executing program 4: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x140) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="ac1414aae0000001010000000600000000000000ac1414bbac1e0001ac14141a100000"], 0x1) ioctl$KVM_KVMCLOCK_CTRL(r1, 0xaead) creat(&(0x7f00000000c0)='./bus\x00', 0x80) r3 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) io_setup(0x101, &(0x7f0000000000)) ioctl$PPPIOCSFLAGS(r3, 0x40047459, &(0x7f0000000100)) mmap(&(0x7f0000003000/0x2000)=nil, 0x2000, 0x0, 0x1012, r3, 0x0) write$tun(r3, &(0x7f0000000500)=ANY=[@ANYRESDEC], 0x1) r4 = perf_event_open(&(0x7f0000000180)={0x6, 0x70, 0x0, 0x0, 0x8000000, 0x0, 0x3e6, 0x0, 0x0, 0x0, 0x4fe0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r4) 15:53:37 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:37 executing program 1: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000300)='/dev/dsp\x00', 0x800, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_FLUSH(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000700)={0x148, r1, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x38, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0xfffffffffffffffb}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@loopback}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}]}, @IPVS_CMD_ATTR_DEST={0x60, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0xffffffff}, @IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xe2f}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x6}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x1000}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x5}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_WEIGHT={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_DEST={0x20, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@local}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}, @IPVS_CMD_ATTR_DEST={0x24, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x5}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x8}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x20000004}, 0x4000000) r2 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dlm_plock\x00', 0x80080, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNINFO(r2, 0x800442d3, &(0x7f0000000400)={0x1, 0x1f, 0x7, @local, 'irlan0\x00'}) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = dup2(0xffffffffffffffff, r4) r6 = syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x14f, 0x200080) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000200)=0x0) r8 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000280)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$KVM_DEASSIGN_DEV_IRQ(r0, 0x4040ae75, &(0x7f0000000100)={0x0, 0x80, 0xffffffffffffffb3, 0x400}) keyctl$get_keyring_id(0x0, r8, 0x6) getsockopt$inet6_mreq(r5, 0x29, 0x1f, &(0x7f0000000140)={@loopback, 0x0}, &(0x7f0000000180)=0x14) connect$can_bcm(r5, &(0x7f00000001c0)={0x1d, r9}, 0x10) ioprio_set$pid(0x3, r7, 0x80) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, &(0x7f0000000040), &(0x7f0000000080)=0x30) socket$unix(0x1, 0x2, 0x0) clone(0x4000002102001ffb, 0x0, 0xfffffffffffffffe, &(0x7f00000000c0), 0xffffffffffffffff) request_key(&(0x7f000000aff5)='asymmetric\x00', &(0x7f0000001ffb)={'\x00\x00\b', 0xffffffffffffffff, 0x4c00000000000000}, &(0x7f0000001fee)='R\trist\xe3cusgrVid:De', 0x0) write$RDMA_USER_CM_CMD_JOIN_MCAST(r6, &(0x7f0000000500)={0x16, 0x98, 0xfa00, {&(0x7f00000004c0), 0x4, 0xffffffffffffffff, 0x10, 0x1, @ib={0x1b, 0x2, 0x4, {"5388dc9193a566d3d05c203380060c70"}, 0x9, 0x0, 0xb2}}}, 0xa0) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f00000005c0)={0x2878, 0x8, 0x4, 0x4, {0x77359400}, {0x7, 0x1, 0x4, 0x5, 0x1, 0x0, "a9de65a9"}, 0x9, 0x1, @offset=0xa8, 0x4}) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, 0x0, 0x0) prctl$PR_SET_FP_MODE(0x2d, 0x1) r10 = memfd_create(&(0x7f0000000240)='selinux*user:%/{}\x00', 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r10, 0x2400, 0x7f) 15:53:37 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 522.385514][T24607] bond0: Releasing backup interface bond_slave_1 15:53:37 executing program 1: mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x9, 0x0) getsockopt$ax25_int(r0, 0x101, 0x6, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x4) truncate(&(0x7f0000000240)='./file0\x00', 0x5) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x40042409, 0x1) sendfile(r1, r1, &(0x7f0000000140), 0x8800000) r3 = dup(r2) ioctl$DRM_IOCTL_AGP_ACQUIRE(r3, 0x6430) r4 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x1, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8924, &(0x7f0000000040)={'nr0\x00', @random="a42ea5ceb073"}) getsockopt$inet_buf(r3, 0x0, 0x2f, &(0x7f0000000280)=""/126, &(0x7f0000000200)=0x7e) [ 522.477036][ T21] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:37 executing program 1: r0 = fcntl$dupfd(0xffffffffffffff9c, 0x0, 0xffffffffffffff9c) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0\x00', r0}, 0x10) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$TCSETSW(r1, 0x5402, 0x0) ioctl$TCSETSW(r1, 0x5404, 0x0) [ 522.582330][ T26] kauditd_printk_skb: 76 callbacks suppressed [ 522.582343][ T26] audit: type=1800 audit(1552233217.876:295): pid=24633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17041 res=0 [ 522.642880][ T26] audit: type=1800 audit(1552233217.886:296): pid=24633 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="file0" dev="sda1" ino=17041 res=0 15:53:38 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000200)='/dev/sg#\x00', 0x0, 0x163882) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x208200, 0x0) write$binfmt_aout(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="00000000d501040000000000000000ff0000004000000000000000000000000000000000000000c223c583e1f522a0e9c006"], 0x32) 15:53:38 executing program 4: r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f00000001c0)=""/184, 0x0}) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dsp\x00', 0x100, 0x0) setsockopt$l2tp_PPPOL2TP_SO_SENDSEQ(r1, 0x111, 0x3, 0x1, 0x4) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001900)=ANY=[]) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x20000, 0x0) sendto$netrom(r2, &(0x7f0000000040)="f11a19b59d6e23af226bd09551a5cf8900d9f4017a46856f4cd42c758424bcfbf5a6fa", 0x23, 0x4000000, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x3}, [@null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @null, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x48) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000100)={0x0, 0x100000001}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000680)={0x3, 0x0, 0x0, &(0x7f0000000180)=""/57, 