st, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x700000000000000) 06:07:57 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x8dffffff00000000) [ 1386.525741] bond48: Enslaving veth319 as an active interface with an up link [ 1386.563584] bond48 (unregistering): Releasing backup interface veth319 06:07:57 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf0) [ 1386.597814] audit: type=1804 audit(1590041277.863:2622): pid=8975 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/680/file0/file0" dev="loop3" ino=2 res=1 [ 1386.621005] device veth319 left promiscuous mode 06:07:57 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf5040000) [ 1386.679604] bond48 (unregistering): Released all slaves [ 1386.838033] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:07:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xa00000000000000) 06:07:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf6ffffff) [ 1386.943716] device bond48 entered promiscuous mode 06:07:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xa005000000000000) [ 1387.010608] bond48: making interface veth321 the new active one 06:07:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x3000000}], 0x1, 0x0) [ 1387.099834] device veth321 entered promiscuous mode 06:07:58 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 06:07:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x600, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1387.126292] bond48: Enslaving veth321 as an active interface with an up link 06:07:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xc805000000000000) 06:07:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfeffffff) [ 1387.253102] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:07:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe00000000000000) [ 1387.328125] device bond49 entered promiscuous mode [ 1387.407258] bond49: making interface veth323 the new active one [ 1387.432777] device veth323 entered promiscuous mode [ 1387.448482] bond49: Enslaving veth323 as an active interface with an up link 06:07:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfffff000) 06:07:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xe802000000000000) [ 1387.499017] bond49 (unregistering): Releasing backup interface veth323 [ 1387.516306] device veth323 left promiscuous mode 06:07:58 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1f4) [ 1387.588755] bond49 (unregistering): Released all slaves 06:07:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2000000000000000) 06:07:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfffffff6) [ 1387.719354] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:07:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xeffdffff00000000) [ 1387.839960] device bond49 entered promiscuous mode [ 1387.930937] bond49: making interface veth325 the new active one [ 1388.002296] device veth325 entered promiscuous mode 06:07:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x4000000}], 0x1, 0x0) [ 1388.046145] bond49: Enslaving veth325 as an active interface with an up link 06:07:59 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2e8) 06:07:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfffffffe) 06:07:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2800000000000000) 06:07:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x700, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:07:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xf5ffffff00000000) 06:07:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x5000000}], 0x1, 0x0) [ 1388.218791] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:07:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x1000000000000) 06:07:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3f00000000000000) [ 1388.386655] device bond50 entered promiscuous mode [ 1388.479816] bond50: making interface veth327 the new active one [ 1388.500711] device veth327 entered promiscuous mode [ 1388.515642] bond50: Enslaving veth327 as an active interface with an up link 06:07:59 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfc00000000000000) [ 1388.539705] bond50 (unregistering): Releasing backup interface veth327 [ 1388.601434] device veth327 left promiscuous mode 06:07:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x6b6b6b00000000) [ 1388.692145] bond50 (unregistering): Released all slaves 06:08:00 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3e8) [ 1388.789957] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x6000000000000000) 06:08:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf0ffffffffffff) 06:08:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfe80000000000000) [ 1388.924550] device bond50 entered promiscuous mode [ 1388.971529] bond50: making interface veth329 the new active one [ 1389.034750] device veth329 entered promiscuous mode [ 1389.041319] bond50: Enslaving veth329 as an active interface with an up link 06:08:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x100000000000000) [ 1389.126244] kauditd_printk_skb: 8 callbacks suppressed [ 1389.126256] audit: type=1804 audit(1590041280.393:2631): pid=9426 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/689/file0/file0" dev="loop3" ino=2 res=1 06:08:00 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x7a5, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x6000000}], 0x1, 0x0) 06:08:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x8dffffff00000000) [ 1389.258765] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfec0000000000000) [ 1389.347889] device bond51 entered promiscuous mode 06:08:00 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x500) [ 1389.428830] audit: type=1804 audit(1590041280.693:2632): pid=9486 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/690/file0/file0" dev="loop3" ino=2 res=1 [ 1389.500791] bond51: making interface veth331 the new active one 06:08:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xff00000000000000) 06:08:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x200000000000000) [ 1389.553183] device veth331 entered promiscuous mode [ 1389.567669] bond51: Enslaving veth331 as an active interface with an up link [ 1389.588361] bond51 (unregistering): Releasing backup interface veth331 06:08:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xd8ff000000000000) [ 1389.613437] device veth331 left promiscuous mode [ 1389.700244] bond51 (unregistering): Released all slaves 06:08:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffff000000000000) [ 1389.828482] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1389.855961] audit: type=1804 audit(1590041281.123:2633): pid=9540 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/691/file0/file0" dev="loop3" ino=2 res=1 06:08:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x300000000000000) 06:08:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xa00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe802000000000000) 06:08:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x7000000}], 0x1, 0x0) 06:08:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) [ 1390.148723] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1390.151445] audit: type=1804 audit(1590041281.413:2634): pid=9568 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/692/file0/file0" dev="loop3" ino=2 res=1 06:08:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x400000000000000) [ 1390.308903] device bond51 entered promiscuous mode 06:08:01 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x700) [ 1390.357629] bond51 (unregistering): Released all slaves 06:08:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe803000000000000) [ 1390.450170] audit: type=1804 audit(1590041281.714:2635): pid=9634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/693/file0/file0" dev="loop3" ino=2 res=1 06:08:01 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xffffffff00000000) 06:08:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x500000000000000) [ 1390.618655] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xeffdffff00000000) [ 1390.757861] device bond51 entered promiscuous mode [ 1390.763239] audit: type=1804 audit(1590041282.024:2636): pid=9706 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/694/file0/file0" dev="loop3" ino=2 res=1 06:08:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x600000000000000) [ 1390.869826] bond51: making interface veth333 the new active one [ 1390.893436] device veth333 entered promiscuous mode [ 1390.906423] bond51: Enslaving veth333 as an active interface with an up link 06:08:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xc00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfffffffffffff000) 06:08:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf401000000000000) [ 1391.059393] audit: type=1804 audit(1590041282.324:2637): pid=9727 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/695/file0/file0" dev="loop3" ino=2 res=1 06:08:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x8000000}], 0x1, 0x0) 06:08:02 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xa00) 06:08:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x700000000000000) 06:08:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x40145, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0xe}, 0x10004, 0x0, 0x0, 0x0, 0x0, 0xb3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1391.275997] device bond52 entered promiscuous mode [ 1391.357487] bond52: making interface veth335 the new active one 06:08:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf5ffffff00000000) [ 1391.419087] device veth335 entered promiscuous mode [ 1391.423447] audit: type=1804 audit(1590041282.684:2638): pid=9798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/696/file0/file0" dev="loop3" ino=2 res=1 [ 1391.441842] bond52: Enslaving veth335 as an active interface with an up link 06:08:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x8004000000000000) 06:08:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ocfs2_control\x00', 0x0, 0x0) ioctl$SIOCPNGETOBJECT(r1, 0x89e0, &(0x7f0000000040)=0x8026) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$KDSETMODE(r1, 0x4b3a, 0x1) creat(&(0x7f0000000280)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, &(0x7f0000000340)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_client='access=client', 0x2d}]}}) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) [ 1391.505507] bond52 (unregistering): Releasing backup interface veth335 [ 1391.534723] device veth335 left promiscuous mode [ 1391.600779] bond52 (unregistering): Released all slaves [ 1391.636373] 9p: Unknown access argument client- 06:08:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00000000000000) 06:08:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe00) [ 1391.718036] 9p: Unknown access argument client- [ 1391.727994] validate_nla: 1 callbacks suppressed [ 1391.728061] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1391.781697] audit: type=1804 audit(1590041283.044:2639): pid=9850 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/697/file0/file0" dev="loop3" ino=2 res=1 [ 1391.869403] device bond52 entered promiscuous mode [ 1391.930151] bond52: making interface veth337 the new active one [ 1391.941539] device veth337 entered promiscuous mode [ 1391.970248] bond52: Enslaving veth337 as an active interface with an up link 06:08:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xe00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf504000000000000) 06:08:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfe80000000000000) 06:08:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x9000000}], 0x1, 0x0) 06:08:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6a}, {0x0, 0x400000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x200100, 0x130) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000300)=""/236, &(0x7f0000000400)=0xec) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64, @ANYBLOB="36002c0402000005000404000000000000000073797a3100000000000000000000ca32048b492eb0a9598ddd09e5bcd891e9c0d5d52e7068ee"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40004) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1392.130341] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1392.237298] audit: type=1804 audit(1590041283.504:2640): pid=9930 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/698/file0/file0" dev="loop3" ino=2 res=1 [ 1392.275416] device bond53 entered promiscuous mode 06:08:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf6ffffff00000000) [ 1392.321697] bond53: making interface veth339 the new active one [ 1392.378645] device veth339 entered promiscuous mode 06:08:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfec0000000000000) [ 1392.401046] bond53: Enslaving veth339 as an active interface with an up link 06:08:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2000) [ 1392.459815] bond53 (unregistering): Releasing backup interface veth339 [ 1392.488740] device veth339 left promiscuous mode 06:08:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfeffffff00000000) 06:08:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f0000000000)={0x100, 0x413, 0x5}) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x0, 0x67}, {0x80, 0x0, 0x40000000000, 0x0, 0x0, 0x0, 0x0, 0x9}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) r4 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) tee(r4, r5, 0x3, 0x1) [ 1392.575781] bond53 (unregistering): Released all slaves [ 1392.668413] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xffffffff00000000) 06:08:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xff00000000000000) 06:08:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x2000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:04 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xa000000}], 0x1, 0x0) [ 1393.048110] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xfffffffffffff000) [ 1393.092438] bond53 (uninitialized): Released all slaves 06:08:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffff000000000000) 06:08:04 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2800) 06:08:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) llistxattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=""/121, 0x79) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1393.217313] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x4e23}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@local}, 0x0, @in=@empty, 0x3500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1393.377384] device bond53 entered promiscuous mode 06:08:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) [ 1393.441727] bond53: making interface veth341 the new active one [ 1393.459934] device veth341 entered promiscuous mode [ 1393.475548] bond53: Enslaving veth341 as an active interface with an up link 06:08:04 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x3f00, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:04 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1393.674484] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1393.768597] device bond54 entered promiscuous mode 06:08:05 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffffff00000000) [ 1393.840596] bond54: making interface veth343 the new active one [ 1393.860392] device veth343 entered promiscuous mode [ 1393.895954] bond54: Enslaving veth343 as an active interface with an up link 06:08:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:05 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xb000000}], 0x1, 0x0) [ 1393.979813] bond54 (unregistering): Releasing backup interface veth343 [ 1394.015842] device veth343 left promiscuous mode 06:08:05 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3f00) 06:08:05 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfffffffffffff000) 06:08:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) fchdir(0xffffffffffffffff) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r2, &(0x7f00000000c0)={0x1f, 0x5}, 0x36) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000940)={{{@in6=@remote, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@initdev}}, &(0x7f0000000a40)=0xe8) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = gettid() ptrace(0x4206, r6) tkill(r6, 0x800000009) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r8) ioctl$DRM_IOCTL_GET_CLIENT(r4, 0xc0286405, &(0x7f0000000a80)={0x8, 0x6029, {r6}, {r8}, 0xeec2, 0x8}) syz_mount_image$reiserfs(&(0x7f00000000c0)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x280000, 0x8, &(0x7f0000000880)=[{&(0x7f0000000140)="684b38fb02aac756ee35fb7f3eae5143e98031eef728115077ea13d8bc6bbe935f1854236c4fccb86f29bccc1e0c055cafd32182", 0x34, 0xff}, {&(0x7f00000001c0)="7c741100b305ab1a85d8b45f6529f9b39ed02b7b594881383c203ff4b86aa16c0476a0cbea663c63afe87b03f2eaf7249584290fc9a295bfdb7ee9ab81056bd581b1d8b15809f9bf8c3b20fb8314632a24afa9cfda1bcd4eb820fec17675293ebf27e7bf86dd8a21c8a480202958fdbf12f62f6a0eb91c8a96b248306f7ff3548d609f8a147c8d1d946f6979796641112fdabc0ce97f32c63f26ee201c4afdc3bc5be9bc62ade391b191c252b1634fa04472803b84eaee3d69e9a81279b9cbf1f73b7d178308778c56572312a5e700a02e4284218161a5d68bfe98fdbe45b4803b66be060c56dbaa1811232ee0d476679d06ea", 0xf3, 0x1}, {&(0x7f0000000400)="57e29d8905004a69187e30d721def32f2678ea864b3de2542b480633920fcf71d6554df1f84153aeb9d74090ab90c8f4af22c0d0da270cff338ee3582dda5c1f181cf2664bbf9f83edeed72e1277cbc33b895638da51b0cd782647b3c9280c53e3268867246aa709fd81bd605c4862424d53ccda4ca87fcd1c9b06e46262a9353c4a26a41ca214feecfd2bb8f318a97597a3d97976b2c17747588264c821ce744bc2b821b81a0dd7644e15ff25ebb954041cc8dd634308af4f18381bbc752f7b185643ad6713808fd3b95f167b1302b4790863c8b2af07f230", 0xd9, 0x7}, {&(0x7f0000000540)="dbe94ae5aee930832a8244fbb71b0051b6ff798ab774437e87236c221d8816a1456f16a878493171a82cc7b326b6c767eb2b4b803ac87163b0d27c480cb2c2a605a58c59e3505117bc768102353dd7255f0c51cc2fa79297983a082f88d4a2196b9936998c45e6a05e4ce306c47da7148e42d9be8457c4fb32c10f5966385e2b12ebf7932c56c5c1cd2c2bf2cd4f00c1b2494f821ac33bd38556ca3e999969a13706bd6e47501e1f9806024248124a25382e351dc9", 0xb5, 0x8}, {&(0x7f0000000600)="77cf96922019a8454ff86399299f617c24545cef6fced61b4cddcab6a73f69e34edd0bb7157a91f11c226bf06ed5f5c33d8419af9c42af406c7a0ab0fae1737ca112c54be4e988571c3f0fa77c445beef5b58ae52e54508bf6ddc3ed8f130177c2f742ee71d349764e73cf2d3aead150b4cf19d8f4f6d26648bcbbb2ad2c17b5f08f9f707a65e417723203ef7a34dbf3d4630ae5b9ab8c8cfa1292d5383dd826d8c13c6f231e51064d6b0d519da490e3d9a0e5c6484c6eac002a4cd1bc53c807c2", 0xc1, 0x800}, {&(0x7f0000000700)="c1dc7a63993138596885a3fd7242d00eabf00ad45fbe029cc0d717003b47c36e72f4abc6e776cf628e19c4f8d69895535052ae7c5f2f1da43163422b9580dd6836152de4e4b3384392d21c77518396ffc6dcc070522ba431a84015f836fb86f3e7c738659fc62cb020590be255dd9a9bf0878c74ba5825e6b956fac2e7cce38178f6ad259966944a885deebd63ff09ddb656ffffa9230fc42ad5a7e67609a604b5283ca51327627c4b460b3ab0adba56221e4573058dc6e34a322e37a43a79c84c8e6c0c4392c8f3431978de2d97", 0xce, 0x1}, {&(0x7f0000000800)="5118e5cf03903b752a95bd577d39", 0xe, 0x10000}, {&(0x7f0000000840)="7a90e995750ac7ad6b", 0x9, 0x80}], 0xa02020, &(0x7f0000000b80)=ANY=[@ANYBLOB='expose_privroot,user_xattr,hash,appraise_type=imasig,fowner>', @ANYRESDEC=0xee01, @ANYBLOB="00bac08010dec13fee2433906e459c2a0000000000", @ANYRESDEC=r3, @ANYBLOB=',fowner=', @ANYRESDEC=r9, @ANYBLOB=',hash,subj_user=:wlan0ppp1self,,\x00']) [ 1394.096726] bond54 (unregistering): Released all slaves 06:08:05 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={0x0}, 0x0, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1394.197813] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:05 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000040)={0x1, 0x7, 0x2000000, 0x0, r1}) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) getsockopt$CAN_RAW_JOIN_FILTERS(r2, 0x65, 0x6, &(0x7f0000000100), &(0x7f0000000140)=0x4) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000000)=[@timestamp, @mss={0x2, 0x40}, @window={0x3, 0x101, 0x2}, @sack_perm, @window={0x3, 0x1, 0x4ee}, @mss={0x2, 0xffff}, @mss={0x2, 0x6}], 0x7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1394.312294] device bond54 entered promiscuous mode [ 1394.380423] bond54: making interface veth345 the new active one 06:08:05 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r1, 0x40106614, &(0x7f00000000c0)) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f0000000100)='./bus\x00', 0xd8) [ 1394.466968] device veth345 entered promiscuous mode [ 1394.480688] bond54: Enslaving veth345 as an active interface with an up link 06:08:05 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x4000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1394.620605] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1394.663955] kauditd_printk_skb: 6 callbacks suppressed [ 1394.663969] audit: type=1804 audit(1590041285.934:2647): pid=10290 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/706/file0/file0" dev="loop3" ino=2 res=1 [ 1394.769247] device bond55 entered promiscuous mode 06:08:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x0, 0x0, 0x0, 0xfffffffffffffffc}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1394.885679] bond55: making interface veth347 the new active one [ 1394.910200] device veth347 entered promiscuous mode 06:08:06 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xc000000}], 0x1, 0x0) 06:08:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r4, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x34, r4, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@L2TP_ATTR_OFFSET={0x6, 0x3, 0x6}, @L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_L2SPEC_TYPE={0x5, 0x5, 0x1}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x80}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000844}, 0x404c141) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r6 = gettid() timer_create(0x4, &(0x7f0000000140)={0x0, 0x22, 0x0, @tid=r6}, &(0x7f0000000180)) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1394.963354] bond55: Enslaving veth347 as an active interface with an up link [ 1395.021954] bond55 (unregistering): Releasing backup interface veth347 [ 1395.035415] device veth347 left promiscuous mode [ 1395.077976] audit: type=1804 audit(1590041286.344:2648): pid=10349 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/707/file0/file0" dev="loop3" ino=2 res=1 06:08:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000000c0)={@private2, 0x6a}) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:06 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x4000) [ 1395.146399] bond55 (unregistering): Released all slaves 06:08:06 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x68, r3, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5}]}, @IPVS_CMD_ATTR_DEST={0x40, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x6d24423457f68e5a}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast2}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x200}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x6, 0xb, 0x2}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffff}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x5}]}, 0x68}, 0x1, 0x0, 0x0, 0x20000000}, 0x4c893) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet_dccp_buf(0xffffffffffffffff, 0x21, 0xc, &(0x7f00000002c0)="ec62c60f8b56e12676af5ba6c17a4b7b63789e64d520bd09952da484ce971b3a84b8ee3c70ee5df228228c3101d57997af964e06ab5c6e1bca3c7451e50d58fa1a4cb501d0f145f73c32feced35fd8b7b96e9630161d9c0fa46b71ee8cdb5a67a10aba091407dcaa0fa9d730d8bb2e6aabb2831f25d4750e30a0da12bd003491cff3534dd82976739f2c08305f447b5535f6616617747dc2ad03500ab2a72a7873ea61bb263126dc810b6702fb97b9d68c56467e93c87ce4079c82d217dbb02a5ed80f4edc6aac22a07945aeb87ca6af9be997c81d2c1a4f46bf72635a6e10d8", 0xe0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1395.277974] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0xe8c0, 0x80861) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000680)={0x53, 0xfffffffffffffffb, 0x40, 0x1f, @scatter={0x7, 0x0, &(0x7f0000000500)=[{&(0x7f0000000040)=""/90, 0x5a}, {&(0x7f0000000100)=""/164, 0xa4}, {&(0x7f00000002c0)=""/42, 0x2a}, {&(0x7f0000000300)=""/47, 0x2f}, {&(0x7f0000000340)}, {&(0x7f0000000380)=""/67, 0x43}, {&(0x7f0000000400)=""/195, 0xc3}]}, &(0x7f0000000580)="8119f27d1c1238f238b30ad7fa37041690d6bb53635abc16cf73b247e0c6a74448c0b543c459e73f9c56aacf8597184698492c6225cc07d31f177e51fb4b2402", &(0x7f00000005c0)=""/121, 0xcb3, 0x30, 0x0, &(0x7f0000000640)}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1395.411111] device bond55 entered promiscuous mode [ 1395.486358] bond55: making interface veth349 the new active one [ 1395.517658] device veth349 entered promiscuous mode [ 1395.547504] bond55: Enslaving veth349 as an active interface with an up link [ 1395.550549] audit: type=1804 audit(1590041286.814:2649): pid=10443 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/708/file0/file0" dev="loop3" ino=2 