0x0}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000006c0)=0x1) [ 522.742368][T24643] sg_write: data in/out 262577/8 bytes for SCSI command 0x0-- guessing data in; [ 522.742368][T24643] program syz-executor.1 not setting count and/or reply_len properly 15:53:38 executing program 1: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x4) syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x8c, 0x40) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000640)={@in6={{0xa, 0x0, 0x0, @remote}}, 0x0, 0x1, 0x0, "0d77bded7125338de47145b71f2226c0b6950feba57b7d52d9e6d13509bb602e4818224696dafe09c25ed1d5e1e8dd9525d4425e2c4707a00f8dd47a4c19b884282e4f743e00c7a3eff599b13d518d10"}, 0xd8) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f00000001c0)) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$int_in(r1, 0x5421, &(0x7f0000000080)=0x3) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000340)='tls\x00', 0x4) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000100), 0x28) sendto$inet6(r1, &(0x7f00000005c0), 0xfffffffffffffee0, 0x0, 0x0, 0xb6) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040)=0x2, 0x4) close(r1) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) bind$bt_rfcomm(r2, &(0x7f0000000140)={0x1f, {0x100000000, 0xa0, 0xe47, 0x9, 0x9, 0xfffffffffffff801}, 0x800}, 0xa) 15:53:38 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) openat$cgroup(r1, 0x0, 0x200002, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) listen(0xffffffffffffffff, 0x0) getpeername(0xffffffffffffffff, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, &(0x7f0000000380)=""/145) mkdir(&(0x7f0000000140)='./file0//ile0\x00', 0x3e) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0xc8400, 0x0) getsockopt$inet_dccp_buf(r2, 0x21, 0xe, &(0x7f0000000180)=""/246, &(0x7f0000000080)=0xf6) fsetxattr(r0, &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em0\x00', 0x4, 0x0) mount$9p_rdma(0x0, 0x0, 0x0, 0x200002, 0x0) rmdir(&(0x7f0000000340)='./file0//ile0\x00') lsetxattr(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)=@known='system.posix_acl_access\x00', &(0x7f0000000440)='#systemvmnet1vboxnet1\x00', 0x16, 0x1) setsockopt(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) [ 522.814484][T24603] bond0: Releasing backup interface bond_slave_1 [ 523.032029][T24606] bond0: Releasing backup interface bond_slave_1 [ 523.243755][T24613] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 523.259242][ T7812] Bluetooth: hci1: Frame reassembly failed (-84) [ 523.268536][T24612] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 523.286959][T24615] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 523.745549][ C1] net_ratelimit: 22 callbacks suppressed [ 523.745568][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 523.757691][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 523.814972][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 523.821054][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 524.534984][ T5] Bluetooth: hci0: command 0xfc11 tx timeout [ 524.535034][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 524.694954][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 524.700747][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 524.706562][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 524.712301][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 524.718128][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 524.723948][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 525.335032][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 525.335105][ T3755] Bluetooth: hci1: command 0xfc11 tx timeout 15:53:40 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCSETA(r0, 0x5406, &(0x7f0000000040)={0x5, 0x8, 0x5, 0x9, 0x9, 0x5, 0x8, 0x9b7c, 0xd208, 0x3}) ioctl$KDADDIO(r0, 0x400455c8, 0x9) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000000)) 15:53:40 executing program 4: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r0, 0x400000000000003a, 0x1, 0x0, &(0x7f0000000200)) 15:53:40 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:40 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:40 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:40 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$LOOP_SET_BLOCK_SIZE(r0, 0x4c09, 0x2) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='pagemap\x00') r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000001c0)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r3, &(0x7f0000000180)="460ef98d5a5158ee04f5ec02c61a462a1878a0763a8a", 0x16, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvfrom(r3, &(0x7f0000001240)=""/4096, 0xfe96, 0x10001, 0x0, 0xfffffffffffffe97) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@empty, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@local}}, &(0x7f0000000280)=0xe8) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)='bpf\x00', 0x4010, &(0x7f00000004c0)={[{@mode={'mode', 0x3d, 0x3}}, {@mode={'mode', 0x3d, 0x3b55}}, {@mode={'mode', 0x3d, 0xba57}}, {@mode={'mode', 0x3d, 0x6}}], [{@uid_gt={'uid>', r4}}, {@rootcontext={'rootcontext', 0x3d, 'root'}}]}) sendmsg$unix(r1, &(0x7f0000000340)={&(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f00000002c0)=[{&(0x7f0000000040)="4f1123a8222755550b535436d39915480a6e206e90bbdd7af9d254", 0x1b}, {0x0}], 0x2, 0x0, 0x0, 0x20008040}, 0x4004) mmap(&(0x7f0000000000/0xae0000)=nil, 0xae0000, 0x0, 0x4d031, 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000380)='/dev/dsp\x00', 0x2000, 0x0) pread64(r1, &(0x7f0000e3e000)=""/8, 0xffd8, 0x103f00) [ 525.468066][T24675] bond0: Releasing backup interface bond_slave_1 [ 525.502440][T12077] Bluetooth: hci0: Frame reassembly failed (-84) 15:53:40 executing program 4: r0 = syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x100, 0x0) ioctl$VIDIOC_G_CROP(r0, 0xc014563b, &(0x7f0000000040)) ioctl$VIDIOC_G_ENC_INDEX(r0, 0x8818564c, &(0x7f0000000100)) 15:53:40 executing program 1: r0 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_NEXT_DEVICE(r0, 0x80045530, &(0x7f0000000000)) r1 = socket$inet6(0xa, 0x2000000000000001, 0x8010000000000084) bind$inet6(r1, &(0x7f00002aafe4)={0xa, 0x4e22, 0x1000, @ipv4}, 0x1c) listen(r1, 0x3) sendto$inet6(0xffffffffffffffff, &(0x7f0000000100)='F', 0x1, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000002c0)={0x0, @in={{0xa, 0x0, @dev}}, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x98) r2 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x403e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0xbc07, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc0\x00', 0x50a80, 0x0) ioctl$RTC_IRQP_SET(r3, 0x4004700c, 