res=1 06:08:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private2, @in=@broadcast, 0x0, 0x1000, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1000}, 0x0, 0x0, 0x1, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0xfffffffe, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SG_GET_ACCESS_COUNT(r2, 0x2289, &(0x7f0000000000)) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$UI_DEV_DESTROY(r3, 0x5502) 06:08:06 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x5865, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:06 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x6000) 06:08:06 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$DRM_IOCTL_RES_CTX(r0, 0xc0106426, &(0x7f00000001c0)={0x5, &(0x7f0000000140)=[{}, {}, {}, {}, {}]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = creat(&(0x7f0000000500)='./file0\x00', 0x0) r3 = dup3(0xffffffffffffffff, r2, 0x0) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000100)={0xffffffff, 0x80000000}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f00000000c0)={0x2, &(0x7f0000000540)=[{@fixed}, {}]}) [ 1395.775393] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:07 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xd000000}], 0x1, 0x0) [ 1395.904359] device bond56 entered promiscuous mode [ 1395.939761] audit: type=1804 audit(1590041287.204:2650): pid=10465 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/709/file0/file0" dev="loop3" ino=2 res=1 06:08:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket(0x11, 0x800000003, 0x8) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r7, 0x84, 0x70, &(0x7f0000000580)={r6, @in6={{0xa, 0x4e23, 0x33bab218, @private1, 0x2}}, [0x9030, 0xfff, 0x1, 0xffffffffffffff7f, 0x5, 0x0, 0xfffffffffffffffc, 0xb3, 0xff, 0x10000, 0x4000000, 0x800, 0x3, 0x10001, 0xf8c]}, &(0x7f0000000280)=0x100) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_RESET_LINK_STATS(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x30, r8, 0x300, 0x70bd2a, 0x25dfdbff, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x0) [ 1396.030277] bond56: making interface veth351 the new active one [ 1396.049303] device veth351 entered promiscuous mode 06:08:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1396.089943] bond56: Enslaving veth351 as an active interface with an up link [ 1396.123443] bond56 (unregistering): Releasing backup interface veth351 [ 1396.148646] device veth351 left promiscuous mode 06:08:07 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$KVM_SET_CPUID2(r1, 0x4008ae90, &(0x7f0000000440)=ANY=[@ANYBLOB="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"]) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$fou(&(0x7f0000000080)='fou\x00') sendmsg$FOU_CMD_ADD(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000400)={0x1c, r3, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_IPPROTO={0x5}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x2c, r3, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @rand_addr=0x64010101}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @private=0xa010100}, @FOU_ATTR_PORT={0x6, 0x1, 0x4e21}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1396.204990] bond56 (unregistering): Released all slaves [ 1396.212471] audit: type=1804 audit(1590041287.484:2651): pid=10515 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/710/file0/file0" dev="loop3" ino=2 res=1 06:08:07 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, r2, r3}, &(0x7f0000000700)=""/250, 0xfa, 0x0) keyctl$get_keyring_id(0x0, r4, 0x2) 06:08:07 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$USBDEVFS_REAPURB(r0, 0x4008550c, &(0x7f00000000c0)) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r3, &(0x7f00000001c0)={0x0, 0xfffffc38, &(0x7f0000000180)={&(0x7f0000000700)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r4, @ANYBLOB="3f02000000000001000000000000000b0000000001040000726f61646374f5320f076a5e554c00000000009cd83521957bf65ca57f7ba0dc2ff6820e249ecacd91b3a877319da7513c4e2547a3bb5666f6b69a61e52a921592cc04dab9ad7befbe4cc32ec98daaa6b400637e808227c3aa62a62d893dda23c6b94c79569ba5cdcfc82a7627d4a22480813e0a5527a6663194289ff4ed6e02f23c56f7157f291867f9700b468563278dff856af71a47b6ca439c2be36140e432f6f3d6028708a5a061e6d724d368e70d787b79c19ffb7fe86b1dcb626a9302c3c5da061398"], 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x1c, r4, 0x21, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8890) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1396.463382] device bond56 entered promiscuous mode 06:08:07 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x80fe) [ 1396.548260] bond56: making interface veth353 the new active one [ 1396.579394] device veth353 entered promiscuous mode [ 1396.606157] bond56: Enslaving veth353 as an active interface with an up link 06:08:07 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x68da}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000100)={r4, @in={{0x2, 0x4e24, @remote}}}, &(0x7f00000002c0)=0x84) r5 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FBIOPUT_VSCREENINFO(r5, 0x4601, &(0x7f0000000000)={0x500, 0xf0, 0x320, 0x480, 0x7, 0x6f7, 0x2, 0x1, {0x5d3b9300, 0x9}, {0x38000000, 0x7}, {0x7, 0x3}, {0x200}, 0x2, 0x10, 0x5, 0xf0, 0x0, 0x1ff, 0x8, 0x3, 0x5, 0x0, 0xe7f5, 0x4c8e73c6, 0x21, 0x0, 0x2, 0x3}) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) [ 1396.676678] BFS-fs: bfs_fill_super(): Inode 0x00000007 corrupted [ 1396.702334] audit: type=1804 audit(1590041287.964:2652): pid=10614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/711/file0" dev="sda1" ino=16206 res=1 06:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:08 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xe000000}], 0x1, 0x0) [ 1396.831758] validate_nla: 1 callbacks suppressed [ 1396.831767] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:08 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xc0fe) [ 1396.957182] device bond57 entered promiscuous mode 06:08:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x0, 0x2c) creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$EVIOCSCLOCKID(r0, 0x400445a0, &(0x7f0000000100)=0x1ff) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r4, 0x4020565b, &(0x7f00000000c0)={0x4, 0xf8d0, 0x7818229696f3b692}) fcntl$getown(r1, 0x9) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$DRM_IOCTL_MODE_OBJ_SETPROPERTY(r1, 0xc01864ba, &(0x7f0000000040)={0x75f, 0x6, 0x4, 0xb0b0b0b0}) r2 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x8, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x2) ppoll(&(0x7f0000000100)=[{0xffffffffffffffff, 0x4000}, {0xffffffffffffffff, 0xd181}, {0xffffffffffffffff, 0x41}, {0xffffffffffffffff, 0x8}, {r2, 0x1}, {r1, 0x10}, {0xffffffffffffffff, 0x2024}, {r3, 0x1084}, {r6, 0x100}], 0x9, &(0x7f0000000180), &(0x7f00000002c0)={[0x401]}, 0x8) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) [ 1397.041257] bond57: making interface veth355 the new active one [ 1397.068512] device veth355 entered promiscuous mode [ 1397.088036] bond57: Enslaving veth355 as an active interface with an up link [ 1397.117543] bond57 (unregistering): Releasing backup interface veth355 [ 1397.161639] device veth355 left promiscuous mode 06:08:08 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xd8ff) [ 1397.245333] bond57 (unregistering): Released all slaves [ 1397.325598] audit: type=1804 audit(1590041288.594:2653): pid=10684 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/712/bus" dev="sda1" ino=16221 res=1 [ 1397.367544] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000000)=0x1) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ustat(0x100000000, &(0x7f0000000040)) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4d4, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 06:08:08 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe802) 06:08:08 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e21, 0x0, @local}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1397.484131] audit: type=1804 audit(1590041288.614:2654): pid=10684 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/712/bus" dev="sda1" ino=16221 res=1 06:08:08 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6558, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:08 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000000c0)={0x5, 0x5, 0xb, 0x4, 0x4, 0x0, 0x7, 0x9, 0x0}, &(0x7f0000000100)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000140)={r2, 0x1ff}, &(0x7f00000001c0)=0x8) [ 1397.675462] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:09 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe803) [ 1397.794421] device bond57 entered promiscuous mode 06:08:09 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xf000000}], 0x1, 0x0) [ 1397.844350] bond57: making interface veth357 the new active one [ 1397.879939] device veth357 entered promiscuous mode [ 1397.890517] audit: type=1804 audit(1590041289.154:2655): pid=10798 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/713/file0/file0" dev="loop3" ino=2 res=1 06:08:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local, 0x0, 0xc2}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x10, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) getsockopt$CAN_RAW_JOIN_FILTERS(r0, 0x65, 0x6, &(0x7f0000000180), &(0x7f00000002c0)=0x4) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='loginuid\x00') sendmsg$AUDIT_MAKE_EQUIV(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000f75800023abd7000fedb2e2f66696c65302e2f66696c4b31f59b00000000000004000000"], 0x28}, 0x1, 0x0, 0x0, 0x24000004}, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1397.969720] bond57: Enslaving veth357 as an active interface with an up link [ 1398.027525] bond57 (unregistering): Releasing backup interface veth357 [ 1398.044451] device veth357 left promiscuous mode [ 1398.088646] bond57 (unregistering): Released all slaves 06:08:09 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf000) [ 1398.173186] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1398.191598] audit: type=1804 audit(1590041289.454:2656): pid=10850 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/714/file0/file0" dev="loop3" ino=2 res=1 06:08:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$sock_proto_private(r1, 0x89ee, &(0x7f00000000c0)="210cabd43c353f47a3ab1dd402baf75ff8c345049fa122fa1afde9ef9a12f0f5c7c7932500") fchdir(r0) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, &(0x7f00000017c0), 0x333, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r3, @ANYBLOB="100027bd7000fcdbdf2510000000740005803c000280080003000600000008000400fdffffff08000200c7f9fb795b160a5a8c77fdf6ffff0000080004000100008008000200050000000800010008000000080003000100008034000280080001001f00000008000300ff000000080003000700000008000200ff00000008"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_NL_BEARER_ADD(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000540)={0x248, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0x78, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa43}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_TOL={0x8}]}]}, @TIPC_NLA_BEARER={0xd8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth1_to_bridge\x00'}}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xff}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @rand_addr=0x64010100}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x9, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x86f}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3f}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7f}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffffffff}]}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x79}]}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffb1}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffbed}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x27c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_MON={0x1c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3f}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}]}, @TIPC_NLA_NODE={0x30, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffffffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xf24}, @TIPC_NLA_NODE_UP={0x4}]}]}, 0x248}}, 0x8000) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1398.283237] device bond57 entered promiscuous mode 06:08:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x4e23, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x34ff, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000100)=0x0) sched_getparam(r1, &(0x7f0000000140)) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x39, &(0x7f0000000000)={0x3b, 0x8, 0x1, 0x50, 0x0, [@loopback, @ipv4={[], [], @loopback}, @private2={0xfc, 0x2, [], 0x1}, @initdev={0xfe, 0x88, [], 0x1, 0x0}]}, 0x48) [ 1398.340148] bond57: making interface veth359 the new active one 06:08:09 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x141000, 0x0) sendmmsg$unix(r2, &(0x7f0000000040), 0x0, 0x5) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1398.389577] device veth359 entered promiscuous mode [ 1398.407296] bond57: Enslaving veth359 as an active interface with an up link 06:08:09 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x8100, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1398.582601] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1398.644445] BFS-fs: bfs_fill_super(): Inode 0x00000008 corrupted 06:08:09 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x4, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0xa, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:10 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf401) [ 1398.724468] device bond58 entered promiscuous mode 06:08:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000000)=0x3, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) personality(0x5000007) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:10 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x2c000000}], 0x1, 0x0) [ 1398.840657] bond58: making interface veth361 the new active one 06:08:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1398.893229] device veth361 entered promiscuous mode [ 1398.903382] bond58: Enslaving veth361 as an active interface with an up link [ 1398.917383] bond58 (unregistering): Releasing backup interface veth361 [ 1398.934311] device veth361 left promiscuous mode [ 1398.987669] bond58 (unregistering): Released all slaves 06:08:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffffff, 0xc0106426, &(0x7f0000000040)={0x4, &(0x7f0000000000)=[{}, {}, {0x0}, {}]}) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000100)={0x5, "b5fae525b8bb5e82d0a82a7289ee85fc2668c66253ff05c34bf5fa7041ac8041", 0x400, 0x5a0, 0xa9e3, 0x10, 0x4}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000080)={r4, 0x5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1399.040568] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:10 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00) 06:08:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) getsockopt$inet_dccp_int(r3, 0x21, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xfffffffffffffe18) r4 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) r5 = socket(0x11, 0x800000003, 0x8) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000000)={r6, 0x8}, &(0x7f0000000040)=0x8) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) ioctl$DRM_IOCTL_WAIT_VBLANK(r7, 0xc018643a, &(0x7f0000000300)={0x0, 0x4, 0x14}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1399.124684] device bond58 entered promiscuous mode 06:08:10 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = openat(0xffffffffffffffff, &(0x7f0000000140)='./bus\x00', 0x200001, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r6) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r7, 0x40505330, &(0x7f00000000c0)={{0x5, 0x6}, {0x0, 0xa9}, 0x9, 0x3, 0x3f}) fchdir(r7) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1399.206222] bond58: making interface veth363 the new active one [ 1399.230104] device veth363 entered promiscuous mode [ 1399.246265] bond58: Enslaving veth363 as an active interface with an up link 06:08:10 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xa507, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x7ff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1399.358924] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:10 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfe80) [ 1399.465340] device bond59 entered promiscuous mode [ 1399.562583] bond59: making interface veth365 the new active one [ 1399.580204] device veth365 entered promiscuous mode 06:08:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x5}, 0x0, 0x0, 0x0, 0x8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) dup(r2) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6, 0x0, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/sequencer2\x00', 0x200402, 0x0) connect$pptp(r4, &(0x7f0000000300)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) r5 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$PNPIPE_INITSTATE(0xffffffffffffffff, 0x113, 0x4, &(0x7f0000000340)=0x1, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r7, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="00042cbd7000fcdbdf25120000000800bd00010009000600ab00000000000c00430008000000dd720000050013010100000006001201ffff000005001301000000000600ed0084070000050029000c00000005001900000000000c0043000800000006000000"], 0x6c}, 0x1, 0x0, 0x0, 0x4000800}, 0x4000000) [ 1399.603453] bond59: Enslaving veth365 as an active interface with an up link [ 1399.630149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:08:10 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x8) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f0000000040)={0x40, @time={0x90000000, 0x10d}, 0xe1, {0xff, 0x45}, 0x7f, 0x2, 0x1}) 06:08:10 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfec0) [ 1399.658336] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted [ 1399.686321] bond59 (unregistering): Releasing backup interface veth365 [ 1399.702413] device veth365 left promiscuous mode 06:08:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x3f000000}], 0x1, 0x0) [ 1399.749762] bond59 (unregistering): Released all slaves 06:08:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) ioctl$sock_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000100)={0x0, @xdp={0x2c, 0xb, r3, 0x14}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x31}}, @tipc=@nameseq={0x1e, 0x1, 0x0, {0x2, 0x1, 0x3}}, 0xe66e, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000080)='wg0\x00', 0x1, 0x10001, 0x300}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x1c, 0x0, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x9) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1400.094202] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:11 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xff00) [ 1400.177127] device bond59 entered promiscuous mode 06:08:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = shmget$private(0x0, 0x1000, 0x54001800, &(0x7f0000fff000/0x1000)=nil) shmat(r1, &(0x7f0000000000/0x4000)=nil, 0xffffffffffffffff) shmctl$IPC_RMID(r1, 0x0) shmctl$IPC_INFO(r1, 0x3, &(0x7f0000000000)=""/55) [ 1400.198055] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted [ 1400.272975] bond59: making interface veth367 the new active one [ 1400.289811] kauditd_printk_skb: 3 callbacks suppressed [ 1400.289826] audit: type=1804 audit(1590041291.554:2660): pid=11122 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/718/file0/file0" dev="sda1" ino=16192 res=1 [ 1400.300933] device veth367 entered promiscuous mode 06:08:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x1000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='net/dev_snmp6\x00') ioctl$TCSETS(0xffffffffffffffff, 0x5402, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x8}) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)) r1 = syz_open_pts(0xffffffffffffffff, 0x4000000000000002) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup3(r1, r0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300)=ANY=[], 0x17) write$P9_RATTACH(r0, &(0x7f00000001c0)={0x14}, 0xffffffde) fcntl$setstatus(r0, 0x4, 0x40800) ioctl$TCXONC(r4, 0x540a, 0x1) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) [ 1400.365724] audit: type=1800 audit(1590041291.604:2661): pid=11239 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=collect_data cause=failed comm="syz-executor.4" name="SYSV00000000" dev="hugetlbfs" ino=0 res=0 [ 1400.468365] bond59: Enslaving veth367 as an active interface with an up link 06:08:11 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = shmget(0x1, 0x1000, 0x8, &(0x7f0000fff000/0x1000)=nil) shmctl$IPC_STAT(r1, 0x2, &(0x7f00000000c0)=""/43) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:11 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xf000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:11 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffd8) 06:08:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$inet6_mreq(r1, 0x29, 0x36, &(0x7f0000000000)={@private2}, &(0x7f0000000040)=0x14) munlock(&(0x7f0000ffb000/0x2000)=nil, 0x2000) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1400.630707] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:11 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$VIDIOC_PREPARE_BUF(r3, 0xc058565d, &(0x7f0000000040)={0x7f, 0xb, 0x4, 0x20000000, 0x5, {0x0, 0xea60}, {0x5, 0x1, 0x4, 0x9, 0x4, 0x9e, "89645aea"}, 0xfc08, 0x1, @planes=&(0x7f0000000000)={0x5, 0x9, @mem_offset, 0x7}, 0x9, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r4, 0xc0086420, &(0x7f0000000100)) 06:08:11 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x40000000}], 0x1, 0x0) 06:08:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x4e23}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:12 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x40000) [ 1400.868407] device bond60 entered promiscuous mode [ 1400.940567] bond60: making interface veth369 the new active one [ 1400.960384] device veth369 entered promiscuous mode 06:08:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, 0xd, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4048040}, 0x40810) [ 1400.982593] bond60: Enslaving veth369 as an active interface with an up link [ 1401.030190] audit: type=1804 audit(1590041292.295:2662): pid=11323 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/720/file0/file0" dev="loop3" ino=2 res=1 [ 1401.059454] bond60 (unregistering): Releasing backup interface veth369 [ 1401.084298] device veth369 left promiscuous mode 06:08:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040)='batadv\x00') r4 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x31905e13403123b7, 0x0, 0x0, {0xb}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x44, r3, 0x0, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x400}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x10001}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x13}]}, 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x44884) creat(&(0x7f0000000500)='./file0\x00', 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) ioctl$sock_SIOCDELDLCI(r6, 0x8981, &(0x7f0000000280)={'netpci0\x00', 0x2}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1401.146053] bond60 (unregistering): Released all slaves [ 1401.247888] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x1, 0x3}, {{@in6=@rand_addr=' \x01\x00', 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet6_dccp_buf(r2, 0x21, 0xe, &(0x7f00000002c0)=""/206, &(0x7f0000000000)=0xce) [ 1401.377064] device bond60 entered promiscuous mode [ 1401.409816] audit: type=1804 audit(1590041292.675:2663): pid=11363 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/721/file0/file0" dev="loop3" ino=3 res=1 [ 1401.432374] bond60: making interface veth371 the new active one [ 1401.448222] device veth371 entered promiscuous mode [ 1401.467118] bond60: Enslaving veth371 as an active interface with an up link 06:08:12 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6=@private2, 0x0, 0x3}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:12 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x40000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:12 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x96, 0x0, 0x40, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5e3b, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bind$netlink(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x90000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r2, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4002, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000300)={0x3, 0x3, 0x4, {0x9, 0x800ad22, 0x3ff, 0x1}}) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2404c055}, 