0x349) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x20000003) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0xff000000, @loopback}, 0x1c) r6 = accept4(r4, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000047ffc)=0x80, 0x0) write$binfmt_elf64(r6, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x41c) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000a80)=ANY=[], 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r6, 0x800448d2, &(0x7f0000000a40)={0x2, &(0x7f0000000900)=[{}, {}]}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r7 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000840)='/dev/qat_adf_ctl\x00', 0x88800, 0x0) accept4$ax25(r6, &(0x7f0000000000)={{0x3, @null}, [@remote, @null, @rose, @default, @rose, @remote, @bcast]}, &(0x7f0000000080)=0x48, 0x80800) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x1, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f0000527ff8), 0x0, 0x0) mbind(&(0x7f0000126000/0x3000)=nil, 0x3321a8df32ee8487, 0x0, &(0x7f000016e000), 0x5, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r7, 0xc058534f, &(0x7f0000000880)={{0x4, 0x8001}, 0x1, 0x9, 0x0, {0x70d}, 0x1}) [ 525.552609][T12077] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:40 executing program 4: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000c40)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f00000000c0)=0xd) ioctl$TIOCSETD(r2, 0x541b, &(0x7f0000000040)) fcntl$setstatus(r1, 0x4, 0x6100) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) r4 = creat(&(0x7f0000000180)='./bus\x00', 0x0) ftruncate(r4, 0x8200) r5 = open(&(0x7f0000001840)='./bus\x00', 0x0, 0x0) sendfile(r1, r5, 0x0, 0x1000) getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f00000000c0)={'NETMAP\x00'}, &(0x7f0000000100)=0x1e) ioctl$KVM_GET_PIT2(r5, 0x8070ae9f, &(0x7f00000001c0)) fallocate(r4, 0x11, 0x0, 0x107fff) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000040)) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000140)) sendfile(r1, r3, 0x0, 0x8000fffffffe) openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x80000, 0x40) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000000080)=0x8, 0x4) [ 525.813527][ T26] audit: type=1804 audit(1552233221.106:297): pid=24698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 525.848776][ T26] audit: type=1804 audit(1552233221.106:298): pid=24698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 525.882005][ T26] audit: type=1804 audit(1552233221.116:299): pid=24698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 525.926979][T24695] QAT: Invalid ioctl [ 526.007616][T24695] QAT: Invalid ioctl 15:53:41 executing program 1: r0 = socket$netlink(0x10, 0x3, 0x4) sendmsg$nl_generic(r0, &(0x7f0000005000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)={0x48, 0x15, 0x7, 0x0, 0x0, {0xa, 0xf0ffff, 0x600}, [@generic="667e279639a91d7b7f0000017daf4204a00b32eadc2828417f000001e3d8960f65b27ee8125f42360500000015739d53d5"]}, 0x48}}, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="36000000d61f2c0c91dcc5efa4fbc1f3f1ee65d647c909c928f8d2d40de3487129a5561d7516da536d39e0f393ce00ee982181f4e66427b4e4fe"], &(0x7f0000000240)=0x3e) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000280)={r2, 0x6}, 0x8) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.events\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000080)={0x0, 0x9}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000000100)={r4, 0xfffffffffffffffd}, &(0x7f0000000140)=0x8) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r3, 0xc0505510, &(0x7f0000000540)={0x403, 0xa, 0xca, 0x3, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}]}) [ 526.137615][T24672] bond0: Releasing backup interface bond_slave_1 15:53:41 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c000000100001060000000000000000000000f8", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012000c000100626f6e64000000000c0002000800110000000000"], 0x3c}}, 0x0) [ 526.343742][T24676] bond0: Releasing backup interface bond_slave_1 15:53:41 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 526.480302][T24679] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 526.493777][T24678] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 526.515246][T24682] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 526.540641][T24709] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 526.574699][ T26] audit: type=1804 audit(1552233221.866:300): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 526.611286][ T26] audit: type=1804 audit(1552233221.876:301): pid=24699 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 526.665316][ T26] audit: type=1804 audit(1552233221.886:302): pid=24698 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 526.691898][ T26] audit: type=1804 audit(1552233221.886:303): pid=24712 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/file0/file0/root/syzkaller-testdir677559387/syzkaller.KXehSX/445/bus" dev="sda1" ino=17211 res=1 [ 526.764395][T24713] bond0: Releasing backup interface bond_slave_1 [ 527.034722][T24716] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 527.575109][ T1175] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 527.575255][ T8398] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 527.591602][ T3755] Bluetooth: hci1: command tx timeout 15:53:43 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:43 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x0, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x100, 0x0) r2 = mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x8, 0x20010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(0xffffffffffffff9c, 0xc018620b, &(0x7f0000000040)={0x0}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x34, 0x0, &(0x7f0000000080)=[@register_looper, @decrefs, @acquire_done={0x40106309, r2}, @increfs_done={0x40106308, r3, 0x2}], 0xb3, 0x0, &(0x7f0000000100)="f9139394dd30de86e1dce06c0c2c63ded12ce5f9c4fa9b5766d67ee76d027e2b58862b479db29e528829495fce3965150035409822e8f91f273e3667a3e803b82ffed686b9e8b931b9af631c41828db2a6d298c276b6f3e7894b946469ecfbb0fce85d900063ef76023f2648ad7170cd6e15bfa8b7b954f4b70f780a25a96fac069c34dea58211be9346159901c3b4f97d91982fdd728ae764393324350010ce63fe5f597478b24d68efdc2b2caaed16da1afc"}) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:43 executing program 4: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x0, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x2, 0x0) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r1, &(0x7f0000000300)={0x4, 0x8, 0xfa00, {0xffffffffffffffff, 0x2000000000000000}}, 0x1) poll(&(0x7f0000000100), 0x20000000000000b1, 0x808000000000) ioctl$ASHMEM_GET_PIN_STATUS(r1, 0x7709, 0x0) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x4) ioctl$DRM_IOCTL_FREE_BUFS(r0, 0x4010641a, &(0x7f0000000080)={0x2, &(0x7f0000000000)=[0x3, 0x87e0]}) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000180)={0xf, @pix={0xe5, 0x80000001, 0x49433553, 0x2, 0x8, 0x7fffffff, 0x7, 0x8000, 0x0, 0x0, 0x1, 0x5}}) 15:53:43 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:43 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x80000000000002, &(0x7f00000025c0)=0x204, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000440)='lp\x00', 0x3) bind$inet(r1, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220203, 0x0) bind$alg(r2, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) getsockopt$inet_udp_int(r1, 0x11, 0x0, 0x0, &(0x7f0000000280)=0xfffffffffffffe6a) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000018000)={0x0, 0x0, &(0x7f0000013ff1)={&(0x7f0000000080)={0x20, 0x18, 0x301, 0x0, 0x0, {0x16}, [@typed={0xc, 0x3, @u64}]}, 0x20}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x9, 0xfffffffffffffff8, 0xffffffff, 0x7}) openat$vsock(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vsock\x00', 0x0, 0x0) ioctl$KVM_HYPERV_EVENTFD(0xffffffffffffffff, 0x4018aebd, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000800)={0x0, @in={{0x2, 0x4e24, @local}}, 0x2, 0x4, 0x101, 0x0, 0xfffffffffffffc0e}, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f0000002d40)={0x0, 0x4, 0x3, [0x3f, 0x4, 0x0]}, &(0x7f0000002d80)=0xe) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000006ac0), &(0x7f0000006b00)=0x8) close(r4) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x4) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000480)=ANY=[@ANYBLOB="000000001f016cbd24e5463ba3daa1799bbfd17522215e9a14dd4d1d146b86ab0ffc186f86e9536fdbf5646501000000bc4a150fc5252455d30a2b691da48b03817799416f0ccacfe9bb25ce16b4cc981897135660c541da69e3933c2aec182f"], 0x0) ioctl$TUNSETSNDBUF(r2, 0x400454d4, &(0x7f00000000c0)=0x3) epoll_wait(r2, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}], 0x6, 0xd63) sendto$inet(r1, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r1, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r3, &(0x7f0000000900)=ANY=[@ANYBLOB="231d4e583216ba1269c870b4dd584a64371962d577813dbfc749119f36a78d869919a6aa8506093f9bbee43e56cc146bbe826f350fb089b10ec4073192dc6798f313ee5b31d1d1b9201bbb10e776fc934c96c8d74dcc07d4dd3b5b8a0587f6ffbe0804a3c826da6c84f22f5b34a2f91b4141a6370575d2597db67155c43ea38beaab7ff33691c7fcb12ddc52bfdf1fdf993419f13beca4524b87eba0aafbf8fc64e2267b5431604b429195c86624206444a1c75c0137503c6b1e8893c8be6003fb3c21be95a87f92d141f715c17b2332d62350523cc779e0f7e9ad1b0324eb211c4a1f8eb8b7b90f459e531730cd912916114d829219c7e0a3af3e446a567746baa961b9c106adf5ba216b3c07cc78d57212cfc7134a01c9eac855410dc44416122158c45298c8138c05043f7d1eb5c3797e9190d1f4b7c4e33d130556655db432cf787a5e70367b018ff0c3adad678a0610dc01b19d36a459c74ceb0139240e32c375f2e8e64c4ab4ae06db4a74fea2fc1de7a0f8b23b1259d429fb03a0195a288ed7a172299ea0abca1ea7048bfe21676b02a544203822fc2c05ea6fe7f2f3bc7cb1fad317bc101215eb2277c927048e41a816204ff2533d31f66b0f302ee98d3c739b69e57fc1661074a508d599b370351d145263a96d2af3c3ecfc26a2d817d5b68e73d9c6fb4387499740553da2df462efd89e6c0a78d776ea1f29eaa73f3a39beae94c2e13718a92e808775ef9abc54d089060a4b8f067599a347aa05915c825a40658f0736146217906e5d9d813e60d12ecee8c55cb7005b6690adee50a68f6cf072b8cab9555056be1f18764469e0d13533945c36c9def316c7b338ba755680f176bb0a06cc97c2a434c9e5b289499ec7425a61394c64e3c83d8fa97bba3c86ca702f1d7d03e1280c8180cd7dc97c4e752fbdbad65b2fbb1846b24f23556c6337715d9593eb83ded606c7b3e8a8453fec6daeb994c6da0f0a96dc9e60d92e5703cfbbc76466c8c2b0e084b6f2a337379113b3ffd78d76538e4ac61835ff02854a51a5f5a9b074682cc1b053c0c30c7f27b182c11822f27f4923951a18506c2822fea310338223fd4c51202ee14baff9d2239899931f91d5ba6697a5a35cc83e2b110f376fae77d1b1558ad777c661b616b7f39e85d0f61249df206f6233374c5caa5fdd1f41e873684fb34f4f757ea89e8cf0b2f5bd4996fc25838420da858cf19002e00e4d8d9f6fde450a69e771c7b5919359a69c20b8aef8863b17d8059eb843c3932189805cb5b389c73154c3399605ec7d414e34468e625cc3fa6551123588877dc3d5676a95fecf52b02115777d1aeb933218ba43e27847bad01ff773be51224a0475249ea64a70fc604f433dd22780d164b706890cc276374fe02d5e5a2b0dceac8977f69c4e3cec9ef61956c74de3c5c86a0f1b56abf0fc2b9be2a9a0937283e276d519ebeba3ddfe32e1de3d2223e6e342f8e4f04f3fb8f2a88566982a1fbf0aaa69f2630401dea8f53e1d6465a7d1e69bdd47941b730c44d33f58e3a317b7d6fa7a6a279db94e53c5131feab8a4c8b4862bf79d52e6f27989242d3d617e27cb9edbca2e72152e3075ab1e830beb91e673e720e719e3d666fc31b23d34a8d97e08a3c116fc86077978a9245d9119204a21e4e6fd5391da6db0c1c3bc5ed0a5d29194f255a6d8913ddb469645c9d4ce47a2c87e22492779d806a206fe3814e26fc9db5e88bc5e0a3429bebeb618b26b867968eccc25e3fcb69cc60dae0144fde555df030a8d9ff3f0cc3ea27e07d5d419cc34904d5e9d5031fb6950d824e377a15c48e5122e5fd99460dbcf174f5d074acc75efb0c88a04a72c89e5ade8e9984dbc15a9d58506326c39d0267a4c19f74c80fdf84d392c47cdab8a786f0a6b51926af3fa09547f43df4142570a66643fdac979b39dbcb7d1aecffd461e8dd8d85ae8836848bd71c84e2982f640d60b11476d748630b617b88b08b3d62f92335b406e55a87661e16bacc8a2586a30c32eaa642afd90376be83aa0c4f5cead7e386222a55d36a0a2e14fdc596050ad01c6531c389117d92af97bb358382658a9d31bc542385c6743915149de57a89191bb8e90727a470ee775e239b8670289bbd3e506c61e9045ed255189d66c139a7e863c299c6d7567518a6951de642b0575a9b98126ca8f0ca14d715772e66bb3c815805b902b5d69d92ff98bd48a103989618c7f5b1c2a31c4ea43ea6a6c1d2eca4e4f4435126c4bbc462289882a41781ab670b4779a467a15bb3dd70251b642d023cb91765a960a409adfb1fae2fa7cfa56a6bfe355af319ab604809e3a783264cc1b43dd73a788767460c3801b20508505bba15fe79a3294b0bdb916183bd77429f71da5e9c3f96e263eec21960b81e8aa2914ce429b5985bfbd5db0afbe737632be9e2a32a01d931c6a73f996d1ced4dd653ed657032d076b7f16d1eb3411fa805702e62942404dba8d92fc1b9c417b0fc422519976dd1650ee8b6e06081bb9f605d9fdc37232205ad6134d92bae4304127d12be2044e088f55afe8242e0fc3cd5c81ff4913b6867944235e611e70a637df5bba28e7bb640d59a84a9aa2d2950fdae55c17421e2e7b8719f8086d522caf941e574fa00c4fbd02512bf632275c3482b544c4e8d3ca57a69737ea86a9ca818004769888f5d3e50bab711222578445131c9f942e294641d29e763c2351caa28820fda2f8bdcad2ae30fa0a673a57d186a9a99d10b67a526c4821852297390684eb17bf4e333d3d7771432bfc7fb1c36392d86bff432b348fba93cf2d975bc12b41f672f021e5d135ed7a3a6cdcd01c3ad9c5071d2ae5826422fd017d776d3afeacab5c8b33abfa832feb564c6f701563ef1ff1c0d2c55101b3813cb386441c28ab272464151370273f839e4fbcba935d507233cb2f477442bde81e8cd7d2df82aeba5bb06747d7c3227b0702b03c24c851d60127cf214647021f4d245eb68a169103fc6d3f337ff56d761b92ebe868c9208bcca6f186a90ee0b546fba7d105b5b98fd3d19a114baf197d939e4ebf4aed203fd3f25225dd70d035914bbbb910b46e38c9d5e3139a2c3d0a936aeda009f