0x48008) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="235825bd7000fedbdf2503000000060001000000000006001c00ff070000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x1000000000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@remote, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000006040)=ANY=[@ANYBLOB="340000001000050de4d002a8dc79d2de00000000320d000000ebbcbb0022dcd7b1b6cc0000000000", @ANYRES32=r8, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r8}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r8, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r8}}, 0x18}}, 0x0) sendmsg$can_raw(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, r8}, 0x10, &(0x7f0000000100)={&(0x7f0000000040)=@canfd={{0x4, 0x1, 0x1}, 0xb, 0x1, 0x0, 0x0, "3a8eab5bb761cab54ebb2ba82c5cb9cc9d7351569962fc47b64bd6a1d7769b6c213e317ad6e9cd9f42dd89be0ed7193f7b0acd305b8bd7a43c5f0d0fbfd52368"}, 0x48}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008800) sendmmsg(r0, &(0x7f0000005ec0)=[{{&(0x7f00000003c0)=@hci={0x1f, 0x4, 0x4}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000440)="ddc7fa50eede7c1733783556ccd2c2857efff77a25416c132f49fdabbc2b0a271e5fc5b47be48d2f16bdb28543a0a2b53ccefb0d76e5da01fa8cb670033d8c448b2503d9060e464f585222c199a291bd831472b3a35412d59fd75dbe368e36d2da3cbbce7c518de88827e23f9204b0b0e716251e12ca553edacff2db847081dafbbfed37b59f8263787d70f4f26284c45a576bd49c845f5e5b851572f4b6148d8fdbe0708342aa672937c531333688486babe08f4bcd0b02c113a668579e2f72409add6ecf737eed9b432a16d328ae", 0xcf}, {&(0x7f0000000540)="aaac2c722e89f65d26f8fdaef96a5388934668b12cf0c44c1f9725b642c3a868fae78158c077d68077f1ddb56e3e1c8fe777b4b42efd3dfd79629cabb2ded4a7961f18802604f33b536b68a285f3920c61c7782657b65fbd09b4da6ada2f25480b4949456a3c848774c8640fd10c0c830b8e8b9335ed773beb0e59ce8c525c170bf784e0634262e20ce0b20f381f59ee792ad018dc1e497a25b66b25cf041bc7c12ac7d119c4e92eaf87a941b330f11aa2118ee2a0a2c8eca3f4d3919de4d5681829ece2bed497d9cda86b3d32bc47493365413702a23b3be75567acf224bd3ff8dd", 0xe2}, {&(0x7f0000000640)="b91641fe88e5a49c2dc623a45aa3472ffc", 0x11}], 0x3, &(0x7f00000013c0)=[{0xd0, 0x1, 0xdf, "a2c541f465a47f84652ee898f868571b5be6af2ac36c4e0492cd50d04a913e5203665fb840d6563018ac76083dc40b17cf4ff0bff2fcabe5c9caf33423d6c1c4edd261659f863941c1ce93b2d4bd8d0f035e0d0091e32a3e144933ec9b221e38ebcb7704f0a01d6ea689a9f050745b81c30414f58d5c31149d3eed6c96f8aba46c3dc42a16f40d9e6a195768f9d500f897bb9738d8b27595b61f51699f6c3d2c0c684725e2e2764dee63e17b3c0e54002f829cb3f2274bf7f0feed"}, {0xb8, 0x10f, 0x4, "315fd5280ad8411e3732311726b99b674afcfab5d0b9fdd7ba540ca27999fa1ee49d7ecd61780e752f00a499e1f881908c96548344ec41b725f8850accf9cc51512c13444f0bfe8b47bb1f33203535e7c82843dfbd99bd357dc7b576e0fc211e7a81db936eadc0538c3ca67b3b2b91eb765f9e9cc48d05540acf0dd9e2f55817912b1d2563a762049754af5f31fc7739c735055fa4793fde46eb1705608406fd3fdd95929cdc7a"}, {0xb8, 0x114, 0x1, "e2e0160f839071a934d358447b06d342cb70302d2564204b26a8e26ab626c6c2a7eb7212b0768079fc05ebd20e03a17b386828c38019e1c6c4f48cca71fb004dbca672366e2ac582799184b7f6641802f95803730a7bb3ad2b555bd71a8db775beb1314015d0c6ff9b7594f933994d76821b54a44ae4cdf09772551d9f4f6643b3a2999422a2d54748c48ec8907f2ad23fc6469ee7fed099c69b4ef76fee9fe2ee11e8ac6734"}, {0x108, 0x117, 0x8, "ffff6c806af1b2c85189ca6da598d3678a330f9df5bcbd39b3778f138d65bf68e8a99b3acb14caafd50350d9bb3cec3a4f9bc052f774a026611bb94c9b34483d71a8366147feb58a48724c436f62e36d270b939f52745cef2be57fd7fa8d8d18c0547cc1042248046d027e28943a2462493be10f147a43cf55adff0468ba05c484340e89ff63f8d39fe7cbba4cb25bb01c3b00ffafc003ce619b1dbb632f1b26bf9f20043d9599ac84c14a169796f1dfa0745e51989220013181c41428cb89a80fa6c7f733302b320c4cc20c393ba60dea510b1da3db9c438132dc91a1057a105eb12a4778462a7c83a775c930c533c600"}, {0x28, 0x1, 0x64, "1bc1ee866c1d9f1db771a854289d1fafb64426c8ba5379"}, {0x1010, 0x10f, 0x4, "11e1dcba33b337d6b53eca3f0de497d152011f0ea12145970e9601272f631e0b47eac59657df8517aad60e2944fd2b58ce0572ef70ecd827fad7a9c3f328d7de0fa3c0b348391b8d9feedba2441e73bf1a936cca23899ae617a01bff2d9c4ef8e18666e090916e4677ba091de205640d3345a3cb1f258e60e8fed0dec4614de98ed505698a0efce6ab12f7087dfed273b2ac9869d4f45c81109f7fc68dba46c4bc5600ec9b0733024947c8f429b0863a7b002889a2cce2053e2ed488842b34fdbbbfefb01500a96d4c9743ceef8303d774a5d5e12abbcc2f3d8f9485a0cecda3cfae7aad208ed939e55a0c8cdeb1ea573192b58508923317ea0af6cbaab974530128f4b951c6ce3f82da122ae9c9e2cf28b3b72302f841ff6734699d7fd42a36b850d1b9d43d6f3c07fc36e416414cca727cd5349ce79692048777332329875549cd04df70dadd8aef4c60743099c1aa459ad7d0503df6d9c753656ab5d1843327033c0704ef9e6496eda36cd9e9d83a323121263287050f6cd9d6c2697e39ac4aa5edda2d662344eb30711d2233c33056b6e19808dd8359d6d7f777e0788b5f8b7300152ad817a4867ea1feef21f56b260691e2fbb08177d29ef4c8f8926a8cff00343612a130dbd8de16a042d1dd8fadd8faefafc5c0ac3cae32618a52b21ffe3344f6e5675065dbc151df9b3864bf837023d9ffb821f93a17dcd0a0067c730040387c7d3bc35f4af657b9d7e4f41a61eb7a00d6f5a16b82040cefbb8acf5ddf8764e16b7a3f6c7beadcdf67af995dfdb8450a3636073d921e1c369c2d5c0db9f9e8f2d3ba9e073b59b01453d3e0cc7b1287585893bd6837d68287bd6b9fd28c22540a838814ab179193734f4ca2d6354711de284a87acfb9715d3cff7f41f25f8c77906b89eafe57a021bc095d607b2bc955ec6068e1e1b95f46545f912d3d4176929d2236b2347b1793c965437a5f3f73e249ec5be2f44a27dce9a3d1ad7f28de621736af6f932dcbbd7cd5c9f9ed1a3cc535ca00218daa9bdda018fbb6c65b34185feacac6bbf34b7b05f5cc565cb969c18eb41e960055b88de99e2fc2115835cbfe033bb6a40020b05802740f87328c9da496041018e1e7edce40be2b0d9509b90007f62ed02c6d3fb73be624303b4688f9d38a97cfb106f7dad3453680c776665980f6fed989eabfae786858da06e7ff18507d1881231245bcdc727e1f570cbd81e27d3404749006b51a03ac88543455703c5877be0812f134879835a270600e51b98868ea9317b2b141bc2669cfa2c64609d4aa3375cae264547ea20d5b79c0538a4907e6a7c0924fe06a4576eabe8ba67c8fc3276ad1c2f0d1b875fa82ffe43133d2a551de80e57b773784d0814b419a8797962d2089f24550709e943bf7dfaba80e4ed494cc6df0ec5c01122464b496282058242b7ac9728eabc50d9cbabc7f002e66fdea65a77008f4d2327a666576f62aa8d0835ca0398ebb33ff9a75fdb7c793c19e0a4bec1adc29b9088d4404b55c02c9f9c35275d4e25de607747ab4ef6ed9e853d4cef0bb512f3d7d93050651eb909aa04756f4b0164fa85cdd8eafc2c48671b7f6aeafb3fc2e188cc6f70a2cdbf9256455039bcf620fe194fea25b1d142310365bc6096c3e2d780136c11371c23d619acc667175970297b6084ed001efea586fce87101fa251466335d0ff498f60dc754ed04c7909ed83079c3b66b427b7314c40a216b7cb0f1bca6ba0d278d9aea25ec32bcdd4fac939e45d08dbad147295eddd5245fba2c0fbba5d81d4400499e00823db10cd9209894298c701e6dcda64c34bcf342eb6090af4717f04a8caf312b115c75f4b51a6640b00ec7d9c1655bdc69c40c9860378984e2c6fbbb7c7e9116c39e7ebf51682f0043c9593ff7022cecd353e586b9148ba9f7135f9690e04ea3e1c52b89edb233095a35ef3099d92449ac0f7bf073415d6dae97b2345c6d4af53afe46cf072172bbd968ff702130ad951c184bac7b596401ceb879c2ea7bbe2d13d53a0dcb164be3f77ad2a9478b106eb758c14f9edefec9eadf767208f087b8b721433fc8210609d6fe352d1c6b37501155595567ca665d74bf1ab931caf75495f31d69e5ff0b19c3a79f29c014299457685dd0f811122f987235ed581ceb61bb8cfc69a7a44de47342de55e990c8097c8c62b0127d7707401146d7e76a001cfa50eb015d73bf39df465a0388b6044e1320b42d672d676f54652770533ac82ee508e962a06a20cc4460c0b63b616bda638a7d8c85117a52478f13bcc2fd846fa47feb0e7076656475a3db509876502d4a3b3d2b183bd55bafc18c5e9343672d7f771313db268157150d732ead98872a99f8c0f492a3b1fa8f1ab455314ed049ca43769ad259badb48790670b08800fb7a03e0ef1fbfed241348e0f063503614e327a3c2b49864cca1d5dca2ba6f0c0622a11d8201aaa9d27846a103edaec17ca04a114f7665e3b6489971ebfb63cd5d10f68ae04bbc7f1f85d4debc4c962dd65abf80b741218d73b4867353ecfda2e7492c8df68ebb0a80428237764cf6581cf68053f24feaaef1caf67d89535b7fc5261bbc67b14f3065f3ec6ee79e72dcf180d0fd03d9fbcbad3fe120f9b77c99a6040967a38faf26c6a561a5c100da61ee17159657ad1ea6a4deb7ad8189684ab82b97c2d66e0125ad7c65ee68ffc9a1628abf30f2457f7b8669779a4ec4ee20d1f18b10744a64ab641d11c9efad3eaf4bc817b8115cc1a3f5c4e959ac575e3aa39db0ca2fae5e02b1efa80f9750ff2ce2c1a58ccea153c84859037979ca889ae3245e171704110612635409391098cf03fc697125a47366823b78b7c2349a43dd95ecf78ca9da66b16ec15c5b67ba91e1334a0356f696a07799577e26485c05e52e1c0e1e9640eb77522af87b4473b55a098c6b561794c4e17f77b053e2834769724fd6babcb54822b0e5b0ae534aaf14b84485a166bd69f30d93152efbc7063359dea0f614ec2a641f74cf7816a2dd553200720f48dc94990884b78e52c8e3de7a79c5a8d42425e6b6258e94eb8a85440917991f4a2d3a04f3d768761f0417b5823eec9820adeed0eb91e8ed898c1d05dadaeeb0de6a31efc5dec80551191912d546a43d23d714eb84d8a51ca9dbcddf2288bf3ba514c27855caf9a70da12c761dffd1a50a77ae7809e6610cbd32b5195a3772f33e86681c20d682b6d2972ffe3ec55d03c8566ef59cefcde91104e40e210b87c9e663b5af2b75310ce367b60be4143a2315e4bbb3bf7948e2777e71e80cd2dfc2b7fa0c8c4c2eccb3eb507ad8fc260f6d01c0673d28207b9d01a400e8b4839f4c20a06b90bb21d1ac1220a8c00a4324d15de6dceec8ec4f61c4299d61f2d995e218a25fdeea93c8bb76b98a2681bff600ca525dd61b3ffb0385aae5da5ecd6b14938216f0dd33aee2f06a4fac60c57e4b6f7a932df162be06e9fbf598857f41c693ec5b2eb20c8ba06a2233210f427d7d600430d7516a9fc8dfb30730276b9d515cc97bf2a232592f84f394f977e45f2d3ccbc13fdd4332f971af03b7354df2172486fe18f0a43426fbdd03a6a56bacbc58eaea862eeac630f581e2f816f7d6bac46c4b33dff69b24474ca881bfec3b3627e814a4583a0d820b0f4a77b170e2dc76de2d14b638f3136a1161964724e9e3d4be0d70e05667ddb850967f416d4bb3e06743a2b5dfe3b037458296d5ac1048268652da52177d3866a302db0a0e991b68fd5d7546471297bec90ecb7e01f72c220319b209e30f0d2e2c1394b2ed150e958e34dd4ecb93dd87cd145729348828cadca5c7d58de2022d9f7f08f0e666e508d86ea1c00790bacef02e4e77267656b3bd517ba28184a143477765218151c55af59d395b08f8f190c39182aaed14727681b0321831c744b90a389e101004a95b76cfb51646ba51fd896585f522e612c41256eaaad892beb318e2de81931c8a278ad9af65f6ef18490e94b83ebb35fa91d957d00b84124400152bcb0a7e27e14aea606a6f51e21a23388667778215ed53255737fb1845b0451f2bbcceba1827693ddb2e46630c3974e74fd5449e70140a4f5de09183c9f4b51c54a4a25c76f6acdb367d50842461a01cafe6ef4531afff23b11cef8e29891630b21b9d5dc4af272e8f66e1d696fa5da9040fbac15a17cffccc5cfdca69948287b5c9dbc981a8c8366d60e9a739f523d55f8a4c14b8c4cbe4c7378d106955e36b5121270d088ef8129c3c0e6b3cfb5bcd6df92418821b18b8ccb979570c7e9c759df0501602a8f58d728d66c713b7af09b698638e5c7424efa4c117d54da34df222eb0537e979ff1f4008f63578fce1e63af120ff117d8e58622b1904becfcb503ebc24dc0d91c40dccfa0265b39738950ea2af69ac63ac0b2a3eada14a54ca27efbbb569993a73523e47db2f3e408d49c6d0277a76701154c309180d9301bb57df65cd1b59358056833cd62da810415d9d1390dd929edfc0808eb85d063071ea946057d221a88e2c386855e2a2939b77c6fa408640986e349e70bd48b34f4bf428467c06753b7e129f823ce07ba0da041d8a75eb12a72f1a10bf7866df9f9825b06a99e52f20c2285a0d7e9fa8271ef236cf221f392b9112c5a61f1d786b276e6220e73a2617aa4d951b840c34934bb1cdc725d83fcc849a54471a48c941562e11a67fca74644d929064c8a78f1b937b4199127b8e9c37509be38a7bd7bb44594b5c7371c46c722c91bd3312f64f935dd2e9aa384e8413743fe42ccaa96da170331eb3b41307d97cc1408468f347de30ade5de9b7c5e4cca3ce81f6eeef2597027476444049dfaeb0329ff0825dc0f50101e200216ea0ed7278ec1e972a8256c28a791b7bfdc89402befdf9b782a69f7520be36dbf75cee56433819a93e7b3c63394b458aeaad54963e5d3ca8228379ac96de5ed1a808adcf2300505d531bd2ea8c0e6ece2be83659860439dc77fbb470ba0afca952f447345499ca729be58d10dd32ce6cf60592079a67cb618d6142c7e1ce14151f61476a992e6eda1b71a017aa891a6800702f1fb3dee543dec16b5b95dbb378e3f4914ca1e7531fd7386e59c69a61a0987afd48ca94fc7763289b1527074f68cdd243fe50a153f9193c4304e2300ace043118501a5ac40815976580997ad0f2838f77d3dd815d10c403a001bb21dc7147b7e8dd3321e986bcfd89361474675c193f55c161d2dbdd8f12d4e0c34fa2e93daf8dad229f37580aa3e340fd8113d1a6ce8b37ed99129f0425159b207747da733c80c2c4063bfda20317a975b0f2bc9bffe99527cf367cb3e80170097893e229bd60d18c95ead16178e5a42389e798ac17f03f351bd4acd386a50a86372d173235c7ddc9a2c3e3bc4351ecc4e5a6d7f3d95f89037ef2f0563ca3d73fa23577dd008b3f8e673618e7bbb388bf093a34eaf2213b173a3cef3d612c7205243eb585067a32248bd1d591b66bcb5bf89e0469b9a747aacc7c8339ea1ebd139ab9b0d372ab95b6a174ad2dc4491f874fb3f7965dd65cd1cee7581d78887fe8861217375ca88e20680a5eca0bc7b9a2d2eab634ccc19705daef554af2823f0d5b90be134c0871a4a30240c6b4f0038b66c49b2a74e37bffef39de2221b7252c28d2545f4e9aaf303418571ce73fe3f91a3f1dbf3fd04f54cae51b1349059c1fb9f13c9c4ab02c351841944db8e903520999f293172fd9cd9b2d0563c83b702d3ef5d561301aaf2d3ec3674372fbc5b8bd032474109c0b05d34bf26ef8a69b380a608175486f9de64"}, {0x50, 0x107, 0x2, "d707acfbe4feec49924baa63f872dc7562d115bb74f4116b4eaf1d1e67cf1dd81a9cc4adedbef0e6dbb1ed7490e2a55841a0bb141af663df9e48cb1f08b3"}, {0xd0, 0x6, 0x52ae, "3a891a7c477c56d8a2bc702c62978d41e5babfef60bd8a95a658377d18738559e541483833132059c3c0252428dd617a9464cb45e90674a5923089c1b8d19c9d2338634d8cc32c50dd6b3e75f6597a240900d1b65d3d72278309d44dc6abce8fb15c58b86c5a81d13713e519208ac8f2a0087161a7be21c21ff10f5d0a712a9bc4304e2d79210b4527904f337a9570939013110aca3fc6808484fcdc79c690e2c4d00877660f4d3600141d0fe0586922c5c2ac6fc816eed975d1cccdb0d854"}, {0xc0, 0x102, 0x1f, "026021a6ec9b96eb6737e2d5080c323edfa3b800c581daa190fc771aa0471afd2cab11d0b9c2ea502496d7984c4b0926694369853e1a2b0af8cd9ad6a6bac0a3e734bc2669afcd2d692c6a8f074c468a6402745ead9428a51740c860acdd637590997f2f3b186e218fd3cd879a068a8858c3c9c933b44000d97c14bfcf10a97a5c9efc6394111e78dcb26a28f96dcbe1bf4c7fe179ac6a21452b28c5552d03aec1ed822768bde008bc043973"}], 0x1560}}, {{&(0x7f00000006c0)=@pptp={0x18, 0x2, {0x1, @multicast1}}, 0x80, &(0x7f0000006080)=[{&(0x7f0000002940)="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", 0x1000}, {&(0x7f0000000740)="094dc8b2cf14dbf70287399dda648dc691da706faaf633e562c11a06bb4addad2859a082559097caca96cbac570f3551cdec0ef9366004db051536e9d41fe7d40199c28422338aef7611f8392b4bf49c6054f47c1b5ba238f0c51769b4305f17fad5c22f1926092b16db7316a63af1b2361c6c1b352bbf9086ae15c9656fa364e202849247860332173bedc58e462cc9e8324b997de8a6125688eff9ba4d850212a2e6a048e127817d43e5abc404faee4f6ca2738bc1c43a88dab9d3a73d22d7810f9b6e3ea8e5c7bf8fc8610fd9a136e9a3b1ced6c7", 0xd6}, {&(0x7f0000000840)="21c255c0a3f4de6f2b7a52db528a5059292107498cc9bb53c5c149562d", 0x1d}, {&(0x7f0000000880)="6a7409c6cbf04dbc675bfbcdc07ef303035b6696ce62dedb2f1878f45e9d42e50844aff03924", 0x26}, {&(0x7f00000008c0)="f2ea79dda98cd2f156941dae679f01ec34afba518ea41936dccba73c0a4b7f9e6f3b25d51c7ab08b87e0a335e90a641069d735877c82b40379a57353d5c96ecb2045e0efe27913f8eb1e54d2aeecaea84a8b1aef509ce58a4d230bfbac37da6757a4bd08608db16c82c45e3fd42519e8f582217a09e9829882c567cc3a2e00f365314d900cd650f980db6cc3d66a95e67bd5144b2ea30cd546f302b6dd7864a735c55ac3d3cb5065d20f1e2206a39099515f6dcbdd1e23c5e4127f1f0467b869ab3e217cd9ef63278b71c3f272bc", 0xce}, {&(0x7f00000009c0)="4b68b987bee735ee5614558cfd0e669d9cc19728583cd07a30b399a03ea5439703966428ab56936c0ed0b779ca849bf4b01d6022606b372c0024cda01f9faac984fd4713520904d6811b1abcf2ac5dfe200a8b5ba5254cb17940d4cf8c24cd662a11c323b556a31ddb2bdc0bf2582dc238ec117e7e09eea05409001a66a3df3a", 0x80}], 0x6}}, {{&(0x7f0000000ac0)=@pptp={0x18, 0x2, {0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000b40)="414d7923e8618e04c1e365a2e75657e34514d5bedb6d18b5ac6a7ffa7ad1ad115b699a82f570808df0c8fd9c6862350cccda", 0x32}, {&(0x7f0000000b80)="1594fc1d77447e80eced2df4691495d1c36af01954597a662e377ec287e8a5142c99e671fef45a108b7259ace9ed9903022926c88f2f78532145bf48f4845f5cd2c92c903a0402cde1b35b0e43db6ab0da285d86d2b033f5", 0x58}, {&(0x7f0000000c00)="d571224e40b2d5ab7c2be83a1ef57be871ed636e3669cb772a333f812d8deda318ab104a19fca4d788986d7c2a0b1f0de5d610b86da7544e8cca81109955774531228cf380c833ea90b626b8b109b4aa8ebae72270a5b797895364874d9d908d2e10b03596c9b4a9e4a1a83791c2", 0x6e}], 0x3}}, {{&(0x7f0000000cc0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e24, @rand_addr=0x64010100}, 0x3, 0x0, 0x2, 0x1}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000d40)="1c191ed4ff6c4232bf439cc8f33387be98569229552588c8b30501cb", 0x1c}, {&(0x7f0000000d80)="5449cfeab5f65a5ee1e509751c045d0f82cc6a11c490ac62bd4297246460002cf2c284607d23c018fbb7868a56156175953157ec7c9c7ec6659a25dd125a531eae8041ecf5c5ede5b292596fdc7f04c1e501c954c8e10f43299963c4c4c85d92b052c34fa4f90e3dcce993b529222aa85355c4dad1d09cb742095095", 0x7c}, {&(0x7f0000000e00)="0ad1075a4d9d049db4426d2f9b163db17774d108b2db", 0x16}, {&(0x7f0000000e40)="1dd55f907d14d0b25552a43f440a6ad2fa33bbc7513b44ed115eda3d79f184b54f298f7ee7ef78d10da0ea5d37f771c2f47372687b9c4030ea141ad6c17c8ea87205a8784c82a4e5bdb3dc5f6723f255dbe726b0ef6a08a1911a47091a31d25020fc923eb5a49f25e38e21957e405db40ce93b42b6d01174c3a4c97b2493f5ab01dd46718d5a8c8161090ebbca10fde937ba6d090172b4a66404994873881d626cd1ba7fd64a27ce7abe79e104b960f6e2b611a76b69d67259fe01fb4577839cff503f6670017d0b599ba9532f58d3b4f612a915d0fd", 0xd6}, {&(0x7f0000000f40)="e4c7a9b36278bfb4c3d3c228d01f81f0d8d0d2c4179c3b10ffce53c402f9a147f76c95adb5eb3adb39876a0e6180f97231957414375a004223bd195795b5c87b27ae3a63aeb3c9cd613da663621709390c77f0637b9475719e6db7c00d67ff685f4ead37169720c4c1b2398c36", 0x6d}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000000fc0)="34a08576fcac6169edd846c1bfdb5890117fd1175c6c985a329cacd43132b80b04c4600057be70a5ee605d74013634bc332578c89260f6a22d007483059d4a6140b0b5ca9507645cc7f00565da390a22be826a4c300953df1d2aa6950f1a38590b1bdc54956fd853e30370510a01a80ee7c0e98e9c539bd482f1b86fbcb1e9d584c03dfa85bb8001c3d96b268f4e15c4673382d4ef53eace8491b70cf563b30f1b6f26b93371f987b6feec757293859fc2ab0eda7e1597e797e6999fccbd8d6e87da16c57c61271a7f097225bcfe1492f4db321e4476", 0xd6}], 0x7, &(0x7f0000004940)=[{0x100, 0x1, 0x5d20, "f2dab7d0c9867b8cecdaaa000fd66564bff6a8c79f19283bdf84138ebabb994d43c4a5e018956cb105b4de0803bf764d28b2b05bf2e3c885f538ba86e1804121888e9d3893f4ec71121431814f40fa3adb99df7163bd5b7869df5e6c542de78cf4caeb6e822aa8c9f3fc7806706bca5317d66ba06fa4488d083d820f588f9a1d33c1b2764f1662a2cfaedb3217ebb0974ce12e7a38dcd5afbff321233b8856933f4b50d6275d18942760120a400d3778afb27996ce732fee67cb5e28030d6411c0fbd10b163bccf4953f558d411b1cee6145e65507e89ae5c55095028a9cba5a907428d77b54a0e6007366"}, {0xe8, 0x108, 0x10001, "ce75a0f9130f4a1a028214dbc76e1d6dc469a0f2228f59451bf62cfb6af0a584f8f310069040cb400e72e2267ee72577597c4474de5ad529f98d179099bbf1d2d1f9953b3b7b771fe739b6e38f0730d9033fdcf7fcb94922dcc356072b6e925037cd641e1e62534496a3ac62dfd90137db2da98c92b09818c8f137ab2844b6ca2d3fefa9da705d431114d7b2c430812319a564aa1a698b2b46f265f36b8153dac3a2276c4cd7064b0e0c4d1862366b024e77515317c56989cb1745e99b37680dcd5fbd68766607fd3cdd89eb83b98cf6993b98d5b10820"}, {0x78, 0x102, 0xed, "a431d60d8d72ca4c2512ac0015dde0862fe7a358b81c230466b9ee6a235aa264f3e3e193dcd20e78778ed6898d937e9c11eba94658329168bf8109b25093d372269e78d7b2d9ae3e9fb3ec6eff8d1ef9a69bf9dade9c1e4915a42cb0cd04ef3e0c99"}, {0x1010, 0x113, 0x8d, "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"}], 0x1270}}, {{&(0x7f0000001140)=@can, 0x80, &(0x7f00000012c0)=[{&(0x7f00000011c0)="61fc85b76cb25b500a44eadb8529e1403ea35540b7c559c59580f521d77ca5426c30e68c45bf261040ae1b7c1f7b10067228e1e9cf795d40dea46f5111c05c137ba3f89c759eadf8408e0545679dac815b93a2f5a472051fc991d12ebd3b93db0b8f0e343b11ad694c48822b8d7eb70b76549136ea477674dbef8a1415cb3f70b1135bf30e8d3e15534fd2fa329974e1c8cd5077ac5d951cf456381c5f5939e070dea33fec997ea48d97ccd2657641232d1486c0c4fbc2297449492818eabd2b7cc9ee1b25f96c3c3d32596eb06109c2c2b2686dd186ebb9", 0xd8}], 0x1, &(0x7f0000005bc0)=[{0x20, 0x112, 0x80000001, "3fafd57d606dbe61f601"}, {0x80, 0xff, 0xfffff800, "1ed30ee28ad84757f035e35df586d52959ba8371eea92bb63412304de8ccd50d3132710772d8d7e3dfc50afdc696fbae5055c4a7aa839fe3180f074f2c333025d8911b025f44d3a9c4f5733e5ff5b07adeca9d1da0b39522edbd050a4819bbf52ecda2ca0d385a014b6d7c4b7cf4"}], 0xa0}}, {{0x0, 0x0, &(0x7f0000005d00)=[{&(0x7f0000001300)="41eac4e06ad01cb253f7e98a98f06570ff41f1afb244be4b5098c48861b60ca0d05f75f1581fad601da0eb345baf49b79b", 0x31}, {&(0x7f0000005c80)="265d50ff9199435d17822a8ae190adef4f5bf4962a52414c2dcd11eaf27b944625544603e34a278c2c6e4a31a701eef82f07d914742de1512f9b2caab2eb8e70f7152d11fc558f3d46ea43358063f6308cb53d38e21c70e15521b157633e934b59d65c5cb4418f7245b77b1a4a56e5b3f0a040", 0x73}], 0x2, &(0x7f0000005d40)=[{0x40, 0x110, 0xfe, "3f125b17aa608980bb0385a5e3dd09922c2941c156e44abe3652832baafd2874fdc810b5720be6d209517f2069"}, {0x50, 0x88, 0x0, "c722d50d66f172f702efe5ce439d366c71f80bc5fdb4c7e1ed716d5371dd48ed497abd86aaebf0ab7e372f7373fa900a184759cebb4eef90e92e9d6159209c"}, {0xc8, 0x18, 0x6, "b742ecac3f6d9d92efef222d4ed4d638231139be1da15a599ba376c2b8d0f957a322a321dcc20aba0044d118f81666fcde82a524b58e2d0e8356ac0fa7c65532f7687d215f49248dec6c652d5cafc81eb7c9e7746dfd75d51a4c0a0b4892b2058336381828395674cd1fa685cc2c4c9ec2806935705051f02dd29a2b699fbd14f51f4164a4f11ae1a200a2be89ce7222f48d50f0cd8cb0228cdf0f8d97ff234de6fb0a10f3d666087249d311197fd34619c95de298d6"}], 0x158}}], 0x6, 0x20004000) 06:08:12 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0x60000000}], 0x1, 0x0) [ 1401.658035] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted 06:08:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf0ffff) [ 1401.724211] device bond61 entered promiscuous mode [ 1401.743456] audit: type=1804 audit(1590041293.015:2664): pid=11469 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/722/file0/file0" dev="sda1" ino=16240 res=1 [ 1401.780785] bond61: making interface veth373 the new active one [ 1401.787113] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1401.821629] device veth373 entered promiscuous mode 06:08:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r2, 0xc0045520, &(0x7f00000000c0)=0x1000) [ 1401.854237] bond61: Enslaving veth373 as an active interface with an up link [ 1401.887048] bond61 (unregistering): Releasing backup interface veth373 06:08:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x1000000) [ 1401.919091] device veth373 left promiscuous mode [ 1401.965985] bond61 (unregistering): Released all slaves 06:08:13 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000140)={0xa, {0x0, 0x7f, 0x5}}, 0xa) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = open(&(0x7f0000000000)='./file0\x00', 0x80000, 0x5) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f0000000040)={'filter\x00'}, &(0x7f0000000100)=0x54) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) ioctl$SIOCX25SCALLUSERDATA(r4, 0x89e5, &(0x7f00000002c0)={0x33, "df8be3486199e6d12e07892ceddcd56511d226912702bad0e8d554d701472688f93cb01e9f59b86cf3050f3c9c2bfa772d2774522dfc76a0d650615e24eff20ff4aef034a00c0700ee9d60675a37ebd6fee1a554e5e0e531bec75ce7128aef25c08708dc28515067f128fe98e8826f043c463c62278fcc242e23d86ba9187300"}) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1402.021843] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1402.049265] audit: type=1804 audit(1590041293.315:2665): pid=11490 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/723/file0" dev="sda1" ino=16192 res=1 [ 1402.087015] validate_nla: 1 callbacks suppressed [ 1402.087025] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:13 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x4, 0x0, 0xa}, {}, {0x0, 0x20000, 0x0, 0x2}}, {{@in6=@dev={0xfe, 0x80, [], 0x3e}}, 0x2, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x8202, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x40806685, &(0x7f0000000240)={0x1, 0x2, 0x1000, 0xba, &(0x7f0000000400)="861163b1fc3db0840e4f82964c07eec61bdcd88107501f8fd15e696bd8f0c87b622886517357c5cdc25e0298c2735da3dd904a9eefc1154c8ea97b07b44d11b5ce0788ccffdceab333a6ee309ad005c94445436a3f3be3e3b8777c299a904b20d60e50594f958e76d30fd97428931724c01bbad1c57a84e53ec3caa6daaf27873d623688a9c6df0e820145ade6f809c88fdff79775c6abad9dd8edd4b56fb0c146516c9f0e8589ac256a6fce270a17988d83d48aed6369f7cfd0", 0x1c, 0x0, &(0x7f0000000140)="28f00592761af888a8ff6ed1bc59f377d920f0c7a3881af2f833f702"}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) write$cgroup_int(r3, &(0x7f00000000c0)=0x1, 0x12) [ 1402.203371] device bond61 entered promiscuous mode [ 1402.283020] bond61: making interface veth375 the new active one [ 1402.325668] device veth375 entered promiscuous mode [ 1402.349256] bond61: Enslaving veth375 as an active interface with an up link 06:08:13 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x4000000) [ 1402.398226] bond61 (unregistering): Releasing backup interface veth375 [ 1402.413456] device veth375 left promiscuous mode [ 1402.464554] bond61 (unregistering): Released all slaves [ 1402.506590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. 