6cd4369feb4f3ed5c366b4b8271f0d8960e43e0172661a8397e99e7d7f2caf4980b45bdb99ede0cef72643da8f6c6688346f8779d89f92fc51df50c0192636704f8c5ae0b669646a4c6089a9af1e28bcd9ac15f49a1dba33b8a4b28d8e1a1545894966f45f959ead6a4b5f6e83509a93a3221ab4b569272aec2534fa029b902aa52edd74207318de420c6555d149a1fc233b77560c28ab69b14992c20776839e268c80c9c0e11c57abf3e17587db0005719eb5cde4e201fd1a5181768de54bc641464862e9d8a199332f020ffd33d0039e512801abf80ec58e704d346cf752d97b4f2938a5813656f0d8a9c1444769ea69749178f666f7f75bb7ae863e0cb840610858ad7f45e9aa4244567e5879d44284e0ce3664e62063e882c9d62eeb6738dead33cb3d17e184f6159108192744af91ea3cea39d73d9b8608486953d3be98512eb1690e3cbdbce3b4a186dcc44eb97f2abce5bc63944879ed06fc4f2c379356737d215b40447eb6d0f6dc001e8364f6053d4a27336d16c19d0b266aa087d3c029e20fe668b123d429180e6fbfad454a0c5ddf927e8777b5e6b23323d30d4f9874ad4905644fed9881616a39db256e69dc55330480894f556157a76d89323ef770bbc2f939f21c362e1db9dbcfa8d678b48d89b420db14916c14fedba669a60ac28ddaf5223c39a30f581bb29aef7cc4200b2fad23fd687ea048d4c40793ee07c9870e6a0bca68195089f372a7ad2250a0ce2ba0b7454082a3fe853dde06674a41ab3e4ece760e6e3df284533f46c2d0dbea4d6c52d2d21bcf4f76f30dd517b28e2a620c96ae4b9ee01d0424e4df057bddcb0f9a48df808c8dea5061dd63ba8eb6caa735fb3957ae2da52e1b5cb598779474ef8876c3db67544e7609b068041951e0d6370801643c05779b93d128bb4248a3bbae7964030224e93134a630fdd1a5ed1448f7e9d3d73f9061514c90e7fbae684867bf9807924b0fef844f20aeb8cfd0b5c9a22df49bb4cfdbf8071cd5611224702c2164de416a281f556cfa4d045628adfdccff1e21f7c2e6487ca28ce182199903a18bed8336d260913638160945eacc10ca7aa95b5f15d0afc50c058dbc976bf06b09e5b99ac617d9bd6dee689903b8044150797085b3fbb80de1a5b8724256365c94057fbc725e7ba618c212fa148fcea2a8c2aac59193be5df83f8b440720c8038e09024c675b10dd25410dd38b4b5584f222c5e30b43c9351fe89b5dec2e8d555e22da7704d31983949345ab60b20769fabaf0f95d679e4e60faee553b1aae75a3886c856fcb6f516979eaf3b2b2f86b3548b8a4abc6f68360b0278d8aa978dc3f63c0de3bdf8e88dfe75a78cfc388ac3d4ed88928100e08b316b4f51af8e836b9ef91a7db3a7b7fdaddff44220ad9de4538075a7998df03b1445a6235bb2c8444b505d32ae5ba55cc3b008fcc1efe528e246fe5a00b3bb6a5a1f25f79ee4c9a1ad00ab2078359e1030475487f91a4e3873f13d654a2e68193e6a3f523b7d8e056e2e684838ea222b4ec67464d387972963714d7d825f86b23dde21e29c2b2cc0b2763f399569a514bff091252722c936ba7598c40d902be0076e1dcff2b029ac575c6c3684921cf9d6a29469b3afd0464cd60ccfc58126046656f2ff8cd04d93c168a3f7051757465128918b847b05cc04268898993af4e56e457b5034dfad8ecc1d5a2f40ca3593def66f234c0a4b233ed91660d573b4321577ccf68583a4c88a5a326ff31c1770ccd6895cc5201ea9bf5f509436e0ba33b1d25a2ffd0843de1485df18cad3f0f0082ea47767eb216581cf495357c314a3dc8e969d734dd965a21707fd5255a5b655d71c31442917a8fb584da8d008a76b765179ab9acb308c1c9aa3cf6aa0ee0cf983ccba32084d7ff77daa86acc0b45ae956f81df51d905601a6ee638695c31812c22cdea3a8c2d75668779c4491ba757d9bca17d42dd3579254220a31a966fac680fe594046d531435fa79bf2156037456dd6c9dd297910ae38ad22b77ff2b22585f84bfc770ad9ce7db1bd32eae6db3f0579039804b3f66c38ecfe59971d58f64b8e30058d2edfab1a5e1e5be42c342d84c5220c21503d40e65953a26dbd0d76602dc8270c13407789e018e9e7f2171fa23a3af7bc7a572087a64d4b2bf741d2510d854f73cb98599ec08b782309fbf280f75f0ef5af17918fa3074c30511319841b82d5fe01ae532aa9890e32d0e7219538bbcfc794b6a205d601409806453b6a939a5928af841c92323d5d6adc02529fa7186d0a4c98c044b048e2421d880af243b9fdda46829d0ff0ff2731f01d2748c9bbc37d5a6fd80188ffc1d2b1faccc223c32222565748dfc97c2899b2a55505e329d6de5c335fab97e0861440aefdc9c2ba416452ec91ebb62f824e222080577884672937bd4ffda75716e80fa6dbd03a9026514b7e7c04fcea8e757714b7141b80e03f39762c0750e2a078de02d6c1fe88c1ec779d135da61ee4d8721364796faa9874afe4b91b80e520312e533fa12dbeb60d788e7da9104f88401165975db14254fd0297b5b3ce1155bdc6e8f261b443595a18edf0a7f0887b0072668ad67a91067ac68bf8858aac9515a3adcdaae20debde614405f2aa0ce1facbb817959a90929d06c409ebbb0d114e5ae420f7071ef39e6fce581"], 0x1000) getsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f00000001c0), 0x2) accept(0xffffffffffffffff, 0x0, 0x0) 15:53:43 executing program 4: ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000001240)="2e0000002a00815f00000000000000cf1200b0eba0b4d65cdbaa18b29c473da67e3d743298cbb3001be63e75c80b", 0x2e}], 0x1}, 0x0) [ 527.765462][T24727] bond0: Releasing backup interface bond_slave_1 [ 527.857387][ T21] Bluetooth: hci0: Frame reassembly failed (-84) [ 527.891029][ T584] Bluetooth: hci1: Frame reassembly failed (-84) [ 527.899017][ T584] Bluetooth: hci1: Frame reassembly failed (-84) 15:53:43 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) sendfile(r0, r0, &(0x7f0000000100), 0x5) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x301000, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r3, 0x5381) add_key(0x0, &(0x7f0000000080)={'syz'}, 0x0, 0x0, 0xffffffffffffffff) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = dup2(r2, r2) write$P9_RREADLINK(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000017020007002e0166696c6530"], 0x10) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.508325][T24730] bond0: Releasing backup interface bond_slave_1 15:53:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0xa0, 0x503000) write$P9_RLCREATE(r3, &(0x7f0000000080)={0x18, 0xf, 0x2, {{0x9, 0x2, 0x4}, 0x5}}, 0x18) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x30, 0x0, 0x0, 0xfffffffffffffee3) syz_emit_ethernet(0x1, &(0x7f0000000000)=ANY=[@ANYBLOB="aaab04aaaaaa04090000000300000029000000"], 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 528.691652][T24732] bond0: Releasing backup interface bond_slave_1 15:53:44 executing program 1: r0 = socket$kcm(0x11, 0xa, 0x300) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x1, 0x2000) ioctl$UI_SET_EVBIT(r1, 0x40045564, 0x8) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000740)={&(0x7f0000000480)=@pptp={0x18, 0x2, {0x0, @empty}}, 0x12, 0x0}, 0x0) [ 528.846691][T24737] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 528.854946][ C1] net_ratelimit: 19 callbacks suppressed [ 528.854954][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.854997][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.855072][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.878083][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 528.883920][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 528.889751][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:44 executing program 4: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$dmmidi(0x0, 0x6c2c, 0x80000) r2 = socket$inet6(0xa, 0x2, 0x0) setitimer(0x1, &(0x7f0000000180)={{}, {0x0, 0x2710}}, 0x0) timer_create(0x0, 0x0, &(0x7f00000047c0)) openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/attr/current\x00', 0x2, 0x0) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) getegid() lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r0, r3, r4) r5 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x3f, 0x800000000101) ioctl$BLKTRACESETUP(r5, 0xc0481273, &(0x7f0000000440)={[], 0x7fff, 0x1, 0x0, 0x7fff, 0x81}) r6 = openat$cgroup_ro(r5, &(0x7f0000000b00)='/group.sta\x9f\xd4t\x00+\x04J{\t\xab\v\x02t\xe1\t\x85\xa6\xfa\x15\xb3[\xa6\x94!