06:08:13 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x80000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1402.569255] audit: type=1804 audit(1590041293.835:2666): pid=11574 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/724/file0/file0" dev="loop3" ino=2 res=1 06:08:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x2, 0x6, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x8000, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x1) r0 = socket$inet6(0xa, 0x3, 0x1) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xff, &(0x7f0000ffd000/0x3000)=nil, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@dev={0xfe, 0x80, [], 0x17}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x80}, {0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x4, 0x33}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$FBIOBLANK(r1, 0x4611, 0x4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$KDSETKEYCODE(r3, 0x4b4d, &(0x7f0000000080)={0x2, 0x3}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:13 executing program 3: socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@private=0xa010102}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:13 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x9, 0x0, 0x0, 0x42, 0x0, 0x41c1, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, @perf_bp={0x0}}, r3, 0x4, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) getsockopt$packet_buf(r2, 0x107, 0x2, &(0x7f0000000100)=""/32, &(0x7f0000000140)=0x20) sendto$inet(0xffffffffffffffff, &(0x7f0000002540)="70c235f8f1aae97b5a4d7811b761cb313d8c61f3c114ca8748954e8e00a0b7b1c2694e4b58790545c21c25c5edeb9d2e760f415a5103f5860b094c55bef0e74a4027eae865a7a35342418d2eb311b8a6e9bd61304ef3a06d9072adbe0686006b3e1ed989d4e19c0435443821eee1ba3f5b20df28e1b4ef0b0a7818c9a65fab50689ffebb6b8db93fde1353411700643934218507074df00000", 0x99, 0x4000004, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x3ff, 0x0, 0x0, 0xa, 0x0, 0xa0}, {0x0, 0x0, 0x0, 0x800000000000000, 0x0, 0x0, 0x0, 0x2}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x3}}, 0xe8) io_submit(0x0, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) recvmmsg(0xffffffffffffffff, &(0x7f00000011c0)=[{{&(0x7f0000000300)=@vsock, 0x80, &(0x7f0000000780)=[{&(0x7f0000000380)=""/253, 0xfd}, {&(0x7f0000000480)=""/122, 0x7a}, {&(0x7f0000000500)=""/140, 0x8c}, {&(0x7f00000005c0)=""/151, 0x97}, {&(0x7f0000000680)=""/254, 0xfe}], 0x5, &(0x7f0000000a80)=""/161, 0xa1}, 0x1}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000008c0)=""/99, 0x63}, {&(0x7f0000000940)=""/78, 0x4e}], 0x2, &(0x7f00000009c0)=""/94, 0x5e}, 0xf}, {{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000a40)=""/43, 0x2b}, {&(0x7f00000023c0)=""/167, 0xa7}], 0x2}, 0x6}, {{&(0x7f0000000b80)=@nl=@unspec, 0x80, &(0x7f0000000800)=[{&(0x7f00000013c0)=""/4096, 0x1000}, {&(0x7f0000000c00)=""/128, 0x80}, {&(0x7f0000000c80)=""/233, 0xe9}, {&(0x7f0000000d80)=""/148, 0x94}, {&(0x7f0000000e40)=""/126, 0x7e}, {&(0x7f0000000ec0)=""/240, 0xf0}, {&(0x7f0000000fc0)=""/19, 0x13}, {&(0x7f0000001000)=""/164, 0xa4}], 0x8, &(0x7f0000001140)=""/76, 0x4c}, 0x7}], 0x4, 0x12043, &(0x7f00000012c0)={0x0, 0x3938700}) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 06:08:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xe0ffffff}], 0x1, 0x0) 06:08:14 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x5000000) [ 1402.698492] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1402.837046] device bond61 entered promiscuous mode [ 1402.848351] audit: type=1804 audit(1590041294.115:2667): pid=11631 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/725/file0/file0" dev="loop3" ino=2 res=1 [ 1402.881116] bond61: making interface veth377 the new active one [ 1402.887602] device veth377 entered promiscuous mode [ 1402.899462] bond61: Enslaving veth377 as an active interface with an up link 06:08:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) umount2(&(0x7f00000000c0)='.\x00', 0x8) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$DRM_IOCTL_MAP_BUFS(r0, 0xc0186419, &(0x7f0000000280)={0x5, &(0x7f0000000540)=""/4096, &(0x7f0000001640)=[{0x80000001, 0xa7, 0x9, &(0x7f0000000400)=""/167}, {0x5, 0x64, 0xdd87, &(0x7f0000000100)=""/100}, {0x20, 0x36, 0x27b0, &(0x7f00000001c0)=""/54}, {0x2, 0xf4, 0x4, &(0x7f0000001540)=""/244}, {0x7, 0x3e, 0x200, &(0x7f0000000240)=""/62}]}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$KVM_CHECK_EXTENSION(r3, 0xae03, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r5, 0xc02064b2, &(0x7f00000004c0)={0xffffffff, 0x18a, 0x200, 0x8}) creat(&(0x7f0000000500)='./file0\x00', 0x0) syz_mount_image$f2fs(&(0x7f00000016c0)='f2fs\x00', &(0x7f0000001700)='./file0\x00', 0x3, 0x1, &(0x7f00000017c0)=[{&(0x7f0000001740)="f81c46221738c63f37664a7f55c258d081e080250287083f5f71fd4138cbb5a3ca4c68c62758b882103b6ec8ef0d72bf53ca2eb5f79191d1405f8886f678f54b1b5eaab91cfb76d03fd9d0491e52a768fd3c3cf5f6d334b008a79b9b6204506ec27430e166bb58c2217901479a68f83386d3a92dd7", 0x75, 0x8}], 0x2200041, &(0x7f0000001800)={[{@lazytime='lazytime'}, {@alloc_mode_def='alloc_mode=default'}, {@adaptive_mode='mode=adaptive'}], [{@pcr={'pcr', 0x3d, 0x1b}}]}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1402.958348] bond61 (unregistering): Releasing backup interface veth377 [ 1402.968162] device veth377 left promiscuous mode 06:08:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) semget(0x3, 0x0, 0x50) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1403.035832] bond61 (unregistering): Released all slaves [ 1403.168133] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1403.244930] device bond61 entered promiscuous mode 06:08:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000000)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1403.296756] audit: type=1804 audit(1590041294.565:2668): pid=11765 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/726/file0/file0" dev="loop3" ino=2 res=1 [ 1403.377936] bond61: making interface veth379 the new active one [ 1403.406648] device veth379 entered promiscuous mode 06:08:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) recvmmsg(r3, &(0x7f0000001700)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) bind$llc(r3, &(0x7f0000000280), 0x10) sendmmsg(r3, &(0x7f00000001c0), 0x4000000000001eb, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1403.441095] bond61: Enslaving veth379 as an active interface with an up link 06:08:14 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xf0ffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:14 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r3 = memfd_create(&(0x7f0000000880)='/dev/\"\x00\x00\x00\x00\x00\x00\x00\xe8\x00\xeb\xf5z\x98\x00\xc8\x8d\x93\a\x8a\x8bYd>\x7f\xbek\x7fN\x1e\xdf\xf89_\xad\x8fv\x80\xab!S\xe8\xe1\x05.!N<\x8e\xe2sNL\\\xc0\xe7ZX\x8d\xddx\xc6\xb6P\x1d\xfd\x90\xd1l@.{\x1cB\xd5Feb\xd5\xb7V\x8dX\x10_p)\xba|7\xa4\xbb\xfb\xd62(\x92\\\xc3j\x870\xe5\x8c.\x955,`=\xdca\xda\x96)\xb8\x9f\x15\xb7\xfa\x0f\xfeA\x02Y%j\x04n\xe3\xa0\x03\xde\xd5\xfb\xb8\xdc\x18`\xd1S\x81\x88\xf9J~\x9d!\xbcw\xf6\xfb\xe3\xd1T\xd8\x9ft\x00\xd2\xaf\x00[\xbe\x89\n\x14\xa3\x83\x13i\xed\xe2\x92\xa8\x10\x80O\xaaw\xf7[\x7fY\xd4\xde\xd6\xea\x16#\xe4\x9e\x86j\x9c\xa3N\xde\xa3\x15DwY\x8e\xbf\x12\xdc\x19$5zf\x98V\x1aj\xd3\xc42\x06\xab\x98\xe3\x97FF\x1f\xce\xfe\xec\xb2-\xfe\xbd\xc6\xbb\xc6\x85\xd1\x84\x0eD\x7f\x12\xf7\x19\xd0N\xd1\xc4:\xb5\xae\x93\x8f\x8c\xe7H\x8d\xb2\x9c\xd1\x1f\xc6\xce\xb7\xb5(\x8dC$~\t0l\x91p\xba\xe8[\xb7U\a!\xfe\xe8\xbe\xe4\xc6\xc5(=\xafVD6BR\xfd\x97P\xd7nD\xcf\xba\xc4\x91t\x80\x83\x95\'\xd9\x01\x80\xcd\xb7w\xc1\x17m3\xa7\xeah\xd1\x91\xac\x0e\xfc\xd7{Sw\xac-\x81\xa5\x1e\\\x10\xe2\xde\xb9\xe9j9\xf9\xc6*-/\xa0\x8b\xb8T\x16\xccR\x96i\x05}=2.\xae\xb0\xec\xb3\xc2\xacu\x96/\xe8\xc8\x0eP#\x86\xf3nh\xe7\x9b\xeeI\x06\x9a\x81\xb0\xfam\xbd\xb0u\x1f\xf3gD\xf2\x9a\xb9G:\xc7$b7\xc4\xdc\xe1\xd42\x044\"\xa2\x1dg\xd9\xb5\x81N\xb7&t\xe4\xbbb\xdb\xe5\xcfx\xdd1\x821el\x99k\xbaM\x0e\xf8\xe5M\xb5}\xf3\xa8m0E\x9aq\x97\x95\x98\x94\xbb\xc7\xd1\x8d\x88u\xd0\xae$&\xe7\xff\xcb(f\xfeg!\x17/lj\x0f\xdd\xe0wY\xf0\xecHE\x93\xa9+\x83o:\xf7-\xf2}\xb6\xd2\fP\x1e\xc3Y\xf64Z\x84\x8b\xdfn\xda;@\xb3`\x1e\xbc\xa5\xd1eD\x818\x14\xef\xc8\x1ex\xd7\xf5:\xeda\xb6\x02\xc8\xeb\xdb\xa6l\xcf\xf6\x1f\xf6\xcbR\fLM\xc63\xa8\xad\xac\xf8\xd8I\xe5\xb3\x11h\x83\xdb\xb4\xf6\xc9\xa5\xe8\x81\x9e\xb5\xd2\x04\xa0\xcc!\x9e\xbcn\x80\xe5\x8c`\xdf\xaf\xf3\x1eC\x16\x02\f|y\xde~F\xaf\x00\x06l\xe0\x15\xee\xf8\x0f\xa8\xc2\xc6\x95\xde\xd7L?U\xac\x1b]\xb80\xc5\x7f\x1au\x1f\x1d\xae\x1c\r\xbb\xae\x81\xb6\x87\x9b@\xc6I\x88\xf1\x9d\xdf\xb8\xef\xe2\x16\xc1\xc0;\xdd\xc3\xd9\xdb\x16\xb8\x9d\xc4#\x93*\xbf\x11\x1d\xc3R\'G\xd8E\x80\x7f\xad?U\xc0_\x10\x8eB2\xde;\x864\x8c\x8f\xc90\fT\xef\xed\xb9\x9b\xeaK\x87?\xfb%\x1bI\xba\xf2\a\xfc\xf8k\xf8\xc1\xd7\xea\x97\xebNx\b\xf3\xc0', 0x0) ftruncate(r3, 0x1000000) finit_module(r3, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 06:08:14 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x7000000) 06:08:14 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000780)=ANY=[@ANYBLOB="24e5571a29fbf728f90fedd0a64dbd7b782ac2fb47b648301c4e9fe45724b7ac5fa5500f1c0d2c87ccfbdecb90205a3b9daec2bbadeb1820b97fdff8a56788e1859d40775285c60622af1f7da3405ebed7a4216c37ef68400ecb17f58558bc9e6aad2f52f647d066fe3945b42d79963380ce85441c25a7e51cec461cc10dfe2f30c4bf47a44e79d5e53e718769b9bc7bdfff2d12117a40772f0d2d3b4708d55d2064b683cbb958cebc8019b5b00edace96d4dbcda7aa79", @ANYBLOB="7700000044906656b3aa99c5ad852eab1b59ff9cf459687c8375ed410c27d21655af00baee3a3900280102aae8996bad41bcdac2de076cb190013b6dfc5eebe12dbea5a087f8486d498011518bcbd5e3c9d4b240d50791d83e0fd2842afd02c6e926494e6d9783be33fd0d4b1c7a0dd7f6b8719e3268379328623faaba328ad0ffbcbdbcc2d0ffa9d500f017e3dab0d9aa485e482aba795cbbe4398d1e1235a46f3f647ce08a8dfe623b6e75214b949f2abf4925"], &(0x7f0000000140)=0x7f) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r5, 0x84, 0x70, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @loopback}}, [0x7f, 0x3, 0x20, 0x4, 0x5, 0x0, 0x6, 0x8, 0x3, 0x5, 0xdf, 0x9, 0x9, 0x7, 0x9]}, &(0x7f00000001c0)=0x100) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x4992b57f, 0x9, 0x2, 0x3, 0x1, 0x3, 0x1, {r7, @in={{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x7ff, 0x2, 0x6, 0x8, 0x7}}, &(0x7f0000000240)=0xb0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:14 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xe8030000}], 0x1, 0x0) [ 1403.689989] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$KVM_SMI(r1, 0xaeb7) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r3 = getpid() waitid(0x1, r3, &(0x7f0000000040), 0x2, &(0x7f0000000100)) [ 1403.816174] audit: type=1400 audit(1590041295.085:2669): avc: denied { module_load } for pid=11785 comm="syz-executor.2" path=2F6D656D66643A2F6465762F22202864656C6574656429 dev="tmpfs" ino=179329 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=system permissive=1 [ 1403.818168] device bond62 entered promiscuous mode [ 1404.048142] bond62: making interface veth381 the new active one [ 1404.086213] device veth381 entered promiscuous mode [ 1404.121677] bond62: Enslaving veth381 as an active interface with an up link [ 1404.134894] bond62 (unregistering): Releasing backup interface veth381 [ 1404.170495] device veth381 left promiscuous mode 06:08:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendmsg$OSF_MSG_ADD(r2, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)={0x710, 0x0, 0x5, 0x401, 0x0, 0x0, {0x2, 0x0, 0x1}, [{{0x254, 0x1, {{0x1, 0x1}, 0x81, 0x5c, 0xffc0, 0x2, 0x0, 'syz1\x00', "386a89cdd39ccf698cf1827bb62f77c95ea1538f2ece6da82bae0674ecb842dc", "c3e642d8e869c87e03f9e82e4cd33da646a62f3918d514c77e170147ca909fb3", [{0x0, 0x101, {0x0, 0x1ff}}, {0x8001, 0x7, {0x3, 0x66f2e07e}}, {0x7450, 0x9, {0x3, 0x6}}, {0x20, 0x100, {0x2, 0x6}}, {0x8, 0x2, {0x3, 0x34}}, {0x1fa, 0x7f, {0x3, 0x7d28}}, {0x1ff, 0x7ff, {0x2, 0x8}}, {0x480, 0xfe3, {0x0, 0x3}}, {0x2, 0xff, {0x0, 0x401}}, {0x5, 0x700, {0x2, 0x939}}, {0x1f, 0x3ff, {0x3, 0x1}}, {0x80, 0x0, {0x0, 0xfffffffc}}, {0x1, 0x9, {0x3, 0x7df}}, {0x200, 0xffff, {0x2, 0x4}}, {0x1c, 0x4, {0x3, 0x9}}, {0x20, 0x10, {0x1}}, {0xfffb, 0x6, {0x0, 0xffff8001}}, {0x5b4, 0x2, {0x2, 0xffff}}, {0x1, 0xb8, {0x1, 0xfffffffe}}, {0x400, 0x100, {0x1}}, {0x7f, 0x7fff, {0x3, 0x8}}, {0x4, 0x54, {0x2, 0xfff}}, {0x20, 0x9, {0x0, 0x5}}, {0xcd1, 0x0, {0x1, 0x1}}, {0x40, 0x6, {0x0, 0x80000001}}, {0x3, 0x5, {0x1, 0x1000}}, {0xfe8, 0x101, {0x0, 0x95b}}, {0x9, 0x0, {0x0, 0x2020}}, {0x6, 0x2, {0x1, 0x8}}, {0x0, 0xffff, {0x0, 0x5057}}, {0x2f, 0x6, {0x3, 0x61f8}}, {0x0, 0xff6c, {0x2}}, {0x1, 0x401, {0x2, 0x3}}, {0x7fff, 0x0, {0x0, 0x3}}, {0x9, 0x9, {0x1, 0x80000001}}, {0x2, 0x6, {0x2, 0x9}}, {0xffff, 0x36f, {0x2, 0x1}}, {0x4, 0x1, {0x2, 0xfffffff8}}, {0x200, 0x9, {0x1, 0xffff}}, {0x8000, 0x59a, {0x3, 0x81}}]}}}, {{0x254, 0x1, {{0x1, 0x9}, 0x9, 0xd8, 0x6, 0x68, 0x3, 'syz0\x00', "b3987558655c408b237dece4ca4704c094daa894b30cd7201ffac02eb5f8309c", "1a4f84059e83c90cb3946c8ddb0f09daa0617af2c5b3e7b648273bcda3befc94", [{0x0, 0xfff7, {0x3, 0x101}}, {0x0, 0x1, {0x0, 0xfffffff9}}, {0x6, 0xff, {0x2, 0x8}}, {0x1, 0x7fff, {0x7550fd809f302989, 0x5}}, {0x3, 0x9, {0x2, 0xffffffff}}, {0x2, 0x0, {0x3, 0xf1a}}, {0x100, 0x9, {0x3, 0x3}}, {0x400, 0x51, {0x2, 0x7}}, {0x4, 0x80, {0x3, 0x2}}, {0x80, 0x6, {0x3, 0x10001}}, {0x8, 0x3, {0x0, 0x8}}, {0x6, 0x6, {0x3}}, {0x401, 0x0, {0x0, 0x48}}, {0x5, 0x1, {0x1, 0x81}}, {0xe2, 0x78, {0x0, 0x9}}, {0x8c93, 0x7, {0x3, 0x4}}, {0x4, 0x511, {0x2, 0x10}}, {0x800, 0x0, {0x0, 0xffffffff}}, {0x0, 0x6, {0x2, 0x10000}}, {0xfcc, 0x8001, {0x2, 0x7}}, {0xffff, 0x8, {0x0, 0x5}}, {0x0, 0x200, {0x2, 0x400}}, {0xae0, 0x9, {0x1, 0x7}}, {0x1, 0xfffb, {0x1, 0x4}}, {0x0, 0x3, {0x0, 0x3}}, {0x0, 0x6, {0x2, 0xfffffffc}}, {0x3, 0x0, {0x3, 0x2}}, {0x9cac, 0x2, {0x3, 0xc8b}}, {0x5, 0x4d57, {0x0, 0x4}}, {0x2, 0x8, {0x1, 0x4}}, {0x4, 0x7, {0x0, 0x4}}, {0x3, 0x81, {0x2, 0x9}}, {0x0, 0x0, {0x3, 0x6}}, {0x2b51, 0x2, {0x0, 0x3}}, {0xf3, 0x800, {0x1, 0xbdfa}}, {0x5, 0x3, {0x1, 0x47d}}, {0x0, 0x9, {0x0, 0x8}}, {0xd819, 0x5}, {0x976d, 0x1f, {0x3, 0xfffffff7}}, {0x8, 0x101, {0x3, 0x8}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x9, 0x2, 0x19, 0x2000, 0x1c, 'syz1\x00', "621770ea068a56450431db16ce1f0ee526e521552242771783aa12105e5c14d9", "fa98bc0c90f84f97b6f87fd9d205a030ca92d8915e771f75cbf88a1b285f50f2", [{0x7, 0x804, {0x0, 0x1ff}}, {0x3, 0x8000, {0x2, 0xf94}}, {0x1, 0x3f, {0x0, 0x40}}, {0x4, 0x4, {0x0, 0x4}}, {0x7ff, 0x20, {0x0, 0x1}}, {0x8, 0xfb62, {0x0, 0x10000}}, {0x4, 0xf713, {0x0, 0x3}}, {0x400, 0x4, {0x3, 0x3}}, {0x8895, 0xfff, {0x1, 0x80000001}}, {0xffe0, 0x3, {0x3, 0x9}}, {0x1a4b, 0x0, {0x1, 0x7}}, {0x80, 0xffcf, {0x3, 0x1}}, {0x7, 0x7ff, {0x0, 0x3}}, {0x20, 0x5, {0x0, 0x752}}, {0x1f, 0x2, {0x0, 0xe6f545c}}, {0xcd, 0x20, {0x0, 0xb1c0}}, {0x882, 0x6, {0x2, 0x3}}, {0x1ff, 0x0, {0x0, 0x8}}, {0x3f, 0x1, {0x0, 0x8}}, {0x1, 0x7f, {0x3, 0x10000}}, {0x20, 0x0, {0x2, 0x101}}, {0x81, 0x5, {0x1, 0xb6}}, {0x1f, 0x7, {0x1, 0x9}}, {0xdf7, 0x3}, {0x9434, 0x3ff, {0x3, 0x101}}, {0xa8, 0x7fa, {0x2, 0x6e}}, {0xffff, 0x0, {0x1, 0x5}}, {0x6, 0x0, {0x1, 0x2}}, {0xfb0e, 0x4, {0x3, 0x6}}, {0x7, 0x7, {0x2, 0x7}}, {0xffc0, 0x4, {0x0, 0x3}}, {0x4, 0x5, {0x2}}, {0x3, 0xffff, {0x3}}, {0x0, 0x8, {0x2, 0xffffffff}}, {0x81, 0x80, {0x2, 0x6}}, {0x6, 0x0, {0x1, 0xffff7fff}}, {0xfff, 0x401, {0x0, 0x1}}, {0x0, 0x8, {0x2, 0xffff}}, {0x7, 0xdbda, {0x2, 0x328d}}, {0xfeff, 0x8001, {0x3, 0x3f}}]}}}]}, 0x710}, 0x1, 0x0, 0x0, 0x2000c004}, 0x81) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1404.224922] bond62 (unregistering): Released all slaves 06:08:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r1, 0xc0305616, &(0x7f0000000040)={0x0, {0x4087, 0x4}}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x1, 0xa}, {}, {}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x0, 0x2}}, 0x104) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:15 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xa000000) [ 1404.336229] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1404.467356] device bond62 entered promiscuous mode 06:08:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa490) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) 06:08:15 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket(0x11, 0x800000003, 0x8) bind(r5, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)='trusted.overlay.upper\x00', &(0x7f0000000580)={0x0, 0xfb, 0x1015, 0x0, 0x4, "ef907dd5a1138ef0756bbe3bf79c45bd", "fffde1b073d922e64ef64110125f76f840c944a79733400c0f2fd2041a9b5ac837bcacada2d5473eb640d4bec960f67f726debee0e41910919b223d79c979c04c1b2f9bd2f7cad229bd9f3ec4499eb5f5114984a22ca9e5cc44d8aedf396532b47de70f00229411e1281a43fc10c37c965bf3edc06a7cdbfa7d046f7890d94863c8968528155f0479e2b741fa845ad86263d79b167d4e0883917e1c49876fd43ea39584db8b4713b2b6ea3c4527abfeccfe6675b04432fe8689b1e204108e9afb187c3205043b1d4b14cf0ca3e75ec5e0c00c7e23f971b1428da75a53343c17793ba5d4ba90da26e876838aa1d38bb0592c0755feabe436e924ccd5a9a1ca05225f2e36aaa1e97b8d8431b9c27b7e28059c23de2240fb8821d517c88a122abf4e17ad69af95114046d05cf1906ea69997f2a214b9cf55e5349792a09f50eb48ddd1b7d05511f688b22423c1e0856b01acba382be3152efe79a9b7172d4e9e96a4cf731defb4d28847f94e5ba63dabf5670f2d792f0e03505f01ed78c290af47b2b5c7f443366ad397a6db161545be1ad8ac23581956335f036d8e52b999f5c72734d78005763aa7c4d9453d9547ec3db8b01f81c395a3d8dec826b857448c44143d322c22b30f446e40f20ca0ddbd054c02c9a3f6d2deab774eb328b60db173fb85e5b85f908349989246715b8cad28b6d7e12763a2653b3db600f55ef65118ad96f5a3584aca6b6a045aa30c0ec51c9809ba9970e4764e93357cce97316038c007bc56a344a3942a5560aa63b1956dc238f20b8d35f363f2c0c0d5f42c01696db772c46906b4d07be07f49067e59f31627f2e0cf5c68a26c619de82dcb08eaf18ad53f59753383ddddbab83d24be22933909ec8113b5938b351980055bda3f6131da07968381fec45c5dca1ed1f8966e8164b8d86c470c6eb9d444df9f060a360847f65fd4385d1ca29c529c584ffad860c989acbf6bf6fc9d7824670a8aa0abafcf2fb467b784f0e91c12c91ac12290082b0296af8f09c172b06a9d8a1620ddd297f1b945e7489e3e90adbd10e613d7d320fc35ada916eb16be9ff8bb60dbdc4c5cbca2aac617e217e2461cfae52e07041ca5e79b3940e51be65eb39a99c025043bbf9dbbf1b163624210b5f60740f8cc85d04024f5f621d1bfc3deafd91e99681dbcac676cebea864b62a98fdc6a95751d61604d3dae0548b618fac0737c52446e9d92a8c7e626ae1b60639be30e771558f78054fd5568e5a644da67d3fc3a3092b981a2540c63e836a9feabe56222134683c6fc78b69666fcfd2b0a1ad6781651c9cacee4f920928bc4da4a90b2c46e242b1b7ec2a206d3b9c9913afee4ba4b7ea93e7f37a3e03af92e5202ffe1afd918fe3dc7c80696de61dea3785273d8680c7e38f17316a09c88c5b05ba4feccf13aa147eca4eaa61c815a37b2d80d58bf53366260456df0204453d7e4f9199bebde20524673a4e008c0399aa94f096b49303f58f6efa791e718972c709fd5c2fea822926c576900169b082e6769f2d6de84e570d37e9e9868531b408bd88fe67a9f716f11929a91eb7b9a590a9889f18b2875bc3aa897a25febc217bfdd1b760cdddf8208e76b2b936ca291c3c4a316337c0c3c33e927bac9800a067fc5a6353c4c2fff750656cd34be3ad600155329a4d7af8a8bdce49705bff36b84fd310e6b0721163371516ace7aa98fe325823d999d7da04f02a08fc19bf6ee5f5d821dc4380fccf412c2e909cafe7a3c32512389d0bf81bfb68c52e4a880a0ac0ec1054d10e4ea700de1d084e16864c655daf704f78a858049c18d427f2da287ada06e12390fe5ce67420b6844bb5e528594b95b0b928819db649e0c2b99546bcbef11964bc6eee800b11a4241b61142917db85ae0516879b4f5a790c44819048b41c607caba8319fa59a557085bd6a157a4dc4337421c352974b2843198954e38af9e1e311010e57b9da398ae9f5cb170022fb1cc7b8b83ca4acd7db412989914cd7fac03bc31322a1af97a9d6eb9df8e6f1e52e8f8875c60e0ed089767bab26aaad8371647fcc829d22d5d1eaac3ef014f757d0899c9ee29a7ff763ede4572e1aca796812dd2ada47b862606666eb24b87c2b08dc9a210f086bb2fb3c99a6fae64646a0d97abfa664cf35fd1d38acb8276e76716dba3cf793e745c49cba2f5792a391b30030958225095470c1058916c67fbeccb778f2d62577cf496a6ce4e44357dd259395a50107242ffdadf01b6efa4471e0474c851feb14d9317f201b6315e6ee30c384e1d645b1228fb0bfae101d401293e3d1ad887ea79f9aad030cfcae390aa6389889fda198d82bddc41d45793e8ce5d9a06f08d1d74cc2fdb1ffc9742f0c7d45ee7e2fcca615875d28a029bfbabf481749fafc0c2835c85edea826f74e9add4580a19f6f2dc68a2f072533c6c35f0bcc272a55fcc22191f366aa10a775c535c8aa2b149553b6c28c0a21a2607d013a2cd51cbd55f3516200cd6346880b41ed07d3eb877cdbb795a89c9afc2c8194c09982388eefd42a3534d5887fc90e1ee882d1f2520e40cff05c9aec887b6b3d698d0420bf8a212214dea6fb6238a3c33fc886ba1e05b5147e310d2f0af67bf4e81daf900dc7366fb808b7b1077e4f157f2eef4d633cf363efb7cb867812863566d91b897dee19d8156ad83a8817ff63a3913fb821a8342cea4f922c664844eac3cfb9364046815a91c12380db3692a34953c7217a1a75fc672411da16a4fade1294cd89ce8946b35a08ee70554620376af149e89f976198ba85c9f42373bc810eff08d339ea9871df1383eaaf2ca8a7700cdb7fe330354d0b87bf7daa32a3928dee81e6d0c06d2ff8ec169c6e795a3e3dfe3ff7bd6dec9d274e9ec649376d3ad1767c99fa964d642d1153c345a9b0f2f8406504d5b1c5a614e173c59d7720dea88521b48cd206a3bdd4b4c90753f5d44f46b8de6878ec81897acacbb3df63ab9fd9ea96c28ab7b15018d70716513c1cce63dc55f4ddfc338df1b570d875f4c0833a6be7e14b82b7ffa9e723181ca43936966f9eae87438a991bf3ee0108d5cc1b1c8316de99777e9757347770bd26697e5874bb3d65767f0781dc917b20a873eb95d9e70c8ff4a77b884074f0fc932ba19775a3cf7facd56319b7fe8e9559b31a3c9ed1664737fb45bd92c5a35d7e62baa7880574d1c2c34ea431c864eeb98d80117be450bb7df84abc8688f2da3e20d77b6db0b377d6f58d208d3f5c2838a35686f83c04e5a2b5fb06f6c4be97d24a7f52181b09275cd7933436868a0808bbbe1f6abb0198d2579a7b8c836d133c56a752b0364ae088c830c7f6562985543000256276345bc94f8257de1153bf2151b273c572139e414d59edb3d33497e5fdb6519b6b45c9073268637a3439e794dd43552dbdf5211a72149a966f9f845a0dc73ab72f28cfaa576840175627a4cb1594a2d6a21b94aef6afa4863f6decb20e862de9828273d42e87bf32e410ca3528a1dbe33d2400f2e45e470eb9877632f904bd20f391e958c23f3c543f168ef8fc4559f5c07a9b74224bd8eaf80ee747413274dec94bf52c538572240dfff79202e04832f6fec6b7e51c5c969c2decb851b4a5053b39f92a30fe7b91e2867c5fa3949f6f98d4657d5c3bc4fa1a377b19e14a88255106a1983ceb171fe6b332af78c8999f4eec37e5ddde59f936b610a5ca44283881f7b70f81b5476465cf83c4922e3f1c20e320f9f19d201e2849c1faf2c82f0cbf0860036e5eadb1f87ce48ade3e1c55711c0a701c14dc2817ab59c63c626409b990fbc5d847c8639ec29558a95480191fa7155133d2330bcb368b506bee7f38992cd345fe0e86ab9d91aa0981716382de5f7fa7621f3c2f0b59058ab9620dc2c488a6b7f28d456b26d52baf6890745bcf7bd573f2dd332b5548ec5a1418c970d359f1190b797f4f5ab63451c69aa62f1b2ec27433d561039f2da76a7e98ba2f3f85f26d336d5cd08799c0175ae82a48d5bbe6ce8e4ab57a2077df2f7ae03271d5df0b60c31acd8a9e77b5ded389d28d9a22c865e7e01ce084d56cbf308a447def0a692f309a64e1eb11f4317d46b1d9ebf8cdac9da24387c08d08271a19277b210585d6f4f894e5ddbf1b0c7a44e04b16e7643897a395343b0185a048fea9d7570aef610a97a060962ae8af6d8e139a539a18c4f6a03d1e8d2417c558ceb6f64d7b7165d38ab1445f8a57dc02deb4f14c376e209eecc25adf3577a8bfd20dcec8a766b210c5997168f3eee2cd0e90cbb8e6a318cc8c24b50bab2f3977a348a3849f252ddc33f48a52fa1301efb6ef6b8c6707e8c8af00bfbd466943d7f38429b28f03f0fcf20845146a63cf0c597bf7543f78d6cb7b7b1558fdccba1c17091edabe14a80eca9ef490af70dc75d4d5f3eb71542eac9b04c69885bff71048679bd98f4e1cea59042adf7b676fa078bc3a7cb5c14e4c8c31010fd7ca46e6224bed12e523fdaa1833260d3dedabbbba88bf4f8683e211b8f3ae1c58d9fd56026a3151b880a023aec37be76eb1fd69e29df7c48ef0cd3f6390d716a7d0b3f496c795910baa997a3d04a3ee11e8aaf498ebd6d96e746303f4a8d98d21854aa532eb73f9ac3adc7f4c9ebad7c4bf55e6dc287febd21782c6eceeb11dc2b92a453118495bb3ab7b6094f0c377a003d98df7bd684b99f058ff103fbfc0dd4a7ff06eee88985fac06f74f5b9e506850eab43a766288323765103922149f19f41c321a1c3f7ffaf76a6411e6a2eb84ad354a9073d899af32068542f6f43d7c0a85f53e44a84ddd8a60a72ceb5f7ccdd68592b77883ca9b0482f14c5da45787e6e5075aa8fcc06e23f4bba95db89bcfef242e106b21a8f8b4b1485f92549eed6c688bee2c5e9f5be746fcdf429126d236ac87299004541a1d6781408e4751542de288ad608c022dbe2067a4457be80bd84ef9a66fb38e5fb7473bbdc4c530f63802c31b140cdc5f45685b97d98698a92dff8f857e015a5ee4d1801580d9bc5c6508538fb4808ada33211a674c84dc057226b959cc6be37478a21b9db37ee78f665ca844ed0be3bcffc4e3b1549e4a18ba4d5da45f3bc006804bf3b9aa3bd3c7100fbdc2093e09efe4472aaaaa8a078dfcc12bc2e5d4262313c3f789c6f24d1bbd25d99233f777bfdd0f397acc48ee507df93be4aad01055c55310a8eba9a6e610ae7916e02b13cd8c0075fa92710ebb57f33f8351fc3b3945ef7037bfb5b568890b3c382f45dfbda1c27ce65422030ec9e23c61e117d0f38993e201a5db16e5ca46f5efc56993a33608c1866b6ec3b8c3ce5a44e8dd42c37b0aac98a65453b251be7044938198b15d625f6fe3d1021ea2f3bd4cda63935f4156214e46f6de72a78401f9b7d0b9dbfe0880449067476d5aceebf087780e7aa77385aa3f632bacb866bc80ee5e768e0df2df2041a18fcf395af4941ac779582002b88c8ae2bfcf625f80481759e7fae30097917481ff921cf6ece642f4112172ab34185bc74dc1b841f3430c4188d29f7358e84c3e9251f44a1c96fb7e916818dc1f783a8c2639d06d682a6d4230bd5bbda36b463c11f6d0c5e9ef78695d4a329c3a970e318b03d7890d5bc3d1f732a4aa0057daaa39639dd49caf11c8f512c4260472db919f0d93bf2080092ef55b5431bfcd6022a8ed6a5cfe6d728f05982628541f2ac3f5a99ecb280340a94c65b837b40a50412442d780cfdb653c7a4d63a5c1f2c481bf6f862de1e9ab79bf7aa53e3564e06dc8141e2ead91fd0bead7427f490f8be2bc754fe2"}, 0x1015, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000140)={r6, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000001c0)={r6, 0x8, 0xfff8, 0x7, 0x0, 0x5}, &(0x7f0000000240)=0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f0000000280)={r7, 0x8000}, &(0x7f0000000400)=0x8) ioctl$DMA_BUF_IOCTL_SYNC(r0, 0x40086200, &(0x7f00000000c0)) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1404.546809] bond62: making interface veth383 the new active one [ 1404.567913] device veth383 entered promiscuous mode 06:08:15 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x401}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) finit_module(r2, &(0x7f0000000000)='cpuset/wlan0security\x00', 0x6) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1404.596109] bond62: Enslaving veth383 as an active interface with an up link 06:08:16 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x1000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xeffdffff}], 0x1, 0x0) [ 1404.884018] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:16 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl(r0, 0x9, &(0x7f00000002c0)="64e58953e2e43c0245d85cecde252e04d9e55fcaea169c0901d523d08368ec6f55cf989347d763294ec9c56a45b725180203da9eb85936889894020c818fa2b225c5cda6690289d7ddd8395e523c2311332b5ef26f5a7841ae53d901c5bb05f1f4440934c055bdfb86e408ec99c3ec0e7893f1c62d498f9f6c41518e6761fc5682adc844767b19110dec2e2dc1725efb57f641c6b5c324fa5d9f6e483174f51cd88a5250513f56e86da0cf2e7b45a1dafe038aa8d2a28b238bf2d9cb0e53d772780cecc469435fb2fd55ca047aabbb1a5d84d65bc69eae8c3f24a78b8d2280dbdd71ca8a05090e028e") r2 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x10000, 0x10040) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r2, 0x4008240b, &(0x7f0000000100)={0x2, 0x70, 0xca, 0x1, 0x2, 0x4, 0x0, 0x5, 0x2, 0x2, 0x1, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x1, 0x0, 0x8001, 0x1, @perf_bp={&(0x7f00000004c0), 0x2}, 0x40800, 0x950, 0x1, 0x3, 0x10001, 0x3f}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) sendmsg$NFT_MSG_GETFLOWTABLE(r2, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f0000000500)=ANY=[@ANYBLOB="20000000170a01010010001678d5ba46212100000000000c0000000c0005400091650400da0d193ec2ef478623b31bd8c32a3a18152d458bad8b8d4b450d8bf2c99846f52dd003986f9de65f51eb7826141186088647f7cc535f7d58a5d48f278334f65de9d5"], 0x20}}, 0x4c084) syz_open_procfs(r3, &(0x7f0000000180)='net/ip_mr_vif\x00') sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, 0x0, &(0x7f0000000000)='cifs.spnego\x00', &(0x7f0000000040)=@secondary='builtin_and_secondary_trusted\x00') 06:08:16 executing program 3: setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x31, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001400)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) ioctl$KDSETLED(r0, 0x4b32, 0x3) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fadvise64(r1, 0x0, 0x0, 0x3) setsockopt$inet_sctp_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={0x0, 0x80000001}, 0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={0x0, 0x9}, &(0x7f00000001c0)=0x8) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f00000000c0)={{0xd8e1, 0x3}, 'syz0\x00', 0x54}) clone(0x4000000006ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit(0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_KICK(r2, 0x3305, 0x0) ioctl$VHOST_SET_VRING_BASE(r2, 0x4008af12, &(0x7f0000000080)={0x2, 0x6}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r3 = open(&(0x7f0000000240)='./file0\x00', 0xc2080, 0x84) fchdir(r3) creat(&(0x7f0000000500)='./file0\x00', 0x0) 06:08:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000000)={@private2={0xfc, 0x2, [], 0x1}, 0x30, r3}) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) [ 1404.992251] device bond63 entered promiscuous mode [ 1405.051737] bond63: making interface veth385 the new active one [ 1405.079421] device veth385 entered promiscuous mode [ 1405.099372] bond63: Enslaving veth385 as an active interface with an up link 06:08:16 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe000000) [ 1405.130888] bond63 (unregistering): Releasing backup interface veth385 [ 1405.139985] device veth385 left promiscuous mode [ 1405.184285] bond63 (unregistering): Released all slaves 06:08:16 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x980000, 0x80, 0x1, r2, 0x0, &(0x7f0000000080)={0x9e0903, 0x2, [], @value=0x1}}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x7, 0x3f}, {0xf7, 0x55}, 0x4, 0x1, 0x6}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10100004}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0509fc1b", @ANYRES16=0x0, @ANYBLOB="000826bd7000fcdbdf250f00000008000100ffffffff08007e00010000000500d50002000000fe04b20089e0ac0fad04962eb264ab0f0216d493379f1be459eae9adde1538238ed5d0aa7cafe5fb6dae163fda204a75b5cb5d4c07d9fb7164b016df3b95a066c89a0d4e464ea3de6a0f4dba378ac63d731dfa1f56535488f2a96a22279680773279d3a4e12b37f48d0342f88972cd13dc237892afe14fb62bf7ef9cb83031d39e5e96260d27e340057943c40f5f303587cea5c9deab6cdb2be7266694ece1573ce2f6a3513b6a46d058523a26fd1f4e778aab90ed98483e9612c4ba4eb76e7e9df3a14ec844e66fbefefb869228feddbaf07253b303803b5d6305bef05bfb43c0a6f15156e70d3880196482b1604406e596c6539960fb8ef27d9dc78349fa8fb683852bd63d65e3d4a18da69345d808d63da29a08085782102030643911346b39294518f72aeb449de1212dd5292d4b9840b5c9c14216c0cfec37069b0ea19fd8f83d9e45a97e0bc5db884e8f04ac0278ec60dd615104652ac822631eef69c0a94673c3d2ffe0f4ee369251e446da9be41c295027ec508f58a3352b7939d667c3a7f0d4d96ea10d0e04249eb2442e07ce794e3bfda6c887316ebcd7913815c44a9f7403db3d3f386e92aa7566925e49bd92a1526ad7207b2a6e08a22f4c247650ad29c76874b1ca2b243b753508c80c86f8ccbb7a5873f5b4bb296b33294a83c9866a7154bb9bb7c122536fbde34aa27b1da7e26c6d6f57cdd7c91930e4fa260cbdbfc22e5625b747c7ae447022291e2abe40340ec8208831d7f2daf3046ddd13c8cd0cf79f8323d7739e49bfa77b8949bdc5911aac39d912f423f948761deef951b07e1071bfeba4464d87f6d9831f5dae800215309b45a973ff0465c8da0a650a54eabd0e60b169c1f7d4c8caff6cd67ed9ab63eee339dfd8e371671d696871b5c6a5000ce8bd3d6fe20f4cc3af8b3221f3f7aed4df05be25e45f3452abf7a2dcc89489a18533967e28f362587689e245bfcb562fc632e2d8b4d10be60990c29037837da2ccad7e6c679115fd5f0199c940d8a9b72bddc11ac0f4a566db676b1c1fd9e35e99796ef87f39cb645ed1516e4f481dc096c69ee789e75b9f3b868571c0f91dd7b33fb01f11f0164f3272b1b74dac5b7794bbc90c82fdfcdea0c612cb0d0979f537de872c5e8402f1e127ce861c810f78dbe187dc318ea4bbeb3c303b0e1c7827e5b9f27677d45a8c7d0284bfa549df0c00b268420ed0d0f06939a2e2da56407b136fe7371993493dd1b04707a55cf2159171d29a2530e6fc3639951c97d1d54f32811a0006b99a946901a9277f87e716cdb7a974757e1dee63878370bf39a12ce0a5e047747363e15523e403b929e68d06b0fbb8e246e3cb181fcf560891ca3724b568742a9918e582eeacebe15e6fcd312551b397e0cbeb6522a88a9d19464bc53ae1e5b97339d46da9e0b9581c80abe5cae72acf1071e029a971c6722b865cf90558495def79bae9f81926c42bd13e52deaeb8c1413c3bc6821fda7eb5210d41c0e00581b706c4eb27bede868862edeaec99b09892ae4d74abae38f8703caa2f9c04da4cef72ee5d6659d81d7b89e77fb291bc90a8b854b389c04382d39f04c3487917867ef3f90f93f8e317e81f60044547d9120c97b61ae57914149dfc763869e470e4e4d762867ff65badb17e0e2845753efa4f30b782625259a58ff9a70272fef7fb6c57a10dc0360472d5693d728918e04bd93c3eecba2e39ed7638463f7072f28caa11e337ef9ea9016c80ae71038d4ce591b6814ef3a47391e26b588b6e9434c2e4a47a7798449c824bee2651835fc545eec5e400000800a500010000000400050108007e0001000000"], 0x540}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vivid(&(0x7f0000001a00)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000001a40)={0x2, 0x800, 0x527, 0xfffffff8, 0xfff}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1405.270512] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1405.375561] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1405.413071] BFS-fs: bfs_fill_super(): Inode 0x00000044 corrupted 06:08:16 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x2}, {0x4}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) [ 1405.494550] device bond63 entered promiscuous mode [ 1405.531993] Restarting kernel threads ... done. [ 1405.560964] BFS-fs: bfs_fill_super(): Inode 0x00000008 corrupted [ 1405.568221] bond63: making interface veth387 the new active one [ 1405.620141] device veth387 entered promiscuous mode 06:08:16 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xf4010000}], 0x1, 0x0) 06:08:16 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x0, 0x7fffffff, 0x7fc, 0x1}, {0x0, 0xfffffffffffffffd, 0x0, 0x10000002}, 0xffffffff, 0x0, 0x0, 0x1, 0x3}, {{@in6=@dev={0xfe, 0x80, [], 0xd}, 0x0, 0xff}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x1, 0x0, 0x800000, 0x8001, 0x10001}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) setsockopt$SO_BINDTODEVICE_wg(r3, 0x1, 0x19, &(0x7f00000000c0)='wg2\x00', 0x4) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r4, 0x40106614, &(0x7f0000000140)) [ 1405.667904] bond63: Enslaving veth387 as an active interface with an up link 06:08:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x2000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x80, 0x4, 0x2}}, 0x14) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x800000}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x4e21, 0xc1d1, @dev={0xfe, 0x80, [], 0x21}, 0x1}, 0x1c) r3 = socket(0x28, 0x3, 0x9) r4 = syz_genetlink_get_family_id$gtp(&(0x7f00000002c0)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r3, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYBLOB="97e62dbdf9002a626ec70400b7", @ANYRES16=r4, @ANYBLOB="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"], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x24041001) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETVERSION(r5, 0x80087601, &(0x7f0000000040)) [ 1405.787609] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 06:08:17 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x20000000) [ 1405.860644] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1406.004262] device bond64 entered promiscuous mode 06:08:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xfffb, 0x100000000}) ioctl$TUNSETOWNER(r6, 0x400454cc, r4) dup(r1) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000000100)={0x6, 0xfff, 0x8000, 0x0, 0x2, 0xd3f}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000002c0)=""/194, &(0x7f0000000000)=0xc2) [ 1406.050505] kauditd_printk_skb: 2 callbacks suppressed [ 1406.050518] audit: type=1804 audit(1590041297.315:2672): pid=12178 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/730/file0/file0" dev="sda1" ino=16167 res=1 [ 1406.130891] bond64: making interface veth389 the new active one [ 1406.164716] device veth389 entered promiscuous mode 06:08:17 executing program 2: r0 = socket$l2tp6(0xa, 0x2, 0x73) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000140)={'vlan0\x00', 0xa16}) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x4e24, 0x3, @loopback, 0x5}, 0x1c) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4840, 0x0) getsockopt$inet_tcp_int(r4, 0x6, 0x19, &(0x7f00000000c0), &(0x7f0000000100)=0x4) pipe2$9p(0x0, 0x0) fchdir(r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1406.207147] bond64: Enslaving veth389 as an active interface with an up link [ 1406.239811] bond64 (unregistering): Releasing backup interface veth389 [ 1406.289476] device veth389 left promiscuous mode [ 1406.297362] Unknown ioctl 1076910120 [ 1406.305133] IPVS: length: 194 != 2950900408 [ 1406.337205] Unknown ioctl 1076910120 [ 1406.349207] bond64 (unregistering): Released all slaves [ 1406.359704] IPVS: length: 194 != 2950900408 06:08:17 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x800000000000}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) fcntl$setflags(r1, 0x2, 0x0) [ 1406.466919] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1406.573150] device bond64 entered promiscuous mode 06:08:17 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x28000000) [ 1406.639142] audit: type=1804 audit(1590041297.905:2673): pid=12272 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/731/file0/file0" dev="loop3" ino=2 res=1 06:08:17 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xffff1f00}], 0x1, 0x0) 06:08:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) ppoll(&(0x7f0000000000)=[{r0, 0xc100}, {r1, 0x400}, {r2, 0x18200}, {r0, 0x2000}, {r0, 0x2000}, {r3, 0x80}], 0x6, &(0x7f0000000040), &(0x7f0000000080)={[0x6]}, 0x8) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = socket(0x11, 0x800000003, 0x8) bind(r6, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000140)={r7, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r4, 0x84, 0xf, &(0x7f0000000100)={r7, @in={{0x2, 0x4e21, @rand_addr=0x64010101}}, 0x10001, 0x160, 0x4, 0x7}, &(0x7f00000002c0)=0x98) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1406.684884] bond64: making interface veth391 the new active one [ 1406.698448] device veth391 entered promiscuous mode [ 1406.707270] bond64: Enslaving veth391 as an active interface with an up link 06:08:18 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x3000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1406.857540] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1407.027804] device bond65 entered promiscuous mode [ 1407.096424] bond65: making interface veth393 the new active one [ 1407.126742] device veth393 entered promiscuous mode 06:08:18 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket(0x40000000001e, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4408000033c8c0a66ea83637", @ANYRES16=r5, @ANYBLOB="000429bd7000fddbdf250d0000000c00038008000500e00000022400028008000800060000000800060001ffffff08000900c77400000800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x20000004) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3a}}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x810) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1407.145793] bond65: Enslaving veth393 as an active interface with an up link [ 1407.172447] bond65 (unregistering): Releasing backup interface veth393 [ 1407.186186] device veth393 left promiscuous mode 06:08:18 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) fstatfs(r0, &(0x7f00000000c0)=""/38) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) fstat(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) sendmsg$unix(r0, &(0x7f0000000280)={&(0x7f0000000100)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000001c0)=[{&(0x7f0000000400)="58cc214ae92d251a2000080d134fd1d1aacc64ddbe733659a8752cd2a02f4db59d7bbb269f717880dc9b16bbd237267a68e7c1328562c2abe107f2b8b4a79e289f93dbf6184b8fc44899982d6263de7065acf3637d647e93640104b44d92fbae1825bd2bbf39633fe1e0b2a06f72c5787cddc989f3a47878f0ebfe7be85690cb687c427face6394186", 0x89}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYRES32=r4, @ANYRES32=r0, @ANYRES32, @ANYRES32=r1, @ANYBLOB="1c5f75562a6b96454e00000002000000", @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r5, @ANYBLOB='\x00\x00'], 0x70, 0x8000}, 0x8054) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@empty, @in=@multicast1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, {0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x2}, {{@in=@local}, 0x0, @in=@local}}, 0xe8) process_vm_readv(0x0, &(0x7f0000000240)=[{&(0x7f00000005c0)=""/160, 0xa0}], 0x1, &(0x7f0000000ac0)=[{&(0x7f0000000680)=""/121, 0x79}, {&(0x7f00000007c0)=""/92, 0x5c}, {&(0x7f0000000840)=""/69, 0x45}, {&(0x7f00000008c0)=""/223, 0xdf}, {&(0x7f00000004c0)}, {&(0x7f0000000700)=""/19, 0x13}, {&(0x7f00000009c0)=""/199, 0xc7}], 0x7, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1407.259098] bond65 (unregistering): Released all slaves [ 1407.387265] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:18 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3f000000) 06:08:18 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x3}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1407.522411] device bond65 entered promiscuous mode 06:08:18 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xfffffdef}], 0x1, 0x0) [ 1407.596992] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1407.608516] bond65: making interface veth395 the new active one [ 1407.649553] device veth395 entered promiscuous mode [ 1407.682648] bond65: Enslaving veth395 as an active interface with an up link [ 1407.747590] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1407.764136] audit: type=1804 audit(1590041299.035:2674): pid=12412 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/733/file0/file0" dev="sda1" ino=16261 res=1 06:08:19 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x4000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:19 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2={0xfc, 0x2, [], 0x8}, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@mcast1}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}}}, {{@in=@initdev}, 0x0, @in=@dev}}, &(0x7f00000000c0)=0xe8) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1407.964228] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1408.041479] audit: type=1804 audit(1590041299.315:2675): pid=12435 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/734/file0/file0" dev="loop3" ino=2 res=1 06:08:19 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x40000000) [ 1408.129038] device bond66 entered promiscuous mode 06:08:19 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x200, 0x0, 0x0, 0x10}, {}, {0x0, 0x0, 0x0, 0x6}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newsa={0x138, 0x10, 0x501, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, @in=@loopback}, {@in=@empty, 0x0, 0x6c}, @in=@empty, {}, {}, {}, 0x0, 0x0, 0xa, 0x4}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x1000000c8) splice(r0, 0x0, r2, 0x0, 0x80000010008, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x2, &(0x7f0000000140)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}, {&(0x7f0000000240)="853b7df6caebe71c24ab85e26555bbf0fe32769c57619c771642b7c53cb93d25d0d5d88fddc76dd56d71fd0f217523b2026b0b7ad5eb00eced81db0041d6aa5d48c26a46697437433e99e72d3b9a868740333e52b80ca8ac", 0x58, 0x8}], 0xc102, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1408.207904] bond66: making interface veth397 the new active one [ 1408.226425] device veth397 entered promiscuous mode [ 1408.268128] bond66: Enslaving veth397 as an active interface with an up link 06:08:19 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VT_OPENQRY(r2, 0x5600, &(0x7f0000000000)) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1408.313098] bond66 (unregistering): Releasing backup interface veth397 [ 1408.332297] device veth397 left promiscuous mode 06:08:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$ASHMEM_GET_SIZE(r3, 0x40186f40, 0x742508) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000140)={0x0}) ioctl$DRM_IOCTL_LOCK(r3, 0x4008642a, &(0x7f0000000180)={r4, 0x3f}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={r4, &(0x7f0000000000)=""/173}) [ 1408.406525] bond66 (unregistering): Released all slaves [ 1408.540049] ubi: mtd0 is already attached to ubi0 06:08:19 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20, 0xffffffe0}], 0x1, 0x0) 06:08:19 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x60000000) [ 1408.567421] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1408.628827] ubi: mtd0 is already attached to ubi0 [ 1408.690267] device bond66 entered promiscuous mode 06:08:20 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f0000000100)={0x40, 0x2, 0x4, 0x4000000, 0x6, {r2, r3/1000+10000}, {0x1, 0x8, 0x5c, 0xf7, 0x80, 0x40, "21a87c1e"}, 0xb4, 0x1, @planes=&(0x7f0000000040)={0x8f, 0x2, @mem_offset=0xca, 0x3}, 0x1, 0x0, r0}) readlinkat(r4, &(0x7f0000000080)='./file0\x00', &(0x7f00000002c0)=""/124, 0x7c) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1408.766562] bond66: making interface veth399 the new active one [ 1408.790234] device veth399 entered promiscuous mode [ 1408.819818] bond66: Enslaving veth399 as an active interface with an up link 06:08:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x5000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:20 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f00000013c0)=@delchain={0x1604, 0x65, 0x4, 0x70bd27, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x5, 0x3}, {0xffff, 0x10}, {0x1, 0xa}}, [@filter_kind_options=@f_u32={{0x8, 0x1, 'u32\x00'}, {0x158c, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x4}, @TCA_U32_DIVISOR={0x8, 0x4, 0xef}, @TCA_U32_MARK={0x10, 0xa, {0x3f, 0x5feb}}, @TCA_U32_ACT={0x11b0, 0x7, [@m_gact={0x154, 0xe, 0x0, 0x0, {{0x9, 0x1, 'gact\x00'}, {0x4c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x59, 0x3, 0x20000000, 0xeb, 0xd8d}}, @TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x40, 0x6, 0x5, 0xa1}}, @TCA_GACT_PARMS={0x18, 0x2, {0x3, 0x9, 0xffffffffffffffff, 0x9}}]}, {0xf8, 0x6, "ea04ba0cd96a246f6fd2a251314855806b645e15e20a598566b6669888d1289870c6aec9e3d07fb5018fd8241f71a5e1c23abb9f85fb62e491dbf9616efe8cee18ad7bf75f903a90956c7099b33e576d88cb8f58cc86675825d04cef08014dabf33b84cd8bdfb5b4cb07061a4a265e9494c2b847e1767979a64cc8311ada955c3d48bcfade176d8f689447a12c02119ac32cfb6fc3c0a4e27a03b2632da7c561ddb08c88eb172d94e16871d377633b40be799f630b18ad1778b75ed525a48ec704069b4022aba32657afcb13effb2136d9834ed6325edba182efde599975d200e3620636e617a044af88306f2b112c6269aed1a0"}}}, @m_skbmod={0x1058, 0x1b, 0x0, 0x0, {{0xb, 0x1, 'skbmod\x00'}, {0x44, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x2}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x2a9, 0x4, 0x9, 0x1b}, 0x5}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x9}]}, {0x1004, 0x6, "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"}}}]}, @TCA_U32_SEL={0x3a4, 0x5, {0x0, 0x65, 0x8, 0x80, 0x2, 0x7, 0x8, 0x6, [{0x7, 0x9, 0x80000000, 0xc8}, {0x2, 0x6, 0x53, 0x6}, {0x5, 0x81, 0x7fffffff, 0x6f7}, {0x200, 0x80000000, 0x100, 0x1e}, {0x1, 0x0, 0x2, 0x8}, {0x1, 0xe2b, 0x3, 0x9c08}, {0x3, 0x0, 0x400, 0x4}, {0x10001, 0x1, 0x800, 0x80000000}, {0x3, 0xfffffffd, 0x9, 0x9}, {0xffff0000, 0x5, 0x401, 0x9}, {0x80000000, 0xfffffffe, 0x1, 0x6}, {0x95d, 0x2e, 0x100, 0x2}, {0x9, 0x4000000, 0xf3, 0x8e1}, {0x3f, 0x9, 0x2, 0x100}, {0x6, 0x8, 0xa9, 0x7}, {0xc46, 0x8, 0xcc, 0x7}, {0x1c09, 0x2, 0x5, 0xaaf}, {0x7ff, 0x9, 0x814c, 0x80000001}, {0x10000, 0xf9, 0x5, 0x7}, {0x2, 0x1836, 0x41dd, 0x20}, {0x9473, 0x2, 0x460edcbe, 0x5}, {0x0, 0x80, 0xf4, 0x5}, {0x6, 0x1, 0x3, 0x6}, {0x40, 0x6, 0x9, 0x776a}, {0x62d39694, 0x5, 0xb9, 0x900000}, {0x5, 0x0, 0x8, 0x20}, {0x4, 0x9, 0x3ff, 0xb5d6}, {0xaf59, 0x56, 0xff, 0xc1fe}, {0x7, 0x101, 0x3, 0x5}, {0xffffffff, 0x3, 0xffffffff, 0x3}, {0x5, 0x401, 0x80, 0x7}, {0x2, 0x3, 0xd248}, {0x5, 0xbc5, 0x3800000}, {0x6, 0xff, 0x20, 0x100000}, {0x9, 0x9, 0xffffffff, 0xff}, {0x3, 0x20, 0x6, 0x7}, {0x4, 0x5, 0x5, 0x7}, {0x2e24d98a, 0x5fd, 0x5, 0x5}, {0xc71c, 0x0, 0x0, 0x1000}, {0xffff, 0x0, 0x8, 0xe3d}, {0x8001, 0x8, 0xffffffff, 0x1ff}, {0x3ff, 0x9, 0x8, 0x3}, {0x7, 0x2, 0x2, 0x5}, {0xa4a, 0x169ca967, 0xfff, 0x7}, {0x100, 0x0, 0x4c8d, 0x7}, {0x7f, 0x800, 0x800, 0x9}, {0x0, 0x2, 0x4, 0x66}, {0x0, 0x6ad, 0x9ff8, 0x3}, {0x6, 0xb4f, 0x0, 0x10001}, {0x3, 0x3, 0x5, 0x401}, {0xffff872a, 0x8, 0x10000, 0x1}, {0x0, 0x1b, 0x1745, 0x3f}, {0xfffffbff, 0x4, 0xfffffffd, 0x20}, {0x9, 0x7, 0x401, 0x7}, {0x6, 0x1000, 0x4}, {0x1c, 0xffffffff, 0xffffffff, 0x7}, {0xfffffff9, 0x8, 0x0, 0x7}]}}, @TCA_U32_INDEV={0x14, 0x8, 'lo\x00'}]}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x8}}, @filter_kind_options=@f_matchall={{0xd, 0x1, 'matchall\x00'}, {0xc, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x7}]}}, @TCA_RATE={0x6, 0x5, {0xff}}, @filter_kind_options=@f_flow={{0x9, 0x1, 'flow\x00'}, {0xc, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0x8, 0xe}}]}}, @TCA_CHAIN={0x8, 0xb, 0x7}]}, 0x1604}, 0x1, 0x0, 0x0, 0x80}, 0x890) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$TUNGETDEVNETNS(r2, 0x54e3, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) setsockopt$netlink_NETLINK_RX_RING(r4, 0x10e, 0x6, &(0x7f0000000000)={0x3f, 0x4, 0x401, 0x7b34}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1409.029828] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x40}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1409.158861] audit: type=1804 audit(1590041300.415:2676): pid=12614 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/735/file0/file0" dev="sda1" ino=16261 res=1 [ 1409.216812] device bond67 entered promiscuous mode [ 1409.265647] bond67: making interface veth401 the new active one [ 1409.289007] device veth401 entered promiscuous mode 06:08:20 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000400)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x4c, 0x13, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40040}, 0x1) getsockopt$bt_sco_SCO_CONNINFO(r0, 0x11, 0x2, &(0x7f00000000c0)=""/22, &(0x7f0000000100)=0x16) [ 1409.320208] bond67: Enslaving veth401 as an active interface with an up link [ 1409.376093] bond67 (unregistering): Releasing backup interface veth401 [ 1409.400349] device veth401 left promiscuous mode [ 1409.473952] bond67 (unregistering): Released all slaves [ 1409.493537] audit: type=1804 audit(1590041300.755:2677): pid=12653 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/736/file0/file0" dev="loop3" ino=2 res=1 06:08:20 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x2, 0x0) 06:08:20 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x8dffffff) 06:08:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x381000, 0x0) setsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, &(0x7f0000000080)=0x8000, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) times(&(0x7f0000000000)) 06:08:20 executing program 3: newfstatat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@private1={0xfc, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {0x0, 0x0, 0x0, 0x7fff}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz0\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc801}, 0x20008810) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) waitid(0x2, r2, &(0x7f0000000240), 0x1, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1409.635595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1409.716717] device bond67 entered promiscuous mode [ 1409.748382] bond67: making interface veth403 the new active one [ 1409.795413] device veth403 entered promiscuous mode [ 1409.823823] bond67: Enslaving veth403 as an active interface with an up link [ 1409.863963] BFS-fs: bfs_fill_super(): Inode 0x00000004 corrupted 06:08:21 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0xba, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0xffff}}, 0x0, 0x5, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_NMI(r2, 0xae9a) 06:08:21 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xd8ff0000) 