\xf2\x04\xde\xc5f\x8a\x06\x00\x00\x00\xb9\x0f\xf8`\xe0\x1f&+\xaf\xacu\nm\\\xe2Y\xcba\xea\f\xd9DXX>\xef/\xc5\x97\xea\x93\xa7\xde\xc9\xb4\x16\x8eF\x8b\xe0Wm\x1d\x0e\xbf\x8b\xc4G\x8f\x8e\xd8[T|i$\x88\x04\x00\x00\x00\x00\x00\x00\x00\x90\x1eB\x8b\x98\xad\xd17_Q\xe15\x84\x8f\xea\x98\xc6\xe3WE\x11\xe0\xc6\x1f\xf2/\xf6\x1f', 0x2761, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000002740)}, 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x7dc, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmdt(0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x4030582a, &(0x7f0000000000)=0x8) ioctl$sock_FIOGETOWN(r2, 0x8903, 0x0) fstat(0xffffffffffffffff, 0x0) r7 = syz_open_dev$mouse(&(0x7f0000000280)='/dev/input/mouse#\x00', 0x7, 0x2000) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f00000007c0)) ioctl$sock_SIOCGSKNS(r5, 0x894c, &(0x7f0000000800)=0x2) ioctl$EVIOCGSND(r7, 0x8040451a, &(0x7f0000000540)=""/219) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f00000002c0)=ANY=[@ANYBLOB="01022cbd7000fcdbdf25040000000800060004000200380001001c000200080002000200000008000200050076000800030064703a73796dd9880000000000000008000300020002006c000100030000000c00060008000100420100000c001e000800020005000000dbfb66bcee58953706bb1b15c33e78e238d513e1a6703745b84b66832df88ddc14e769d9ec08a35ae3562bee619638296db7c2b8a308f7ab06b3185a2037375d77ff68b687be7cf185aa8034a1a0ca9d5d273225856753479537fdb72a32695182c7de4f06305cb383e328868e5cce3f51d0b679c4fe192f8726043100000000000000000000"], 0x1}}, 0x4800) fchmodat(r1, &(0x7f00000004c0)='./file0\x00', 0x110) 15:53:44 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:44 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 528.903848][T24735] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 528.923807][T24739] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:44 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 529.023150][T24767] bond0: Releasing backup interface bond_slave_1 [ 529.494990][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 529.500897][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 529.548307][T24772] bond0: Releasing backup interface bond_slave_1 [ 529.667543][T24773] bond0: Releasing backup interface bond_slave_1 [ 529.895102][ T7751] Bluetooth: hci1: command 0xfc11 tx timeout [ 529.895169][ T5] Bluetooth: hci0: command 0xfc11 tx timeout [ 529.901295][ T8398] Bluetooth: hci0: Entering manufacturer mode failed (-110) [ 529.907173][ T1175] Bluetooth: hci1: Entering manufacturer mode failed (-110) [ 529.944602][T24774] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 529.958747][T24776] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 529.975002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 529.980789][ C1] protocol 88fb is buggy, dev hsr_slave_1 15:53:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0xffffffffd, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x1, 0x2) setsockopt$IP_VS_SO_SET_DEL(r1, 0x0, 0x484, &(0x7f0000000080)={0x0, @broadcast, 0x4e21, 0x3, 'dh\x00', 0x20, 0x3, 0x20}, 0x2c) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x9) 15:53:45 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x100000003, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000640)={0x4, &(0x7f0000000340)=[{}, {}, {}, {}]}) clock_gettime(0x0, &(0x7f0000000280)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x4000052, 0x10102, &(0x7f0000001540)={0x0, r1+10000000}) lsetxattr$security_selinux(&(0x7f0000000200)='./file0\x00', &(0x7f00000002c0)='security.selinux\x00', &(0x7f0000000300)='system_u:object_r:devicekit_exec_t:s0\x00', 0x26, 0x0) r2 = openat$zero(0xffffffffffffff9c, 0x0, 0x220001, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) ioctl$SIOCRSGCAUSE(r0, 0x89e0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000007c0)='fou\x00') ioctl$sock_bt_hidp_HIDPGETCONNLIST(r0, 0x800448d2, &(0x7f0000000000)={0x2, &(0x7f0000000800)=[{}, {}]}) sendmsg$FOU_CMD_DEL(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20a00228}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="220328bded66eb5527d8dbc635050008"], 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x80) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r2, 0xc008551b, &(0x7f0000000140)={0x2, 0x1c, [0x0, 0x200, 0x174b, 0x5, 0x3, 0x8, 0x778d]}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000100)=0x80000001, 0x4) 15:53:45 executing program 4: mkdirat(0xffffffffffffff9c, 0x0, 0x0) setsockopt$bt_hci_HCI_FILTER(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, 0x0, 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000000)={0x8, 0xf, 0x7}) ioctl$UI_SET_PROPBIT(0xffffffffffffffff, 0x4004556e, 0x0) r3 = syz_open_dev$sndpcmp(0x0, 0x0, 0x0) dup2(r3, r2) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, 0x0, 0x0) 15:53:45 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:45 executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x9, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r1, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r2 = userfaultfd(0x800) fcntl$addseals(r2, 0x409, 0x8) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r3 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r1, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r4, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) ioctl$SG_GET_KEEP_ORPHAN(0xffffffffffffffff, 0x2288, 0x0) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(0xffffffffffffffff, 0x5427) socket(0x0, 0x2, 0x4) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) 15:53:45 executing program 5: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x13, 0x0, 0x6, 0xcbf, 0x10, 0x1, 0x3}, 0x2c) r1 = dup3(0xffffffffffffff9c, r0, 0x80000) ioctl$TIOCSBRK(r1, 0x5427) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getresuid(&(0x7f0000000780)=0x0, 0x0, 0x0) setreuid(0x0, r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ifreq(r3, 0x8991, &(0x7f0000000140)={'bond0\x00@@\xea\xff\xff\x80\x00\x00\x02\x00', @ifru_names='bond_slave_1\x00'}) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x1b2) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mlock(&(0x7f0000ff9000/0x4000)=nil, 0x4000) r4 = userfaultfd(0x800) fcntl$addseals(r4, 0x409, 0x8) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@initdev, @in6=@mcast1, 0x4e21, 0x6, 0x0, 0x0, 0x2, 0x20, 0x20, 0x1d}, {0x0, 0x9, 0x2, 0x0, 0x0, 0x0, 0x10001, 0x6}, {0x0, 0x0, 0xde83, 0x1}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in, 0x0, 0x3b}, 0x2, @in6=@rand_addr="5a67384dfb89d45542b2e9f156ebbce3", 0x0, 0x3, 0x1, 0x426, 0x0, 0x0, 0x8000}}, 0xe8) getpid() r5 = syz_open_dev$radio(0x0, 0xffffffffffffffff, 0x2) ioctl$sock_ifreq(r3, 0x8990, &(0x7f0000000240)={'bond0\x00\x00\x00\n\x00!!