06:08:21 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in=@dev={0xac, 0x14, 0x14, 0x1f}, @in=@multicast1}, {0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)={0xbc, 0x2, 0x7, 0x101, 0x0, 0x0, {0x1, 0x0, 0x3}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x5}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x6}]}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x6}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0xe296}, @NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x9}, @NFACCT_FILTER={0x3c, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7fff}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xdd}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x10001}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x80000000}, @NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xffff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xbed}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4000080}, 0x40) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) r4 = getpgrp(r3) setpgid(r2, r4) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @local}, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1410.024931] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1410.125953] device bond68 entered promiscuous mode [ 1410.137598] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted 06:08:21 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe8020000) [ 1410.213962] bond68: making interface veth405 the new active one [ 1410.230874] audit: type=1804 audit(1590041301.495:2678): pid=12803 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/738/file0/file0" dev="sda1" ino=15972 res=1 [ 1410.239676] device veth405 entered promiscuous mode 06:08:21 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0xf9, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x40, 0x0, 0x80000, 0xfffff800}, 0x0, 0x7, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r2) sendmmsg(r1, &(0x7f0000003140)=[{{&(0x7f0000000000)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x3, 0x2, 0x2, 0x0, {0xa, 0x4e24, 0x7, @remote}}}, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)="4344e3970ef4f343ac0515a5ff1714cabe93a1d9dfba8c368cf3863b0532add9e10c2a5dfb46b8ea8bd244b9e81f43ee12e4"}], 0x0, &(0x7f00000002c0)=[{0x0, 0x109, 0x400, "4af3803f18e20f31aee20d124f4f4819f619fafb777a5d6f634b292cae2f9f6e070cc7d5da494b55fca00807593a8435f8cf7c090e56499f2d4eab9a85e5a36f69c64be28b4b490e527e1342a022714161b7f7c8d718e74178c84b5ccf8073cc4ce940b7593acc1d9c6fafae996985e7087f9969e5eecb95245c88986bbd130db69a94767524fa36e161c503545bc049996f1939e0321702df7edd767462dd0602362fd4003535f94324226e56f8ccaf967daecd16f4cc2098fdb2c3c20f0aa745f7b6dc9fd59ad40a77b458b623593e17dce76536"}, {0x0, 0x6, 0x40, "9895e9a9bcff85dd06f62260fbd7005f3b6f477adffe398f62d8bfff8c9034fcbf19c28d9b4456d19d7457df066945c0ed763d8ad46706fcc39d43fe9a3f637de98b57bf694c1687abd79133b9769b637e34367c614df1ac1488b594a07be45ef26648cfe3bb4bb660475d1fd567137a0c151bd7c65e3f4b94"}, {0x0, 0x103, 0x7, "10ce00a4ceb6610556133978b7dc61ddd1eb91d245d76cba07587b079e50ab287dc00e7ab83e408a98aba0b64302c9b0cad4a97a"}, {0x0, 0x102, 0x395, "ee099e8b8cce0b45d05b609eb9a7dd63277a5760149618e04d0866e67457a8a7dc1af4aada297bc284140e07799efb593c1cbc7dbfd835b13fb1afecfab86d8268987f777992fd1f5636f0717e146d0827e11a353c1f24850ac3780411e4c19ecf8042efee894b3cf6d50787f514c2a5337cc8e3b015f6451249ae2858fb6a30ce816d1ca2c2b458c959d30557c846e4f5f53f9dc2"}]}}, {{&(0x7f0000000140)=@nfc={0x27, 0x0, 0x1, 0x6}, 0x0, &(0x7f0000000740)=[{&(0x7f0000000540)="3b334f4cb04b52bf45fc37abb107fb4c2dfee6f70c2259a64039f68c7bcdd81883ae6e3e63f0f7e20f35f68240847fb23c261c418d734edfc6f48c8d74d61a59b97ec6603cc863d9c66f3c1b0a7c8fe554fc14e2fbf8588f7fe592b47c9c0e16fb477c2f8266d6e99d8bb89ca74ade700018304417c60fc32f81653411e580de3d9672723e5132739438d691caa89cef141f5372fe1e42c32d9172884b1f0633989f9a6b78fd54f0075ffc5c3927a05215a33d20243f57ab751c52ba5af5b3dffab56aef1940a2b24b5b479d1afe3ed1"}, {&(0x7f0000000640)="08863f9708cb199e50608a10bd327d02bc77b4448c033203c2d26b9a407202e37bd24693e41105170dfbbe3508f459eca17c830f25fc3489b7af1f59275ed6"}, {&(0x7f0000000680)="4ebfaa9e4c657c6b9f7d38d70265edf3d0bf9da4db795a0a65582fd7ecfb"}, {&(0x7f00000006c0)="c88916c9ab91e5bfb8b52f9d740ded"}, {&(0x7f0000000700)='sfoq'}], 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="0000000000000000110000002000000050951792abbd1a5a532e90e9423df36a459299a84327ca4821fe38c7dc3fb1c5315383acbc41eca90389ef32c9cb87fd6dd36190a85cfda5edc9ceb84bfc05e4a1ac579f994435c886a939f605cbdb8b1091d87584385f35d7ba5dfbf2ce7eb63c1e948139d5708bc325b8a0cf4d5b86d7cf5e9af4691d75cf7056a5949d392af0b5fc854618cdba0bca4d3d5b437e409a168133f14741ab5a69f433507f084899e4fdb00f65b86a1cc88f110ca2f6a6c4da2e916a0c5a62f309903fa5341ccc92524088ce63b5efb096"]}}, {{&(0x7f00000008c0)=@l2tp6={0xa, 0x0, 0x1, @loopback, 0xad8, 0x2}, 0x0, &(0x7f0000000f40)=[{&(0x7f0000000940)="3933a3978b9444539fa4fcf61acfb05038789678e9eb5d685b55bd2f4689579063bfaaa412677688362a7b3380e6126ab12cf29508ac11f51bd712353306b6d336e8e35d2d3776d8cef8be58147243edbb4927235de1b68e56582c495be30965b3c649cfcbc5c610da7ceb775629f4aeb0407d45b62c9fcdee69ebed7462a8da63cf96e681365a91fd04f2f1f8369d21ae8af2f94a0eb0cd68fd554b613bfe4184b2597e63"}, {&(0x7f0000000a00)="09465f2c94156d438fdb1edb068e7e88e14fa1a8b6a21bd4a395ac85ba083d08badad4bcd62384c4eb9dac10b4f46f331d57b6aa90248f7d76e8b40c9ad98020d72fcf8d01f69eb681cd656b61fb874e2296a6f93008b8faa2a0a1f748b481b66dd2d7df305fec8cad2e8d8f38071753799cd886aecaef0a78964e0e1e07391d12f9a123acb228d5c93ac10f9106373525db05f58d8a4b6b9a8818ed1acebbd97f31a0bdc619c56f886686576b1ad973dc425f2dc900d98050e3e66135747dc64f4ef40499f1fb9c"}, {&(0x7f0000000b00)="a422fa55b053186f56bce8c29df1d70ac567b46567aa2e1bb01fc8e65496a5bb40e90b258d5bc98bef5ecb982dca0a8897e7748b428a743d2fd93709708e3f9b224c1bff17ceeee70b8334afb1795762c814fc944ae816275c05b195ea525ad2cb193b421278469dfa7477f2d22072747b6f4fe9d8519227270036b92db6a1d86908201f99ee913b99da3e52e234c1687cec95ecce90cef00fed64583803ea3985f5f8c4e66ed7eea06f426c8f8253f368bec97224aedb8fe217ed6f23264528a14fa7d59dd201aa38375175c3be32e045e29a9ccaa91b493b42edec7909ae55fa"}, {&(0x7f0000000c00)="7cac485505ec1dbeffa22bfd11ecb06e7917d93879fd7a5011f8e75ccf4c92ddd91b0d7e3b8df1815f5bba15f30b99828bdacf4bef3ccf5374c9e36c137179aa803fbc644fb7d59b1c3c7a03e87760e3f4851921a062"}, {&(0x7f0000000c80)="77f12de6799d03e19ab7be9813e39cbd36d70e66e7132cda93b9653e3478e25ff1f69d18f4b4ca82b4d3049bbead8bf9b9e940530174cc40166b3795311298a05c126cbf891f1c52d5a7de8962fe773ddf0f20"}, {&(0x7f0000000d00)="e829df4dbdcfaf4882e1bd539c6e0a6b1ece1d3176a7b20838fccdaf70f38e32017ec0"}, {&(0x7f0000000d40)="c3f306582c2e64a75d2dfd8f7c65851f06a66ae60cdb51c27ad0c8adcda28fac2ed608f690249d424069e8bf614f147a43fae78f19aaa59dafa9f3c34f83278565d9a96c2e30bb35180403e715ef5fe644ec84c9a847f57ad786aff0d3bd312bedb5c74b991dcaa6fa43cea766e0c4d87a883aedfde2d187e22d5329b2e0792b687d442482c2d16e0351d4bf36e546eaa03c2209375e52625af76353308fbb578a0e7fad2e177b31603cc380f203102227f715d437fcbb04cc5a1b74b1cf842464a40222"}, {&(0x7f00000013c0)="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"}, {&(0x7f0000000e40)="e1cfd9ebbbf696e49db93bd0f2ce0b560275ad8bbf9b46ad9762599e610304476065dc6e49310a16ff114db6482a8b16fb95e0069ee1fe55b4e204bd1b8188eb70e5ad51511da804712a61997e44d6a6fdc66e9cc2a19b5400c1169644bcfeb9be9c4eda9243f1876032bee535957d04a4aab27234b146683d84056e616b46efda00969d833a13bfd931ea03cdb96e8a44f8072c0d1bfa4336136be9e19fb04517e7480531f54ef450b38377ba7fff0041f28c6925a1c5be3cd3edb66640d335296347f81ed90f4b2ad0ce441662494a11908f9d2df55d351f9b9bba3752a18a98c07d06b8dd7c9760188380c315367d3576266ba2ae9a2ae8bcc8704d050b"}], 0x0, &(0x7f00000023c0)=[{0x0, 0x10b, 0x1, "61ed08dbe6603a9195350626e9a6ada7dacf4702347999f157e3d8f5c67dbaa9460c5a030b4584a7015a8d9026e6f89fa98404dca7583eef9b621cbd55afb1e7909c874f04ba4b17c1d1390dbb647b456a20eca41c4486d878149a21b1c07e8448a94da50f42c24d7460ebd71961df03575327b8359df8fe61c5041f0fdc3683163abff92aff23b4211261bab962"}, {0x0, 0x110, 0x5, "3d9cc9e482b7c18138ad9743a816eaa9e43f091cf4f4811287a9273a8f87c6e259b5913b40a1f9a56fc52e70d5cb27a7cccdbb2291fb796e36a19baae63bdcad057912c8e6ce0b8a7dce89d1be0c6c07a3ed2c679513c163e35b10cf7a6ecf20bab76522a0a35a44c5af0416d85df0"}, {0x0, 0x18, 0x7, "39d2ee9e41621ae125ba9a277e02fc4043d3a3bc877e1f295185822cf2e03a9fb14f8b75e5603665385b8f31cfe8a5c880b137f365368ca89b681fdda6070e58b5d7c7f7346e137676ef1ac9cf4673bec131840b5fe0874cf0ae0bebb00c7e7e76eae86617282de36a234e15a496df5f1ab801149952049f2630dfd85074d2c916d3e51afc046bfe1363f7363fe410d8f1caa5994d063e376756e0f6f07cecd5c66a4eb2d9b6a804adcce542fafa949f1dcfc0450f5a10b5b5"}, {0x0, 0x118, 0x0, "4628a42cdfa3ee68eac8ffbc48dc51b7ec292d14a1b806119efdf1e27d1b188a7ce2e35c52c107d8f5c27f75a1f58e5ac18499e42d7920560fbc97e4046930874035f9b927021e49e75581ee586e8a5978b5bb6cbe7a172e36e078d8a4ec263d4b9455a686fba998948ed4c9990b54e63266421e62972d4b76c6b23de0971882c724948482c9596f3b3d147f9f7d749e0f3d5a78ab68b4bb26294cb388af3fb5a5ede250fcf39093b2670b0e9dd1e006c0ac32c0117b8c043ff9fb1c6f67b3fb2aee8cee2aea2bef12450bd6d237615f672457a330a77e0eb7f9abfaa28a241d95b08bdd7698a34465dcd7ade0cb2eb5310acfbde269dd405bc098bf2dab"}, {0x0, 0x100, 0x7, "8bbd439946f6d9a326b48dd6f482c55da58792e43fff9ed3f09ac171bcb7a3b0f6"}, {0x0, 0x107, 0x7, "1eecd987e932aa54bab5"}, {0x0, 0x0, 0xfffffff8, "a0c722dc77ba75ffe29ebde2d0a49f63dfcb4e60674ad4277914d7463e8d2acae71fd1240de06db7ae8920a7a42421f5cbca524bf4f66a3c6698abe16a58f6c08810d30fa04a9f22c2eb33353a06132e82b993f476e76d3ebfd7b9f0631512d3e7b6b8666c20574536bed4cf3e67d329e570cd51185a9a13b6413c26e48d50434a74a9087aac5363cde988d28af50e089032fd6afbe29eca6bcf72dd9a47befa76c48176badd7eaeea04a5e2a039e86249b0c3e353c29547e256e31574f20bf80d741fbbdb50c1414549ccc5bc008eb85908f354d4167f60f3dd0f24c7f1cd2ac2aa6e7d785c8ad84da41128021852b2a8209ccca5715c894a"}, {0x0, 0x118, 0x8, "d2c8237bfa5249447f3cbb7b26634ca901690b0ef1fe28c7620faf488ecbc9944e1db02626de663e055ae04631dc861cc3068afb85422a6c0404f6e528cec08cd2c196ebf897271d45c698d1161698cc6af3a4b3cfa903202dee620931786a0f14e3cf56f897378c745c22902a011e97313e100c7d8282522976c4627c"}, {0x0, 0x108, 0x1, "a77f4446247d8ec03b5b455a446ce6940d1d570cbe6777cc6f12e99b6012697a0dcd5546af72b59deece2a438cbd638ff187329d2d79f6fb17cef2f093764da30215d5866d97fd4d6d1bd84bb8743d6f3858b4e7eabaa76b4efe2ba64de0c05a0167c8f8984c3979a319781be7aef6e3549d0579b1f5f70dfc7479853c8b3f7c5ea3d4b640e06e2f431591f5cf72c378df142f1cc30f47ee09ed9baf02e89525dc543803320deb715127335cb0c5f9cf0100761797e9e1d36424d1ddfc98b154507722f0d06d12006be08c77d8d92b60aecf4f809272de3874432568a4966e67e6f0d18ec5e8fdc6ca"}, {0x0, 0x10a, 0x4, "87ec"}]}}, {{&(0x7f0000001000)=@in={0x2, 0x4e20, @local}, 0x0, &(0x7f0000001200)=[{&(0x7f0000001080)="ba2e4714c5f39884efcc88a5cb12d73b07ac8d61cfdba6e47d065719c948236a3b40210ac0e6fa57d91fe9226a70e3681997296e035bee8189c27b375f30ee05c612e9c34c30298d044ab78ac9e7a325cab80ca655e7c72caf855dc542c34dc2ef7beca5d64ae0ca71b8af33379cae86f20f10bbf05ef6f6c9d1b39cc5f5d7eedbfaa6baf150360fcd1ee12291d396dfae4e548eeb1e6652"}, {&(0x7f0000001140)="8f3e9b15bed41d173a43dd041a10f5c6a44aa445062ef4b759efc983bd35fe690bf70318c9ca3f097e9f09952e6646ec856b234d251fa4ef8fd3340408722b2370e0ea8bcaa6f5be883ade4f335aa2be35caf5a0191c91b29115e82786ded5374a73d9ab48b9c9fe6696492e0d310ae473a82eed33c188eed3e68789837d86f4a5ea91aaa9511d4459ccc27f5ab327097847b8aa2d9cb3aa301fa3b5514f71567697c79373921bb5c09f426cfbfe0b45ce60d5f45182888ce86567"}], 0x0, &(0x7f0000001240)=[{0x0, 0x6, 0x8, "47029a420c99951a6be29acf0c2a67475cb8bfe540dcda33bc008de25df8a8acff891aa182b42c61a524f8920467d1f5bd89e341ca851ac2e43866590377ab9bc2aac4691ec77484f4e8f28200787b8966386f8451fad050c80b129cde52686e5a7267e46b6c2ce1bea9fd7cc9bfc14d06f2198ed2b9a5c3"}, {0x0, 0x6, 0x0, "d37a35a302840f064ed9eee4c875d58e511cf0c89b8a02f9d227080203b84844d84bd8a5384beaf04332"}]}}, {{&(0x7f0000002a00)=@l2tp={0x2, 0x0, @local, 0x4}, 0x0, &(0x7f0000002c00)=[{&(0x7f0000002a80)="895ab473fe625da8e7a2753a123d1c3056b99df12b23f0218ef06818477015997975a77e5bac215cdfd441994e80ebdceef764b0ee34b506af6fc5ae6eaf80ca9d52dcfeebd15d04a2ff71e149357430ba4822a97ec013f0afe3b406040a4c4c720842b217be5fc6fc9d2de3f5fcf42116af5a789b2a452f63c1d512fe5917519542eeb27045143ca58ccbdc8c23bb8352f1aa72f118a42539c7b736b5717b64215fb01939f50aa9038764b9988fed63235eb8695dae3d20c8a7b380ec58c3657b3e5629285bf19bc8541ebe1e88dc5b1cbf51"}, {&(0x7f0000002b80)="e736c5e19d9acdda6cf12827a579f09e47e2941240cf0928c7df61f1cd3c067ad6b4e39c3c63b4ba823c193c6b20958d719368ca5838f03e6290635c8eb87b708d8018c78d0004b933dbb89098ec2586c6af5758e509326401c72a8f5dcf053a81"}], 0x0, &(0x7f0000002c40)=ANY=[@ANYBLOB="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"]}}, {{&(0x7f0000002f00)=@sco={0x1f, @none}, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f80)="94053c8398afbbbc3f01f7666420813fe0bba6e2fb801f4f85cbda45827818b3e5dcf5b5b7ff818d342b946828696ad96b51739ed5e7ef13fb753457724ea43521610d4d2ac73a85595cff6b92db3caafbfc3031292acc9769fd437413beee1b70af7acf3ef7f0df5619e640d2ebc5b02831d6747241331cceabc6685fc098d973a24d4ac851c43678825e878265d58393c977b0dfd12864d6fd725a6409c70bd46fde11976aee87e2c8df166eaa03a428b2a13251df"}], 0x0, &(0x7f0000003080)=[{0x0, 0x105, 0x3, "6d9b66534d105ca1d79c245e707673754b968a05d894806054e8d437721d3cfba7455a103ae7ba397a83c54c2c461237be57f6910abbb6632372a04187f4cdee7fa0b56094fc988df39580f86158da6c1d7ec24fa1b60374fddf496b0035f7b53c849b710496935cbf749bd84f30d3dbff62497bdf2f794efafab795b6a46edeaaf290c4bcee8f5d3f9b7e01f37ede8622d25b0978e6f45c9d0b2e81fca60c"}]}}], 0x2ec, 0x0) [ 1410.265950] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1410.279521] bond68: Enslaving veth405 as an active interface with an up link [ 1410.304516] bond68 (unregistering): Releasing backup interface veth405 [ 1410.318558] device veth405 left promiscuous mode [ 1410.358099] bond68 (unregistering): Released all slaves 06:08:21 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x3, 0x0) 06:08:21 executing program 3: syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = openat$random(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x200, 0x0) ioctl$FIONCLEX(r1, 0x5450) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) creat(&(0x7f0000000440)='./file0\x00', 0x1) r2 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x3ff, 0x200201) sendmsg$can_bcm(r2, &(0x7f0000000400)={&(0x7f0000000140), 0x10, &(0x7f00000001c0)={&(0x7f0000000240)={0x5, 0xc51, 0x0, {0x0, 0x2710}, {}, {0x2, 0x0, 0x1}, 0x1, @can={{0x0, 0x0, 0x1, 0x1}, 0x8, 0x2, 0x0, 0x0, "b9769fb5bc3f7aa4"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x6040074) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000340)=0x0) waitid(0x2, r5, &(0x7f0000000380), 0x1, &(0x7f0000000540)) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r7 = dup(r6) ioctl$PERF_EVENT_IOC_ENABLE(r7, 0x8912, 0x400200) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x28, 0x0, 0x20, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x48c0}, 0x24040880) ioctl$SNDRV_SEQ_IOCTL_RUNNING_MODE(r7, 0xc0105303, &(0x7f0000000300)={0x30}) 06:08:21 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe8030000) [ 1410.456279] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1410.589640] device bond68 entered promiscuous mode 06:08:21 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendto$rxrpc(r0, &(0x7f00000002c0)="868632d5fbb504e4d521133b156302b26aa55df5b7fcf15bc0f71f03e873049a26f9aea0025dbf08091c196f8bd55d4d1171acd3d85872b2804fb05396d8b04b936a1d318e496cc472b3da5217ad4d9534cd3565658f600922315f084348372cc9d7febb34ac9bbbdaccfa468a1cd1054367fab6e14822e06192b239554b795b3ab6b51b76f55ef7db447d709a5d306e9dbcb1ade663d9295d28a88b6b38bc32ed079a08ccb9207a2027e2ced246be1fba64b4830685f803d4d618244837686c1b803232868a91c902408593164916892a500f1f260f114c062cd666370a43bd319d6fee372d97e705ee98eb15cb705f43200a56e8253ccb6a508402cb7f2dd4d7028a9e2ec881aadaeab03217c8bba909144643fd00793ab31c8eac583fdb357b870e60e084a87003f5c35e39f543106f33213961ada42cd9cd974a1ef6cb77347ad17fda92d971661b957a3066b409e890d46644e92b4b6c24cae524d6207dee212f91d72cf9449dacf1edd4afe9fda31a5756a8473e5c5fe51ae57afcf675c66195963f51bebcca58120a4719b61fd50d9c3ce408148f775d67934860581277853fe2819d57cbf4b4bf822e10c3a51cf921dbac7f4b608891242d821c7b0b8bc9a69f1877fb7da637f219773226bba7ff5e42f75e7705023d17e618de4b9e51272d3753c25a953d4e6c6d44cc48a59267d66d4010538af5763def863303c1777e8f5645ce231b9e604c2aeeb3939fe5e01e1e8d6b763e5717c70281b9206429e57bd735c62471b65ec238da261f4c37c70e40dfe8144e27505b7ac330f1e445737ef2fc035e59ee93e41105370c5a25b85e019a19f688573a5c06173bf33a8f1a65cf1c48ce006c7f60df4926888a224c17e68ec987ba3bbdafda60d84a10f752bb5ab4685047797855a6bbd74a07e772346eefb1043f0c7baba9e2f8644a8af23e2a8650cc864252af7e4195f68de0aceaa572e2a67afc53bc02cb663c8c7c1ab55587473a252c82d7ae4a5321be73858087e73b575c1058714865f18d61715c1ad5385656524a80adb143484ce85b03d5139a2decb8bde5d9d7a500fe35ac2c6fa326618a73b1d7440f354452bd262b0296db3ed2f7f1b78495615720af1f1812a4a81e35797fdcaade4b98424ab43905a2e747122b9e8dc5fa421ee351e9a7b5466d76cf193dbf3c71463490340550c9671739cfc9a97395b091330be35caf578dca1bc3d073076d73ced2e5fc4fd65e62d09583811dfb2cb81f255b041231adf76b36398aaffe1be8d0a4e9b943188c1c0858942a1511c3749c874f7f82b8f20f00c9236a5aa1f5dc1096014dda5e588314b19b39aa0c38d4556112e4ae0f3ec1d26b264427ee4090b2b563e0a6d4715d9dc5a49a0b476852ab40c9e81f091cbfd9a6f822b52263b9611c11636e0d99ffdd4de5ceb0b114f6129c5ac36d9ae556b0f2f8e06c7d6807e769a61b2ecd071c2371c11205d604c72bb04fde86cccb1a0ed7bc782fe4d0fcc78812c8ae7d5b0903202437b696c2c2bc96369471e170586442dd50790afa09c68bc376b9c014f556c100c4907aafc2a549f607b294a70f363b556d29f69e836324d2f1c47bcde5f9415a1be73b0aee2def360fe2caad9429f50739e0df3406df3f7193cb21718ce07f8561db0b79df19c1882f2cc20a892066b183bdfa23c9aba8e17437e1ba8c28f6527aa5b6a70c1703d19168402e74cce2b208b90bec81faddec3531c5f6cc8a59266101d7c9a169fcc55a33612e26c5ed0d1e1361ed2329f548b05a54770c71dde5049e61cc45b1c6669b55ad381f4faad328216030558b09293a7058405738576df433297f346d24f52236e4238f635e97ee95dd854f1b4d6fc3640754b2566633ccd1a02d36ed55e98324c95394605a726fb86448060b097f929746f50b8550fa9a3552e1a00ac5c16fa229643a57e134b29bd589e407f8061c33b42b824e08324725ae8bffda84d3f209d72075032ebad9f7911955877039ea48e76c95dc3c20a5c6a5d97724c3915b3a8068df02af99c221177dbf14a9f58e7ff62922c2ef305bf752aab4fdb68c3e238f6e85a7ecc7c582122a76dffd002067c7a3ff0a5063cf04e5c30ca656e2fe67debd6103c4e4d55f1dbf994552b50973bf7e367e5a17232fd6d589ab7874ca694d6477d5954840a6933ddcdcb21341faae314cd1ebe37e35593485b69eeed84aaf1912c35e9c94e374ba32e9d1049cf6a841c15508f8a335fe2f318fe4368fcc80c62d584f88e8ef34598f52ffb85891bec831e145292321cc5a5ba265ccec2c7d9da5fe7d3067189e5ac809b0e0f03daa4587ac19f33a89a09cb59457d68de9fecf395a0a81622bf6aa5388ed4c827065e1239528667170b954d5ecbe04abccb840d1d7b98c9aafc1afa002e7394a1b4f76bea00374293cd0da22080ab1a82326065f5d175d5a5195d50ed9cfa850baf07467c70107ae008c015865150ce2eb155bcdf4128944af38eca34c18e9ad20d96a9de08825bfe1d8fdd95bce82e2cb7d489f9d30ded41d52a080328decacab24d98d6e270fedf74ea054e0ae447c812923fe2e83f49c8921db2e63a2d41f9e407ca46ce9c09e6bad16232eae2b37fe25ce07af63260b0422225926d79591e4438c380a3e532649bb7a0b55b89b0e06cadd18dbb46d4a835222e564cca03d446dd5d6fd6b72649197d2c8ecffd317d4603aa9e5440889170eefb803041a3a943db1269f8dd75303592c98a97271714cc3f9417e08971ed5b8bf5fde6b509bf2c1c4c521d254c2ed9161b966c357dc73808ace9fd5b510fec6b4e11a0e27e55d4ea95467905f8308dc95b092acc2b228da65789682daff4019e288c89f0054ca58aa380915b750e989af1166dd73242e88b86d4d7a4b47d75e981183505d01d8f4a00a8ecd8bd527c7069d37bfcb103c1aa9817a36ed920022c57f51e0ceac4325282d4e9253f8824d2e818545a13bfe5ca17f6950bf20bb2b475c76e4b79ff67d5b4d62c68655e2d9accdd19ba2ffde48bb62cd527ffaba869857be69fa96bd3817af04bf33a2a3b7d7d88353a5eaec5e8098359aff56d94bcabb99f19bcabf16228fb1dee83e87463f7f9d3993e6bb5b6a0a752876c7885de87f9862ca022f14f4da86a72bb8ea2f1462c4ab587d189067c243523a6c6047596b6a46b39486b80836e7930f3fb19b7c4938f19c10e42d87035fe9f38a79b32f1d9ede2f321709fefba0fcf34bb894efce47cd4bcc0d0a2982f195af6712982ab2f99f288e73a5475970c2a38717b180a01c35f98028de54fe22ec28dc6bfdd6df6ddf108500b182718382e4ee1e027a2b955ec3bac19ff21d3fd8d602306ef07b996ff3c21568fa82088f10a1f9b905a22bf9c6821d3f1cf87d409ba3a8835adf5abe484d23b8d52a8add4076485bdb780502e57cbfe0364632f85cbcc47ee63a7b5772432a6903ec82f6386b03ef6ef86ac5289aef8e1dd1f2d8e9ed60aaa0665732ca772a48947549c94fc08302683e373370d1cd0d2dd08ff4f1af0a0d14792e65e99deaed66642db5b7cb04320f466a3d5e88f4c062ed7bef1d274da1537f4d522b304e95532791363cf6e4a64cd98f0f4f7bf6114a7c04381ac80378f3ce3a97683d8dd1cf4b5445589df973529076507b9b0ffd73e72f26d2a24ecc939baf431a56ced233bb8e816f30b900ae688c2f913860662918f35d812507018b43ca95b28d126cd7fc32f729c08ce08056590d93224bcdd647fc53d6e7ff91ca88f288fa9f77bd4aabc60916c26bae20919e26cf8468cd395060776f40990eda2d59d4ae29a1e80e84d986f0de0af3006b801d93709fcce86d3d4216f4964a4be5dd22641f174bdb8098782eccc70d777201f931a8c0e5aa61c7c8c30a461b5a26a732c92d09e4bc318fc2969566e2e598ccd34fd6fc6b869cff2d0c9116ceeea93706071e9e175014cc642da56e8c20f0b8e139e78cb8a0c94f07fdc453cc25e43b5a127f90ebebd02330f105f718dbb879921481cdf494139e8eb1b8e552debcd72ae4025417345b7a3e65833eca15cb8c4b54ff8356d592a5820ce9e4e91e4c47bb62a9415e61ca14e6a93ab9f7cfd2101661bf973ceec891e25f3b59b69279f6819c07c792274609a0dbee998031e6beeb08237ecbbb6d98eee682c0418e8d70aeaccf35ea3ebcd245668e4314396f8b1c8e70c894054e5caf88214dfb6e9ada74dfa8d99a4ef1fc4de30fad9bed76dea4a5815f344359c0331cd64f21ecd2314a475560960f353f073f0c6522945f298dae890d3f2aef29eb7f5b144d1d61f03f177a3fff58099237980f8085c6586e60a0f7acbce843ecb6518e4f0ef377238358632f202de9929fc780c7bc0a5d17ab2bdf8cbdbc7bc415dffc120c910a1e622fff6e3459c2c8565ab5eaf59949fa35b2d9c3b605b04b9865b224914a631eb87ca394d77d66c9e178f18f31c2ad5b973659ba8bda66022faeadb2adc509697953ef916787430ee98058afab4608c9711dab053b79566ddc422aba2c1ce12ad942d6f5b1874aee071fa0826eaa1abd02e70c355f02311a536a6d8fce5704053da9a0dda090384585701502cd51c8a76e962a76afe14a45d235e3a07824e0ffd9431c3fa9e00a62d7f6878570b28bf900cfaf229ae670adaf48d81a4050ee33d7b74f711cc303751aca8a4f15b89e7e84afb746286c954ba82c2f5acc6ba37bd280b842873c80bc1b82199cc780f570542c1949d982f5b156a90e9c21e3b28fe1d935c348ef4b3e5bab46def8a45ede6d392b6af5d158efd4e77083d99ed14f025350f014cbd114793dd43f45820244589f085b35a0cd6ec6a6ccbdb515fd076d16c745a65cfe96f335a5c58e663e9c7dfa21e3257a26d2bfa265ab8e681d32ae7471c23997f495d26080f4d0f8a92d7fd8c62dcb442cccfbf10489a0baf2d620ac286a97291717c38d24655fa0681a66fd41dccc68221ba5c1c9cb9547474943755ebd9ef6ebea21c1ce63d25ee2cc07fdc2e8fa1678f84959b7c913fe233aa5cf04996156b8b5133d8bec53b0db0ac1487fe4776a20b3fe3c1785beb093125e2d8951941969e32fb8d9ca484349482054dfed86e1fdb4d8f1d23a8999b13fb7aa8caf590fc1fdf1620e3131800c403d6ae774ee371836bdb7c093fc5a959df5e8782bc2fe639088e468f54a310c31f0f9000cd857b78766088de233bca5869dbbce29891e326c35476d88c8122da9334ca2840121211475ef48b2579885a1cb7c69563de8437d2c758d5a44d76252e5873728c7e9e28dfb8584123e331761a9226d9daa310d0e44ec81354c4e15890d7a67b445fd2b46c67040d22a6809e26e568fa8640f760b9cfd7075129d10b966ef7a9937f463c82d4b7bfa80b489bb0edef2736f44058018e9dc25732ebb2621b205649b92710b1f81cc5a4458b519b462251f74b0b0a623133ee5d7865702a889a33833de5f3c18125851ef2842238b3d9389cd9044d4ab607742ed1592b10e66cc2795c9bc7046c97d4e811fb4e4f78ddc0338f1ac33004806d54b9ad8194dad2ea09857490cbcb73f3461eeacdfb2a83c88495913d20a7fa45462282dfab2b605a8ab7fd0881544e48e6b7ba10e836810eb734c607dc0bbcd4057b676f3daf7e75e2795d818649df966f8152665a636784bf398fe5ccacfc5ca9541786f01b27ea23d789fd4b411aa364a4a5583a0d4bf0d1144941e7c6c36ce39690587dc8f39b5238be236ae01a9fedd2fd0bf2ed8b1b4312b893528ad404bf329e10894d40b", 0x1000, 0x20000014, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) getsockopt$netrom_NETROM_N2(0xffffffffffffffff, 0x103, 0x3, &(0x7f0000000000)=0x1, &(0x7f0000000040)=0x4) socket$inet(0x2, 0x4, 0xff) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@remote, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0xfffffffe}, {{@in=@empty, 0x4d4, 0x33}, 0x0, @in=@broadcast, 0x0, 0x4, 0x0, 0x6, 0x0, 0x8}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0x80004, &(0x7f00000004c0)=0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r4 = socket(0x11, 0x800000003, 0x8) bind(r4, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000140)={r5, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000014c0)={r5, 0x9a, "691edd8d9be6d0f7bc44230d7b5529138f57e3ebabdbb4e7ca7f79134c7e5f2dab6b543ae23141dbe34ec64374472f842e51950fd769e32d2f70be0bceed38c775d36a1b9c1569a9c572c947ee96e7b77be8e29d5dc389e794af89dc632c3a286ca63b1f32d3560f46030bd148b24f4ebb162195a521dd89951492fe076e171f554d04754caa9a4978873f8840705278851a6b1373296d9a8c85"}, &(0x7f0000000180)=0xa2) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x28, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0d6300000963104001000000deff004001000000000900000000000000e400"/40], 0xf1, 0x0, &(0x7f00000013c0)="dd469e2776966688b7a2fe68593abbd26f26f576d5bd792777278b93906f1625e7d5dc45d25693d6bc94bb852f36e33e610234a395878362d52eee418cbbce411b865d5a1e7d537198d485a01255456b0af53ebfdab9e6e4efcc3ac6ab07b60a8eebebfecc350038357523b61b8e3d7c735d889a9d1725b4d4dd362fe910b4b0236819d265a68579344cd4424213edc518b739e47fb65af24ace3469c6be0651910ba77173b793b41be38de6ece2f5efe8f5eb288ca7ac54dcd25d96201be1f1a90b0d0e1900c9120a7ed77f53145a55b0556b1521083735e68a88305e6d9ae31d91a0ae57f513b2699684cf812eb42401"}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1410.647098] bond68: making interface veth407 the new active one [ 1410.676573] device veth407 entered promiscuous mode [ 1410.690359] bond68: Enslaving veth407 as an active interface with an up link 06:08:22 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x7000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xeffdffff) 06:08:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_SET_FILTER(r1, 0x40082406, &(0x7f0000000000)='\x00') bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendmsg$nl_xfrm(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=@newspdinfo={0x14, 0x24, 0x100, 0x70bd29, 0x25dfdbfe, 0x5}, 0x14}, 0x1, 0x0, 0x0, 0x240c4884}, 0x40000) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$EVIOCGSW(r5, 0x8040451b, &(0x7f0000000300)=""/128) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1410.729315] BFS-fs: bfs_fill_super(): Inode 0x00000005 corrupted 06:08:22 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000100)={0x7c4e1879, 0x3b7, 0x6, 0x7fffffff, 0x7f, 0x99b8, 0x8}) [ 1410.804314] audit: type=1804 audit(1590041302.065:2679): pid=12887 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/739/file0/file0" dev="sda1" ino=16283 res=1 [ 1410.883927] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1410.990388] device bond69 entered promiscuous mode 06:08:22 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf4010000) 06:08:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x100, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) mq_notify(r1, &(0x7f0000000000)={0x0, 0x36, 0x0, @tid=r2}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1411.081903] bond69: making interface veth409 the new active one [ 1411.109191] device veth409 entered promiscuous mode [ 1411.154689] bond69: Enslaving veth409 as an active interface with an up link [ 1411.204490] bond69 (unregistering): Releasing backup interface veth409 [ 1411.228863] device veth409 left promiscuous mode [ 1411.274092] audit: type=1804 audit(1590041302.535:2680): pid=12993 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/741/file0/file0" dev="loop3" ino=2 res=1 [ 1411.301269] bond69 (unregistering): Released all slaves 06:08:22 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) fcntl$notify(r1, 0x402, 0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:22 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$VIDIOC_DQBUF(r2, 0xc0585611, &(0x7f0000000000)={0x7, 0xb, 0x4, 0x200000, 0x401, {}, {0x5, 0x1, 0x3, 0x1, 0xff, 0x8d, "3ce87245"}, 0x20, 0x2, @fd=r3, 0x10002, 0x0, r0}) ioctl$ASHMEM_GET_PIN_STATUS(r4, 0x7709, 0x0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:22 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x5, 0x0) 06:08:22 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf5ffffff) 06:08:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$IOC_PR_PREEMPT(r4, 0x401870cb, &(0x7f0000000040)={0x6, 0x100000000, 0x1, 0x59af}) io_submit(r2, 0x0, &(0x7f0000000540)) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f0000000000)=0x9, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1411.481696] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1411.603373] audit: type=1804 audit(1590041302.866:2681): pid=13076 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/742/file0/file0" dev="loop3" ino=2 res=1 [ 1411.639045] device bond69 entered promiscuous mode [ 1411.713164] bond69: making interface veth411 the new active one [ 1411.726272] device veth411 entered promiscuous mode [ 1411.735245] bond69: Enslaving veth411 as an active interface with an up link 06:08:23 executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={@mcast1, 0x5f, r6}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r7 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r7) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:23 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x8000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0xa0000, 0x0) ioctl$sock_inet6_udp_SIOCINQ(r0, 0x541b, &(0x7f0000000080)) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_S_SELECTION(r2, 0xc040565f, &(0x7f0000000000)={0xc, 0x0, 0x4, {0x1, 0xfff, 0x10001, 0x4}}) [ 1411.868153] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:08:23 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc000000) 06:08:23 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x2, 0x0, 0x6}}, 0xe8) syz_open_dev$vivid(&(0x7f0000000000)='/dev/video#\x00', 0x3, 0x2) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = gettid() ptrace(0x4206, r2) tkill(r2, 0x800000009) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) tgkill(r2, r3, 0x33) 06:08:23 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfe800000) 06:08:23 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x8, 0x0) [ 1412.386787] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x20100, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r1, 0xc05c5340, &(0x7f0000000040)={0xfffffffc, 0xc4, 0x38, {0x1, 0x4}, 0xffffffff, 0x10001}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1412.504470] audit: type=1804 audit(1590041303.766:2682): pid=13171 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/743/file0" dev="sda1" ino=16281 res=1 [ 1412.515253] device bond70 entered promiscuous mode 06:08:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfec00000) [ 1412.709591] bond70: making interface veth413 the new active one [ 1412.749930] device veth413 entered promiscuous mode [ 1412.783591] bond70: Enslaving veth413 as an active interface with an up link 06:08:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xff000000) [ 1412.852421] bond70 (unregistering): Releasing backup interface veth413 [ 1412.859129] device veth413 left promiscuous mode [ 1412.913494] bond70 (unregistering): Released all slaves 06:08:24 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xb) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x3, 0x4, 0x4, 0x81, 0x8, 0xc5, 0x6, 0x400, r3}, &(0x7f0000000040)=0x20) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f00000002c0)={r4, 0x1000, "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"}, &(0x7f0000000080)=0x1008) [ 1412.966535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:08:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x9, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xe1c, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20c700000014000100000000000000000002180000", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="2000715f192aeb35cbb09a00001400010800000000000000000267ad11d5ffa2c283781ecc2bc51ef2e8c2a33b4eae17f9120340780b3e3b1aa3d8a972d9f84956bbd7a34c1965f2b85c92c6edd43f5d972532aa0f4c59e8e783092ce257bf280e088879d58d256603000000faaff75f8cf72e7f237a9dab976877c75a2711fc355d90667500cf3c2b65c0297ff3cd0c15ec4226e4", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x64, 0x0, 0x0, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x4}, @NL80211_ATTR_WIPHY={0x8}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @random="ef796b0cdd4c"}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x6, 0x4}}, @NL80211_ATTR_MAC={0xa, 0x6, @multicast}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x64}, 0x1, 0x0, 0x0, 0x1}, 0xc000) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) [ 1413.265961] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:24 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) sendmmsg$nfc_llcp(r2, &(0x7f0000001040)=[{&(0x7f0000000000)={0x27, 0x0, 0x1, 0x1, 0x4e, 0x1, "8da69d179e1d3e2fb74336d98efb0a3950f9f47b7eb61363e1e9fb784b4d3498e3309a327cc523b494ab819f8d82a5f79464f990f12c6006539f6a9bf3f159", 0x29}, 0x60, &(0x7f0000000580)=[{&(0x7f0000000100)="0cbd98f6418b3f6276ee4756fa25c3801c6f9deca1a1352a9ccaf3af6be25bd2db19d4893fb4c69206ca6083ab63a083fb3fbf49360b296418981c11df061bee3dcf550038e147ac9bd078773e6bdb40ad04143f08cd29eaf7d49f8f60c28b3dae9c7661e300723210b1a339e3669478907895ca07835fb5a8861c01222ba7d12390", 0x82}, {&(0x7f00000002c0)="360953b473a8583fb097aa0b1319fe902945761fb4906fc3d7bf03015123e8ea419e98bb5c5b2770cd11949364e92572e10f433d11d82dd403640b9dc7b5040b673382e81a0d98552acf0f6ade951d347fcbe4978e4af5e5a594f5e237e13da82de71640fa6f61ced62d6e68c0ce6346ff5c22a21cc1e8d6b4a3aa5b01f00f4509ad7efcd42028255d700207b0364bb4787171cf9b604fae5e0ff3ea72d0ccdfb9cbf5b69933ac19f813f4e84529c89c1e8212", 0xb3}, {&(0x7f0000000080)="a86167801c657a1c16d1b1465f2ecffcfed7f52aad9609c3ff908cbffc1143dacd4298f6c5dbc45e9e9b8d921f499e19d6820d5251", 0x35}, {&(0x7f0000000380)="04e4c5e6fcb64a9aff45d39b3ad32c6bef2fe83de1be2193f8d12eb8480a91125f896913c793b99f0fd801fb70f8c7a8955679245246bdf6069059793f4a4661b78cc9e342588e340848ff0a2e8c27", 0x4f}, {&(0x7f0000000400)="0c8ca74a14c3eed4474e00074f537d90b9de06e411b7b0b82388d82ce97a7a7fd2ef288d39069033c300bcf73051ef31b07966c999814ead91a1ff8b81412b1f66d2bd30c2307737e0d3b9df88a127eed3b04b969bf15e58dda1a6db96ab4184057166ed4d5174b390470a6b36bf0464c2e96628335f5661aea4959375c8cfbf31827ba2178395aeb506ebb7596b7603f7060a2362", 0x95}, {&(0x7f00000004c0)="3477376a2fff048bd0ef35eb5899d5f20518123579b0ff40d1b82ee93d4e84b8dedf2e6a4b398e", 0x27}, {&(0x7f0000000500)="edc716ce4563e556977a9276a1fa594c557adb3272ffec1cf51860924a40d015ae970b30de7bb442a9740d06b16280631b26e64c56c81c9627dbc1a744b8fefbf3f4fbc7176fdc789aa722f28d62f5c2342d6716e6197b", 0x57}], 0x7, &(0x7f0000000600)={0x30, 0x1c7, 0x81, "be26356374a6b40c2fa90fce08f0047a9ceb7080958cac8e21569965"}, 0x30}, {&(0x7f0000000640)={0x27, 0x0, 0x0, 0x2, 0x4, 0x4d, "8f1d0c5661d90ece1c53249864ff594a525f61eca768b17fb07603de438b077a98367ee8a17ab47cfd42bed14ca7483302f90385054590b80bc76fc71cea67", 0xb}, 0x60, &(0x7f0000000780)=[{&(0x7f00000006c0)="7d44fcbf2face301bc1196a8485241b97b2577da0a672a99b3ffdb6023d7ffcd26f272d87376717a1e6dd3aca23ef49fadba40bccf641b6e0dd72bc58b0a9ffbb23e8efb0cea0a174bc712112175a0d68056c160e714d1c42403a3fd2770c8619f4b1a9c42f95dc1c75b93dc3e84c81790ccd2233922e13212486ed3a5051312a1c3f72d0af126edb25dea543cc098d6f42492f6c44cc99df3c0d3121c666c283baa1d53ec6a11001af5ffeb32b2b0787742fbc876fa1a047d5a933b", 0xbc}], 0x1, 0x0, 0x0, 0x44000}, {&(0x7f00000007c0)={0x27, 0x0, 0x0, 0x4, 0x3, 0x81, "1b3e121593e3febaee632f0c22c05bd87b0d6439450aaa52a272efa226734c162261653d3b63d3072fb75f95c8926ee4b2cfb8157d0cab40594bdcdd079302", 0x33}, 0x60, &(0x7f0000000900)=[{&(0x7f0000000840)="8b47cb798f84af971ed2ec73f72389ea08c575ad4349d95810ba7e36618cc2c80cd45ff240a191dd3eb40c7ac2f5505c89335fd331c7dc8596ee3ef78677f9ab7cf817f63b0636d561443ebfe8e33e761829ec56b9090dd3f0b38ba40107069d8b0e9de769c194d44f77b73182cd045b3a78103f663b2d915edac7b772ffa3", 0x7f}, {&(0x7f00000008c0)="b53d39a5eb60dd0b90f7fcbf5495ebc53169c21c11", 0x15}], 0x2, 0x0, 0x0, 0x40080c0}, {&(0x7f0000000940)={0x27, 0x0, 0x1, 0x7, 0x2, 0x0, "73a44ea4f758674f59d9a25fa54fb0acad3cf62bccd3873754a0db332fb8c7164a32ef5a5350c39522ddc04414bb607d2f8c5cb65c2a20680e0d9a755e49a6", 0x25}, 0x60, &(0x7f0000000f40)=[{&(0x7f00000009c0)="cd729209b5ddae8bf83b67eba5d47042427f0bbd6d6ce667b9f2dfd1be873c8042f3fdb3288586074d333d1bc836939b896de4c6b7e5b9c53dc5ad696c83ef6f8870597409810383335f959e7e32e78e08c4c6e139997cbd2a9fb346949898f9a7feb489a6e671ed57080324c6bc218de2048a3fd18f864b901812", 0x7b}, {&(0x7f0000000a40)="550e12ff00007f3c1b8f580f8c8b27b925e7139bd464806c19d57f8704a46cf58fc529ee9762dc72710c33fe13d53a839c1a1f71194f5fe792a1caa016747f04bf813d0ceb1cc36ffb2655c71b3a5330c654f4a6dc00e2ec51c6e8a8ce90b56e7913706a", 0x64}, {&(0x7f0000000ac0)}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)="3b199ecd5cfacb83fd4a30d4b4bd58c3fbfbc24bf328d98873dd895a6e4a4c659129c482acf6dad6cc4ebf88012d6a2b0a1119218665a3e548f8d13fee967152759951f5213312ac12313531c66098101a225b38d27beb71c6c697d1ac8c737d2cf5b44f68fe0d1ff193dc6e777a57e87fa643a895d2529d1ff1f317b21fb7627b5268f78a3a498f91c75bf2ebaf4c595fadf91bf5bea9e010d5bfcd7ed20712bdc7b67b4b4a1935d662c37bdb773c4d02a451a67ba01ca9a85434f7bdd6878da12f7b92762eeb826cb15429a28f00036f10b393dc815b9eaaae39af4913", 0xde}, {&(0x7f0000000c40)="8894b9fdbbe2f84cf9cffff322151cb12618612f1710b87574b258c528c91e951589717af8755cfaf39cef37de85716a12e6f5a18289565873858d4d8f87ba73ce12ed57c44f9d0b3b512ea91342a4cce1839e250b9c298779fcfc7e2dfa3db24165bafcba955bad5f42042f48eac1150abc2eb56548cd0d9060c18d7dbdc330823168d248d93517227af3bae212798153c82f1cdb9116d4cf416866b2e2428e541686ea15dd0f0b8cd85bd1a5fe8821038ee93a7e37fcb7174e623f1fec6821964195a562a37098f68f850b437f717e41b72504bca38d3f586546af3a0d", 0xde}, {&(0x7f0000000d40)="8ce0ae4067fde241d0f2225d89cd223ac7753975e3742953224180aa9325c92b314075e00c9b703a34853f6226140142dea3cbfcbc", 0x35}, {&(0x7f0000000d80)="155f5702aea0446a4b0075caeb7539e18d87d84c2d6d8b8aa54f9a688fd7396c64a82236f15babedaf0115129bd9b53f062657eea6fc39778d942a63b06b617a377783702f7cf8fca7d792cbe89c0c73cac2e527fb8af320ba782a669753ab026e01d8f82625dab4d8182981e945183d65157fe641b8bef2ce2491acd04c13a17de93e0647a4a246d6", 0x89}, {&(0x7f0000000e40)="b15d6594574296d1deec54a7759cec8efa2608dccbc7f142f7742172f9af1d4c2b4a2dec4815c3d830068b7cce141091d46a3630c73c127ec0ab663291202312dc95211cc6ddc106238c8010de22b201dd86efd6588312d9c0051f8b3252af8304753b85450ef0cd03f2d2c34727ff1ec11c712f07b3574774e4dcb7be2aede43192463a05f0d6944fb1459510c6a1927493ca6ed94b5d5fdace9c071d1c7d85ebfc888d9506382339616b5f818c8270b14687efee503a21328484ce318a4f0d5bfd6530792a99988ce0a2115ed7efa3845e10becc90eaae4691a07d9134719fc3914648f2a6e05d6a9138c1a9799bb2d741b99dcbb2a5", 0xf7}], 0x9, &(0x7f0000001000)={0x30, 0x6, 0x10000, "39d76191d66f900e912db961725781eaa8854be0fb0fdc040d7edea0ae15651a"}, 0x30, 0x1}], 0x4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000ac0)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1413.351287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:24 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xa000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1413.425786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:24 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r2) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000540)={{{@in6=@initdev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) syz_mount_image$hfs(&(0x7f00000000c0)='hfs\x00', &(0x7f0000000100)='./file0\x00', 0xff, 0x2, &(0x7f0000000140)=[{&(0x7f0000000400)="9c70d7de49b220e59618613944b865ebdc9bb55fe1c3972eee5fd92de00c4ae5dc66c05645f1a674abd71fdbf8544ccb56da5b32b1de064cc8ad94b47d3c468f8f429c6d3a934f714a7610cb2b5ba9f7a2c04f60df6ca671197815c74cbb047746aa09b62853e318a3f42fa509274ab58d8f437855e3febb94a5ed13802072d0642f8f809910dda8c759cc052d69014c7df017db943bc28967f88926b2a6b796d0d2c73f78d882ca55eff1c41b96396ad165cfe5569aa040029d9163cac554f0e89c03f8c76337c9fc2dbacf56083591418466f015feef4b7f7435f3ebc0edad76f34722bc6304b9f7895f369e", 0xed, 0x7}, {&(0x7f0000000240)="956749254a5f3defa6e3c8559163fce490d57eeec1203f27b84b6d70a72dc23caca297c1bef63b47d6302c89b111d7b72349f16579b9f142a07ebf9dff9964599b8aa79a6b9457", 0x47, 0x6}], 0x200082, &(0x7f0000000640)={[{@creator={'creator', 0x3d, "a8672de6"}}, {@quiet='quiet'}, {@session={'session', 0x3d, 0x8001}}, {@creator={'creator', 0x3d, "c075f9d6"}}], [{@dont_measure='dont_measure'}, {@permit_directio='permit_directio'}, {@euid_lt={'euid<', r2}}, {@fscontext={'fscontext', 0x3d, 'user_u'}}, {@fsname={'fsname', 0x3d, 'wlan0\\lowlan0system'}}, {@fowner_eq={'fowner', 0x3d, r4}}, {@dont_measure='dont_measure'}, {@dont_appraise='dont_appraise'}]}) 06:08:24 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffff0000) 06:08:24 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0xa, 0x0) 06:08:24 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_icmp(0xa, 0x2, 0x3a) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) getsockname(r2, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @loopback}}}, &(0x7f0000000080)=0x80) syz_genetlink_get_family_id$batadv(&(0x7f0000000140)='batadv\x00') pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000000), 0x0, 0x0) [ 1413.561325] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1413.597750] audit: type=1804 audit(1590041304.856:2683): pid=13269 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/744/file0/file0" dev="loop3" ino=2 res=1 06:08:25 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0xfffffffffffffffc, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @rand_addr=0x64010102}, 0x0, 0x33}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./bus\x00', 0x680042, 0x4f) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) syz_mount_image$erofs(&(0x7f00000000c0)='erofs\x00', &(0x7f0000000100)='./bus\x00', 0x8, 0x6, &(0x7f00000016c0)=[{&(0x7f0000000400)="278518db1b46492ae90cbfb1d26dfbc24192b61bd0e5e0124a3bdae93e7a5df445aee6215c05bcb366b666beab7a3a9e7dbc9a2c53fa5243d913bef53454b26ada2c8d86757688f5ad303312b90beff8fb25b56dd0252984563ba679a285388d999c9f60948f4543267d5ab2b2481b72f9380fbc1c4b2f0fff1700b9cb41bfa101fe9c252d009fdc2c02562c2f298b2b10de1191a05235d753af149971d2239ecd5c7650d0d19ec1ad70f1fee78f022baa478521bf62a5b85ff68375b3fc9ff9bef60c7e52d512932c7a4c2a8b007d2c55b1c3b854c7020223ba535235e48c9ed405f4eccd50362dfea190a60dfa53fc", 0xf0, 0x10000}, {&(0x7f0000000540)="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", 0x1000, 0x4}, {&(0x7f0000000240)="d040bd0c18293b72f55bee85c7c754b3cc289e680697fb6c04833e0a2496ffd2ddc39cb67a2437802f0f438a1f2c27e1f3ce7e7384e34e73cf629ab16b486de192f08bf2aa38ab76df953f752877b81312ab9b47966bcd74fbbde3c0f23c01a936a90e079e73404eccf28df38ee58daa37208038d3fe501289", 0x79, 0xffff}, {&(0x7f0000001540)="d606c873ecf87c67c9766f825f9d51602f29747b24f1012742d3e6caeb1765670cb1d8ef1b519fe79a7c8ea73e1c622a6cfb2d8c6b30cd4bb5905bc61747390df013249787bc810ac9f9779193f0bfe32bf7be84d97c30c673ce68168edcd7", 0x5f, 0x101}, {&(0x7f00000015c0)="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", 0xfe, 0x7fff}, {&(0x7f0000000140)="64f56274bebc86b9b000e2d87d0a196356f5dc6fbddd", 0x16, 0x9d43}], 0x20, &(0x7f0000001780)={[{@acl='acl'}, {@fault_injection={'fault_injection', 0x3d, 0x9}}, {@acl='acl'}, {@noacl='noacl'}, {@user_xattr='user_xattr'}, {@acl='acl'}, {@noacl='noacl'}], [{@appraise='appraise'}, {@permit_directio='permit_directio'}, {@smackfsdef={'smackfsdef'}}, {@mask={'mask', 0x3d, '^MAY_EXEC'}}, {@subj_type={'subj_type', 0x3d, 'bfs\x00'}}]}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0xb, 0x0) [ 1413.755446] device bond70 entered promiscuous mode 06:08:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r1) mount$9p_virtio(&(0x7f0000000080)='syz\x00', &(0x7f0000000100)='\x00', &(0x7f0000000140)='9p\x00', 0x3018019, &(0x7f00000002c0)={'trans=virtio,', {[{@access_any='access=any'}, {@privport='privport'}, {@version_9p2000='version=9p2000'}, {@noextend='noextend'}], [{@euid_lt={'euid<', r1}}, {@obj_type={'obj_type', 0x3d, 'syscall\x00'}}, {@func={'func', 0x3d, 'MODULE_CHECK'}}, {@fsname={'fsname', 0x3d, '[+!'}}, {@uid_lt={'uid<', 0xee01}}, {@measure='measure'}]}}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3b}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) r4 = syz_open_procfs(r3, &(0x7f0000000180)='net/unix\x00') ioctl$TIOCL_SETSEL(r4, 0x541c, &(0x7f0000000040)={0x2, {0x2, 0xfffa, 0xd, 0xfff9, 0x496, 0xf}}) 06:08:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfffff000) [ 1413.819096] bond70: making interface veth415 the new active one [ 1413.851355] device veth415 entered promiscuous mode [ 1413.887572] bond70: Enslaving veth415 as an active interface with an up link [ 1413.936196] bond70 (unregistering): Releasing backup interface veth415 [ 1413.949891] device veth415 left promiscuous mode [ 1414.025723] bond70 (unregistering): Released all slaves [ 1414.115054] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:25 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000040)=0x5080) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@broadcast, 0x4e22, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x1, 0x6}}, 0xe8) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000000)={'gre0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 06:08:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfffffdef) 06:08:25 executing program 2: socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0xcf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r4 = dup3(r2, r3, 0x80000) bind$netlink(r4, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1414.205388] device bond70 entered promiscuous mode [ 1414.276919] bond70: making interface veth417 the new active one [ 1414.292176] device veth417 entered promiscuous mode [ 1414.306377] bond70: Enslaving veth417 as an active interface with an up link 06:08:25 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xc000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:25 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/seq/timer\x00', 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000100)={r2, 0xe32d, 0x1ff}, 0x8) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r3) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r5) dup2(r4, r5) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:25 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffff7f) [ 1414.531580] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1414.553561] audit: type=1804 audit(1590041305.816:2684): pid=13424 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/746/file0/file0" dev="loop3" ino=2 res=1 06:08:25 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) write$P9_RXATTRWALK(r1, &(0x7f00000000c0)={0xf, 0x1f, 0x1, 0xa33b}, 0xf) 06:08:25 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f0000000040)={0x7, &(0x7f0000000000)=[{0x400, 0xff}, {0x57, 0x8000}, {}, {0x2, 0x1}, {0x3ff}, {0x200, 0x5}, {0xffff, 0xa33d}]}) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x16}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x3, 0x0, 0x6}}, 0xe8) sendmmsg(0xffffffffffffffff, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100), 0xc, &(0x7f0000000180)={&(0x7f0000000580)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fcdbdf2506000000080004007f00000108000400ffffffff140006007465616d30000000000000000000000014000600677265300000000000000000000000000500010001000000140002002001000000000000000000000000000005000100010000000700000000000000656d5f753a6f626a6563745f723a7574656d707465725f657865635f743a73300000000014000200ff01000000000000000000000000000114000300ff010000000000000000000000000001d6c598228b69afdeaedb7adaf420b16c0dfda6988e539a0a3b4b0871d7af7dd7400526fa85cf4dbdec287662d66bc9817643011fbbac8e4f24de3bb895"], 0xc4}, 0x1, 0x0, 0x0, 0x80}, 0x80) bpf$BPF_MAP_FREEZE(0x16, &(0x7f0000000080)=r3, 0x4) 06:08:25 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0xc, 0x0) [ 1414.701584] device bond71 entered promiscuous mode [ 1414.830682] bond71: making interface veth419 the new active one [ 1414.884483] device veth419 entered promiscuous mode [ 1414.921582] bond71: Enslaving veth419 as an active interface with an up link [ 1414.933230] audit: type=1804 audit(1590041306.196:2685): pid=13488 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/747/file0/file0" dev="loop3" ino=2 res=1 06:08:26 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f00000001c0)) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000100)=[{{&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x3, 0x2, 0x1c, {0xa, 0x4e23, 0x65, @empty}}, 0xaf, &(0x7f0000000080)=[{&(0x7f00000004c0)="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", 0xe1}, {&(0x7f00000003c0)="c652c51ba28da28079145b7365f6a439b4d9ffb3a2f0dc3eef6e75cb8d697d4b31692a3008dcf4b19c44dc0821bbf2a0a39326e89aba738ba9f8a8210f7d34e25e73f6284cd499f286765ae4258c03ebe8c49c74df1d57c6ddc61f924d7c29e3e20dda5adae64c24a5fb41276bc383e8be163e23a8e32adb77ca0c3859f356875d99e92fef04eb15e97c1bf47e2c05080b928b593f33d2284c79b48dda74a3c1df6c5a29da57ef765f7ea9021168fa696bbbe627232b57e835f7e1d8d527c8f397c1f575", 0xc4}], 0x2}}], 0x1, 0x10000002) [ 1414.992737] bond71 (unregistering): Releasing backup interface veth419 [ 1415.012756] device veth419 left promiscuous mode 06:08:26 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffff8d) [ 1415.094069] bond71 (unregistering): Released all slaves [ 1415.153304] audit: type=1804 audit(1590041306.416:2686): pid=13530 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/748/file0/file0" dev="loop3" ino=2 res=1 06:08:26 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) syz_open_dev$evdev(&(0x7f00000000c0)='/dev/input/event#\x00', 0x3, 0x200000) 06:08:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) sendmsg$IPVS_CMD_SET_SERVICE(r3, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x38, 0x0, 0x300, 0x70bd2b, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8b}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x8810}, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000000)={0x1, 0x9}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_control\x00', 0x2, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1415.237595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:26 