\x00\x01\x00', @ifru_names='bond_slave_1\x00'}) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000040)=0x0) setpriority(0x3, r6, 0xde) setsockopt$RDS_GET_MR_FOR_DEST(0xffffffffffffffff, 0x114, 0x7, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r5, 0xc1205531, &(0x7f0000000480)={0x0, 0x6, 0x0, 0x0, [], [], [], 0x0, 0x4, 0x0, 0x0, "5dc2486531cd40699efef484f7185baf"}) mremap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) ioctl$TIOCSBRK(r1, 0x5427) syz_open_dev$vcsa(&(0x7f0000001180)='/dev/vcsa#\x00', 0x9, 0x2081) [ 530.004174][T24778] bond0: Enslaving bond_slave_1 as an active interface with an up link 15:53:45 executing program 4: syz_emit_ethernet(0x4b, &(0x7f0000000100)={@random="e1284abef1b2", @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "10a67c", 0x15, 0x806, 0x0, @empty, @rand_addr="7b2052c776becd6abb08b65623de696c", {[], @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}, {"ed"}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$BLKFLSBUF(r0, 0x1261, &(0x7f0000000040)) 15:53:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCMBIS(r0, 0x5416, &(0x7f0000000000)=0x20000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0x1fc) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000040)) [ 530.134036][T24792] bond0: Releasing backup interface bond_slave_1 15:53:45 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x0, 0x0) sendmsg(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="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", 0x1000}], 0x1}, 0x0) 15:53:45 executing program 2: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x10001, 0x202000) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000040)) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0xf) ioctl$KDADDIO(r0, 0x400455c8, 0xa) 15:53:45 executing program 4: pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mlock2(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1) tee(r1, r0, 0x3, 0x0) r3 = getpid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$int_in(r4, 0x5452, &(0x7f00005ebff8)=0x3f) process_vm_readv(r3, &(0x7f0000000180)=[{&(0x7f0000000240)=""/132, 0x84}, {&(0x7f0000000080)=""/75, 0x4b}, {&(0x7f0000000300)=""/252, 0xfc}, {&(0x7f0000000440)=""/4096, 0x1000}, {&(0x7f0000001440)=""/232, 0xe8}, {&(0x7f0000001540)=""/255, 0xff}, {&(0x7f0000001640)=""/4096, 0x1000}], 0x7, &(0x7f0000004a00)=[{&(0x7f0000002640)=""/90, 0x5a}, {&(0x7f00000026c0)=""/58, 0x3a}, {&(0x7f0000002700)=""/4096, 0x1000}, {&(0x7f0000003700)=""/193, 0xc1}, {&(0x7f0000003800)=""/207, 0xcf}, {&(0x7f0000003900)=""/4096, 0x1000}, {&(0x7f0000004900)=""/163, 0xa3}, {&(0x7f00000049c0)}], 0x8, 0x0) fcntl$setsig(r4, 0xa, 0x12) fcntl$setownex(r4, 0xf, &(0x7f0000704000)={0x0, r3}) recvmsg(r5, &(0x7f0000000140)={0x0, 0x279, 0x0}, 0x0) dup2(r4, r5) openat$sequencer(0xffffffffffffff9c, &(0x7f00000049c0)='/dev/sequencer\x00', 0x0, 0x0) tkill(r3, 0x15) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f0000004a80)=""/34) write$binfmt_script(r2, &(0x7f0000000000)=ANY=[@ANYBLOB='#'], 0x1) 15:53:45 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000380)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) unshare(0x400) ioctl$KDADDIO(r0, 0x400455c8, 0x9) [ 530.431997][T24828] ================================================================== [ 530.440116][T24828] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 530.447831][T24828] Read of size 8 at addr ffff8880a78b9198 by task syz-executor.2/24828 [ 530.456064][T24828] [ 530.458402][T24828] CPU: 1 PID: 24828 Comm: syz-executor.2 Not tainted 5.0.0-next-20190306 #4 [ 530.467063][T24828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 530.477110][T24828] Call Trace: [ 530.480406][T24828] dump_stack+0x172/0x1f0 [ 530.484736][T24828] ? lockdep_register_key+0x3b9/0x490 [ 530.490109][T24828] print_address_description.cold+0x7c/0x20d [ 530.496085][T24828] ? lockdep_register_key+0x3b9/0x490 [ 530.501466][T24828] ? lockdep_register_key+0x3b9/0x490 [ 530.506832][T24828] kasan_report.cold+0x1b/0x40 [ 530.511596][T24828] ? lockdep_register_key+0x3b9/0x490 [ 530.516962][T24828] __asan_report_load8_noabort+0x14/0x20 [ 530.522586][T24828] lockdep_register_key+0x3b9/0x490 [ 530.527780][T24828] alloc_workqueue+0x427/0xe70 [ 530.532541][T24828] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 530.538257][T24828] ? kmem_cache_alloc_trace+0x354/0x760 [ 530.543794][T24828] hci_register_dev+0x209/0x860 [ 530.548653][T24828] hci_uart_tty_ioctl+0x766/0xb00 [ 530.553674][T24828] tty_ioctl+0xac9/0x14d0 [ 530.557997][T24828] ? hci_uart_init_work+0x150/0x150 [ 530.563187][T24828] ? tty_register_device+0x40/0x40 [ 530.568293][T24828] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 530.574526][T24828] ? tomoyo_init_request_info+0x105/0x1d0 [ 530.580237][T24828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 530.586471][T24828] ? tomoyo_path_number_perm+0x263/0x520 [ 530.592098][T24828] ? debug_smp_processor_id+0x3c/0x280 [ 530.597554][T24828] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 530.603356][T24828] ? __might_fault+0x12b/0x1e0 [ 530.608118][T24828] ? tty_register_device+0x40/0x40 [ 530.613226][T24828] do_vfs_ioctl+0xd6e/0x1390 [ 530.617809][T24828] ? ioctl_preallocate+0x210/0x210 [ 530.622924][T24828] ? kasan_check_read+0x11/0x20 [ 530.627765][T24828] ? _copy_to_user+0xc9/0x120 [ 530.632434][T24828] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 530.638750][T24828] ? put_timespec64+0xda/0x140 [ 530.643509][T24828] ? nsecs_to_jiffies+0x30/0x30 [ 530.648352][T24828] ? tomoyo_file_ioctl+0x23/0x30 [ 530.653767][T24828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 530.660007][T24828] ? security_file_ioctl+0x93/0xc0 [ 530.665111][T24828] ksys_ioctl+0xab/0xd0 [ 530.669260][T24828] __x64_sys_ioctl+0x73/0xb0 [ 530.673845][T24828] do_syscall_64+0x103/0x610 [ 530.678455][T24828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 530.684334][T24828] RIP: 0033:0x457f29 [ 530.688225][T24828] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 530.707821][T24828] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 530.716231][T24828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 530.724194][T24828] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 530.732158][T24828] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 530.740122][T24828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 530.748084][T24828] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 00000000ffffffff [ 530.756058][T24828] [ 530.758390][T24828] Allocated by task 23741: [ 530.762805][T24828] save_stack+0x45/0xd0 [ 530.766953][T24828] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 530.772580][T24828] kasan_kmalloc+0x9/0x10 [ 530.776905][T24828] __kmalloc+0x15c/0x740 [ 530.781175][T24828] alloc_workqueue+0x13c/0xe70 [ 530.785930][T24828] hci_register_dev+0x1b8/0x860 [ 530.790772][T24828] hci_uart_tty_ioctl+0x766/0xb00 [ 530.795790][T24828] tty_ioctl+0xac9/0x14d0 [ 530.800112][T24828] do_vfs_ioctl+0xd6e/0x1390 [ 530.804814][T24828] ksys_ioctl+0xab/0xd0 [ 530.808969][T24828] __x64_sys_ioctl+0x73/0xb0 [ 530.813571][T24828] do_syscall_64+0x103/0x610 [ 530.819101][T24828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 530.824977][T24828] [ 530.827296][T24828] Freed by task 23741: [ 530.831359][T24828] save_stack+0x45/0xd0 [ 530.835507][T24828] __kasan_slab_free+0x102/0x150 [ 530.840437][T24828] kasan_slab_free+0xe/0x10 [ 530.844934][T24828] kfree+0xcf/0x230 [ 530.848742][T24828] alloc_workqueue+0xc3e/0xe70 [ 530.853495][T24828] hci_register_dev+0x1b8/0x860 [ 530.858339][T24828] hci_uart_tty_ioctl+0x766/0xb00 [ 530.863352][T24828] tty_ioctl+0xac9/0x14d0 [ 530.867789][T24828] do_vfs_ioctl+0xd6e/0x1390 [ 530.872368][T24828] ksys_ioctl+0xab/0xd0 [ 530.876517][T24828] __x64_sys_ioctl+0x73/0xb0 [ 530.881094][T24828] do_syscall_64+0x103/0x610 [ 530.885661][T24828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 530.891521][T24828] [ 530.893836][T24828] The buggy address belongs to the object at ffff8880a78b9080 [ 530.893836][T24828] which belongs to the cache kmalloc-512 of size 512 [ 530.907864][T24828] The buggy address is located 280 bytes inside of [ 530.907864][T24828] 512-byte region [ffff8880a78b9080, ffff8880a78b9280) [ 530.921137][T24828] The buggy address belongs to the page: [ 530.926748][T24828] page:ffffea00029e2e40 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0xffff8880a78b9800 [ 530.936870][T24828] flags: 0x1fffc0000000200(slab) [ 530.941789][T24828] raw: 01fffc0000000200 ffffea00023c5048 ffffea0002624888 ffff88812c3f0940 [ 530.950352][T24828] raw: ffff8880a78b9800 ffff8880a78b9080 0000000100000005 0000000000000000 [ 530.958986][T24828] page dumped because: kasan: bad access detected [ 530.965460][T24828] [ 530.967761][T24828] Memory state around the buggy address: [ 530.973420][T24828] ffff8880a78b9080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.981549][T24828] ffff8880a78b9100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.989586][T24828] >ffff8880a78b9180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 530.997615][T24828] ^ [ 531.002440][T24828] ffff8880a78b9200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 531.010476][T24828] ffff8880a78b9280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 531.018516][T24828] ================================================================== [ 531.026560][T24828] Disabling lock debugging due to kernel taint [ 531.032686][T24828] Kernel panic - not syncing: panic_on_warn set ... [ 531.039251][T24828] CPU: 1 PID: 24828 Comm: syz-executor.2 Tainted: G B 5.0.0-next-20190306 #4 [ 531.049291][T24828] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 531.059322][T24828] Call Trace: [ 531.062590][T24828] dump_stack+0x172/0x1f0 [ 531.066972][T24828] panic+0x2cb/0x65c [ 531.070871][T24828] ? __warn_printk+0xf3/0xf3 [ 531.075437][T24828] ? lock_downgrade+0x880/0x880 [ 531.080263][T24828] ? lockdep_register_key+0x3b9/0x490 [ 531.085645][T24828] ? trace_hardirqs_off+0x62/0x220 [ 531.090744][T24828] ? trace_hardirqs_off+0x59/0x220 [ 531.095838][T24828] ? lockdep_register_key+0x3b9/0x490 [ 531.101187][T24828] end_report+0x47/0x4f [ 531.105320][T24828] ? lockdep_register_key+0x3b9/0x490 [ 531.110666][T24828] kasan_report.cold+0xe/0x40 [ 531.115319][T24828] ? lockdep_register_key+0x3b9/0x490 [ 531.120665][T24828] __asan_report_load8_noabort+0x14/0x20 [ 531.126271][T24828] lockdep_register_key+0x3b9/0x490 [ 531.131449][T24828] alloc_workqueue+0x427/0xe70 [ 531.136198][T24828] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 531.141925][T24828] ? kmem_cache_alloc_trace+0x354/0x760 [ 531.147447][T24828] hci_register_dev+0x209/0x860 [ 531.152275][T24828] hci_uart_tty_ioctl+0x766/0xb00 [ 531.157292][T24828] tty_ioctl+0xac9/0x14d0 [ 531.161607][T24828] ? hci_uart_init_work+0x150/0x150 [ 531.166795][T24828] ? tty_register_device+0x40/0x40 [ 531.171891][T24828] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 531.178133][T24828] ? tomoyo_init_request_info+0x105/0x1d0 [ 531.183832][T24828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.190046][T24828] ? tomoyo_path_number_perm+0x263/0x520 [ 531.195654][T24828] ? debug_smp_processor_id+0x3c/0x280 [ 531.201088][T24828] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 531.206876][T24828] ? __might_fault+0x12b/0x1e0 [ 531.211619][T24828] ? tty_register_device+0x40/0x40 [ 531.216708][T24828] do_vfs_ioctl+0xd6e/0x1390 [ 531.221285][T24828] ? ioctl_preallocate+0x210/0x210 [ 531.226376][T24828] ? kasan_check_read+0x11/0x20 [ 531.231202][T24828] ? _copy_to_user+0xc9/0x120 [ 531.235857][T24828] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 531.242085][T24828] ? put_timespec64+0xda/0x140 [ 531.246826][T24828] ? nsecs_to_jiffies+0x30/0x30 [ 531.251655][T24828] ? tomoyo_file_ioctl+0x23/0x30 [ 531.256571][T24828] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 531.262792][T24828] ? security_file_ioctl+0x93/0xc0 [ 531.267913][T24828] ksys_ioctl+0xab/0xd0 [ 531.272046][T24828] __x64_sys_ioctl+0x73/0xb0 [ 531.276617][T24828] do_syscall_64+0x103/0x610 [ 531.281199][T24828] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 531.287064][T24828] RIP: 0033:0x457f29 [ 531.290941][T24828] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 531.310518][T24828] RSP: 002b:00007f664fe1fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 531.318903][T24828] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 531.326852][T24828] RDX: 0000000000000009 RSI: 00000000400455c8 RDI: 0000000000000003 [ 531.334803][T24828] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 531.342752][T24828] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f664fe206d4 [ 531.350701][T24828] R13: 00000000004c07b8 R14: 00000000004d24f0 R15: 00000000ffffffff [ 531.359686][T24828] Kernel Offset: disabled [ 531.364011][T24828] Rebooting in 86400 seconds..