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) setsockopt$inet6_int(r2, 0x29, 0xce, &(0x7f0000000000)=0x3, 0x4) [ 1415.308690] device bond71 entered promiscuous mode [ 1415.419305] bond71: making interface veth421 the new active one [ 1415.457823] device veth421 entered promiscuous mode [ 1415.478992] audit: type=1804 audit(1590041306.736:2687): pid=13593 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/749/file0/file0" dev="loop3" ino=2 res=1 [ 1415.479227] bond71: Enslaving veth421 as an active interface with an up link 06:08:26 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xe000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:26 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfffffff5) 06:08:26 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) syz_open_dev$video(&(0x7f00000000c0)='/dev/video#\x00', 0x8, 0x39b97fbb020b5788) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:26 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0xfffffff7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8f010, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{}, {}, {}]}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:26 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x8001, 0x1, 0x1}) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/am_droprate\x00', 0x2, 0x0) getsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f0000000080)=[{}, {}], &(0x7f0000000100)=0x10) r4 = gettid() ptrace(0x4206, r4) tkill(r4, 0x800000009) r5 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r6) ioctl$DRM_IOCTL_GET_CLIENT(r3, 0xc0286405, &(0x7f00000002c0)={0x8001, 0x0, {r4}, {r6}, 0x0, 0x3ff}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@private2={0xfc, 0x2, [], 0x1}, @in=@rand_addr=0x64010102, 0x4e24, 0x0, 0x4e23, 0x200, 0xa, 0xa0, 0x20, 0x73, 0x0, r7}, {0x10000, 0x4, 0x80, 0xf7, 0x8, 0x5, 0x401, 0x7}, {0x3, 0x0, 0x2, 0x4ea}, 0x38, 0x6e6bbb, 0x2, 0x1, 0x2, 0x2}, {{@in6=@loopback, 0x4d2, 0x33}, 0xa, @in=@multicast1, 0x34ff, 0x1, 0x3, 0x8, 0x1, 0x9, 0x9}}, 0xe8) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) write$P9_RLOCK(r1, &(0x7f0000000000)={0x8, 0x35, 0x1, 0x5}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1415.629677] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x34000, 0x0) [ 1415.726978] device bond72 entered promiscuous mode 06:08:27 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x10000000000) [ 1415.769731] bond72: making interface veth423 the new active one [ 1415.813035] device veth423 entered promiscuous mode 06:08:27 executing program 3: statx(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x800, 0x10, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) accept4$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, &(0x7f00000001c0)=0x10, 0x800) fchdir(r1) accept$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @remote}, &(0x7f0000000100)=0x10) creat(&(0x7f0000000500)='./file0\x00', 0x0) [ 1415.835883] audit: type=1804 audit(1590041307.096:2688): pid=13656 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/750/file0/file0" dev="loop3" ino=2 res=1 [ 1415.874598] bond72: Enslaving veth423 as an active interface with an up link 06:08:27 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x20000241, 0x0) [ 1415.933007] bond72 (unregistering): Releasing backup interface veth423 [ 1415.946006] device veth423 left promiscuous mode 06:08:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x1, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1416.027330] bond72 (unregistering): Released all slaves 06:08:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) write$UHID_GET_REPORT_REPLY(r1, &(0x7f0000000000)={0xa, {0x5, 0x3, 0x9}}, 0xa) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:27 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x4000000000000) [ 1416.195527] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1416.348951] device bond72 entered promiscuous mode [ 1416.407112] bond72: making interface veth425 the new active one [ 1416.425484] device veth425 entered promiscuous mode [ 1416.477379] bond72: Enslaving veth425 as an active interface with an up link 06:08:27 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x10000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) rmdir(&(0x7f0000000000)='./file0\x00') sendmmsg(r0, &(0x7f0000000040), 0x0, 0x80c1) 06:08:27 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000000)) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1416.508934] audit: type=1804 audit(1590041307.766:2689): pid=13749 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/751/file0/file0" dev="loop3" ino=2 res=1 06:08:27 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r3}) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$SG_NEXT_CMD_LEN(r1, 0x2283, &(0x7f0000000000)=0xac) [ 1416.673199] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1416.773278] device bond73 entered promiscuous mode 06:08:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = syz_open_dev$evdev(&(0x7f0000000000)='/dev/input/event#\x00', 0x1, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="fa7ba53217d5d791b5c1afa82252ccfabd2f82f6f8e03ee68985249070cf0eb129106d3d0feb650c782dd4b1d47b90617ab4760edd633b0939fd119ef1816628f6ceee096009d00bee68e446689bb400f6bc6c4c7c6388d0687ca69ec706142a271ed7eae48c3db481d67b4902b8a234cb48100024e0f0cdec277eab31f4883b1c6b69ba2f1752f89fdcd0a5b38a1ee3a4b4148450b56ec99f", 0x99}], 0x1) 06:08:28 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) prctl$PR_SET_FPEXC(0xc, 0x80000) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) recvfrom$inet6(r5, &(0x7f0000000400)=""/71, 0x47, 0x40002000, &(0x7f0000000240)={0xa, 0x4e24, 0xfffe0000, @private2={0xfc, 0x2, [], 0x1}, 0xffffffff}, 0x1c) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f00000000c0)={r3, 0x400}, &(0x7f0000000100)=0x8) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1416.875181] bond73: making interface veth427 the new active one [ 1416.938640] device veth427 entered promiscuous mode 06:08:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x7ffff000, 0x0) [ 1416.975234] bond73: Enslaving veth427 as an active interface with an up link [ 1417.022066] bond73 (unregistering): Releasing backup interface veth427 [ 1417.036963] device veth427 left promiscuous mode [ 1417.096513] bond73 (unregistering): Released all slaves 06:08:28 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf0ffffffffffff) [ 1417.197466] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1417.219543] audit: type=1804 audit(1590041308.476:2690): pid=13874 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/753/file0/file0" dev="loop3" ino=2 res=1 06:08:28 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:28 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) ioctl$RNDCLEARPOOL(0xffffffffffffffff, 0x5206, &(0x7f0000000000)=0x4) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r2, 0x2405, r5) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x20000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:28 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x100000000000000) 06:08:28 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1417.526220] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1417.655515] device bond73 entered promiscuous mode [ 1417.733793] bond73: making interface veth429 the new active one [ 1417.752845] audit: type=1804 audit(1590041309.016:2691): pid=13916 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/755/file0/file0" dev="loop3" ino=2 res=1 [ 1417.768706] device veth429 entered promiscuous mode 06:08:29 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r5, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r5}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r5, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r5}}, 0x18}}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@empty, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@rand_addr=0x64010101, 0x34ff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sync_file_range(r2, 0xffffffff, 0xffff, 0x5) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) [ 1417.885193] bond73: Enslaving veth429 as an active interface with an up link [ 1417.918715] bond73 (unregistering): Releasing backup interface veth429 [ 1417.945694] device veth429 left promiscuous mode 06:08:29 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0xffffff1f, 0x0) [ 1418.005874] bond73 (unregistering): Released all slaves 06:08:29 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x400000000000000) [ 1418.074081] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1418.142650] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted 06:08:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendto$inet(r1, &(0x7f00003cef9f), 0x0, 0x804, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0xfc8d) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x2710}}) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0xa, 0x80}, {0x0, 0x0, 0x0, 0x80000000}, {}, 0x0, 0x0, 0x2, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x33}, 0x0, @in=@local, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1418.418998] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1418.517985] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted 06:08:29 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x3f000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1418.564623] audit: type=1804 audit(1590041309.826:2692): pid=13962 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/756/file0/file0" dev="sda1" ino=15945 res=1 06:08:29 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = socket$nl_audit(0x10, 0x3, 0x9) getsockopt$sock_int(r0, 0x1, 0xc, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:29 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x500000000000000) 06:08:29 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x3) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:29 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x4000, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}, 0x500, 0x0, 0x0, 0xb}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0xa11, 0x68002) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x9, @local, 0x9}}, 0x99d, 0x4}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) lsetxattr$security_selinux(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.selinux\x00', &(0x7f00000002c0)='system_u:object_r:crash_device_t:s0\x00', 0x24, 0x2) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000580)=@filter={'filter\x00', 0xe, 0x4, 0x3d8, 0xffffffff, 0x210, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x308, 0x308, 0x308, 0xffffffff, 0x4, &(0x7f0000000540), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x2f}, @mcast2, [0x0, 0xffffffff, 0xffffff00, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'bridge0\x00', 'netdevsim0\x00', {}, {0xff}, 0x2f, 0x8a, 0x2, 0x10}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28, 'eui64\x00'}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x3, 0x1, 0x8}}}, {{@ipv6={@private2, @mcast2, [0xff000000, 0xffffff00, 0xff000000, 0xffffffff], [0xffffffff, 0xffffffff, 0x0, 0xffffffff], 'veth0_to_bond\x00', 'nr0\x00', {}, {}, 0x6c, 0x2, 0xac5cb14e19df0942, 0xa4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48, 'dst\x00'}, {0x0, 0x5, 0x0, [0x3, 0x9, 0x2, 0x0, 0x2, 0x0, 0x2, 0x1000, 0x20, 0xff, 0x8, 0x7fff, 0x81, 0x658, 0x2, 0x6], 0x2}}]}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x3, 0x1, 0x2}, {0x4, 0x0, 0x4}}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@ipv6header={{0x28, 'ipv6header\x00'}, {0x0, 0x82}}]}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x10, 0x0, 0x6}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x438) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r4 = accept4(r3, &(0x7f0000000300)=@ax25={{0x3, @null}, [@null, @remote, @null, @remote, @remote, @rose, @rose]}, &(0x7f0000000380)=0x80, 0x800) r5 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000100)='NLBL_CALIPSO\x00') sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r5, 0x100, 0x70bd28, 0x25dfdbfb}, 0x14}}, 0x44) sendmsg$NLBL_CALIPSO_C_LIST(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x54, r5, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x200000c0}, 0x8a0) sendmsg$NLBL_CALIPSO_C_ADD(r4, &(0x7f00000004c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x44, r5, 0x514, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_CALIPSO_A_DOI={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}, @NLBL_CALIPSO_A_MTYPE={0x8}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x40080) ioctl$UFFDIO_ZEROPAGE(0xffffffffffffffff, 0xc020aa04, &(0x7f0000000500)={{&(0x7f0000ff9000/0x4000)=nil, 0x4000}}) [ 1418.684044] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1418.806589] device bond73 entered promiscuous mode [ 1418.819573] audit: type=1804 audit(1590041310.076:2693): pid=14092 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/757/file0/file0" dev="loop3" ino=2 res=1 06:08:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e22, 0x200, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x1c) fchdir(r0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1418.927029] bond73: making interface veth431 the new active one [ 1418.970422] device veth431 entered promiscuous mode 06:08:30 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x2) [ 1418.997664] bond73: Enslaving veth431 as an active interface with an up link 06:08:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) sendto$inet(r1, &(0x7f0000000000)="6d69a44715aacdb4b555a379254da49e915bd662289d66", 0x17, 0x8080, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1419.051763] bond73 (unregistering): Releasing backup interface veth431 [ 1419.081281] device veth431 left promiscuous mode 06:08:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x4, 0x0, 0x41c1, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = socket$inet6(0xa, 0x80000, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000040)) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@dev, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@multicast1}}, &(0x7f0000000000)=0xe8) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x40, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x8}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x12}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x30}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x101, 0x1}}, @NFQA_CFG_CMD={0x8, 0x1, {0x3, 0x0, 0x1a}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, r2}, {}, {0x101, 0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x41}, 0x0, 0x0, 0x0, 0x6, 0x40, 0x2}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1419.168729] bond73 (unregistering): Released all slaves [ 1419.221928] audit: type=1804 audit(1590041310.486:2694): pid=14133 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/758/file0/file0" dev="loop3" ino=3 res=1 06:08:30 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) getsockname(r0, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, &(0x7f0000000140)=0x80) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f00000001c0)={0x0, 0x4, 0x3ff, 0x7c9e2d71}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000240)={0x9}) [ 1419.275673] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x7f}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:30 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x700000000000000) 06:08:30 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x40000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1419.551011] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1419.577936] audit: type=1804 audit(1590041310.836:2695): pid=14186 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/759/file0/file0" dev="loop3" ino=2 res=1 06:08:30 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:30 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2={0xfc, 0x2, [], 0xfc}, @in=@multicast1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, r1}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffbc}, {0x0, 0x0, 0x2, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3}, {{@in6=@local}, 0x0, @in=@multicast2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:31 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = perf_event_open(&(0x7f0000000100)={0x3, 0x70, 0x20, 0x1, 0xf1, 0x20, 0x0, 0x6, 0x20000, 0x7, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x1, 0x1, 0x1, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x20, 0x4, @perf_config_ext={0x5}, 0x42001, 0xbb7a, 0xcf, 0x4, 0x10001, 0x1, 0xb99}, 0xffffffffffffffff, 0xb, r0, 0x3) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x2, 0x1f, 0x3, 0x110, 0xffffffffffffffff, 0x86, [], 0x0, r4, 0x2, 0x2, 0x3}, 0x40) fdatasync(r6) r7 = dup3(r2, r3, 0x0) ioctl$KVM_PPC_GET_SMMU_INFO(r7, 0x8250aea6, &(0x7f00000002c0)=""/205) r8 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r8, 0x80045300, &(0x7f0000000040)) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1419.698053] device bond73 entered promiscuous mode [ 1419.752257] bond73: making interface veth433 the new active one [ 1419.792071] device veth433 entered promiscuous mode [ 1419.822590] bond73: Enslaving veth433 as an active interface with an up link [ 1419.872115] bond73 (unregistering): Releasing backup interface veth433 [ 1419.886912] device veth433 left promiscuous mode 06:08:31 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x3) [ 1419.930698] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1419.970348] bond73 (unregistering): Released all slaves [ 1420.009428] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1420.086447] audit: type=1804 audit(1590041311.346:2696): pid=14238 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/760/file0/file0" dev="sda1" ino=16309 res=1 [ 1420.139625] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1420.222317] device bond73 entered promiscuous mode 06:08:31 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xa00000000000000) [ 1420.268000] bond73: making interface veth435 the new active one [ 1420.283410] device veth435 entered promiscuous mode [ 1420.302867] bond73: Enslaving veth435 as an active interface with an up link 06:08:31 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x482e00) 06:08:31 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x60000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:31 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f00000000c0)={0x2, 0x4, 0x5, 0x2}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1420.455039] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1420.645558] device bond74 entered promiscuous mode 06:08:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r2, 0x8008ae9d, &(0x7f00000002c0)=""/223) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@dev={0xac, 0x14, 0x14, 0xd}, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000}, {0x7}}, {{@in=@empty, 0x0, 0x33}, 0x0, @in6=@local, 0x0, 0x0, 0x0, 0x6, 0x0, 0x1ff, 0x7}}, 0xe8) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) r5 = fcntl$dupfd(r2, 0x0, r4) setsockopt$PNPIPE_INITSTATE(r5, 0x113, 0x4, &(0x7f0000000000)=0x1, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1420.710334] bond74: making interface veth437 the new active one [ 1420.753697] device veth437 entered promiscuous mode [ 1420.778010] bond74: Enslaving veth437 as an active interface with an up link [ 1420.797800] bond74 (unregistering): Releasing backup interface veth437 [ 1420.801864] audit: type=1804 audit(1590041312.056:2697): pid=14388 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/761/file0/file0" dev="loop3" ino=2 res=1 [ 1420.808551] device veth437 left promiscuous mode [ 1420.895597] bond74 (unregistering): Released all slaves 06:08:32 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x4) 06:08:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VHOST_GET_VRING_BASE(r2, 0xc008af12, &(0x7f0000000000)) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x4e21, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x0, 0x4}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1421.056377] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1421.146735] device bond74 entered promiscuous mode 06:08:32 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x65580000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:32 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe00000000000000) 06:08:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') sendmsg$TIPC_NL_NODE_GET(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f00000002c0)={0x104, r4, 0x10, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x5, @dev={0xfe, 0x80, [], 0x1c}, 0x4}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x1f, @loopback, 0x1e81}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_DOMAIN={0x8}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2f94}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x810}, 0xc005) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1421.318426] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1421.445990] device bond75 entered promiscuous mode 06:08:32 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000100)=0x8001) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000140)=@assoc_value, &(0x7f0000000180)=0x8) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_TIMER_IOCTL_PVERSION(r3, 0x80045400, &(0x7f0000000040)) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x4e23, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1bc}, {}, 0x0, 0x6e6bba, 0x1}, {{@in6=@local, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0xbffffffd, 0x5c8f9804, 0x9}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') 06:08:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) fcntl$setstatus(r1, 0x4, 0x4800) 06:08:32 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) read$FUSE(r1, &(0x7f0000000540), 0x1000) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r3, 0xc694d42685586125, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) sendmsg$GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r3, 0x200, 0x70bd2b, 0x25dfdbfc, {}, [@GTPA_PEER_ADDRESS={0x8, 0x4, @local}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8041}, 0x40015) [ 1421.533644] bond75: making interface veth439 the new active one [ 1421.560618] device veth439 entered promiscuous mode [ 1421.590355] bond75: Enslaving veth439 as an active interface with an up link [ 1421.644325] bond75 (unregistering): Releasing backup interface veth439 [ 1421.670588] device veth439 left promiscuous mode [ 1421.727472] audit: type=1804 audit(1590041312.986:2698): pid=14536 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/762/file0/file0" dev="loop3" ino=3 res=1 [ 1421.783533] bond75 (unregistering): Released all slaves 06:08:33 executing program 3: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) recvmsg(r0, &(0x7f00000001c0)={&(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000240)=""/96, 0x60}, {&(0x7f0000000400)=""/124, 0x7c}], 0x2, &(0x7f0000000480)=""/127, 0x7f}, 0x40002020) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x0, 0x0, 0x0, 0x8000000000000, 0x0, 0x0, 0x0, 0x4}, {0x0, 0x0, 0x0, 0x2}, 0x8}, {{@in6=@local}, 0x0, @in=@dev={0xac, 0x14, 0x14, 0x3a}, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) utime(&(0x7f00000005c0)='./file0\x00', &(0x7f0000000600)={0x200, 0x8}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000540)=[@in6={0xa, 0x4e22, 0x54, @loopback, 0x3}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x25}}, @in={0x2, 0x4e20, @empty}, @in6={0xa, 0x4e20, 0x2, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}], 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$sock_inet_tcp_SIOCOUTQ(r4, 0x5411, &(0x7f0000000500)) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) sendmsg$key(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x11, 0x3f, 0xb, 0x8, 0x0, 0x70bd26, 0x25dfdbfb, [@sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_x_filter={0x5, 0x1a, @in=@remote, @in6=@ipv4={[], [], @loopback}, 0xb, 0x4, 0x6}]}, 0x40}}, 0x200280c0) 06:08:33 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2000000000000000) 06:08:33 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x5) [ 1421.894470] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x38, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1422.001574] device bond75 entered promiscuous mode [ 1422.072229] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1422.087335] bond75: making interface veth441 the new active one [ 1422.107731] device veth441 entered promiscuous mode 06:08:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) uname(&(0x7f0000000000)=""/149) [ 1422.152678] bond75: Enslaving veth441 as an active interface with an up link 06:08:33 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x81000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1422.227427] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1422.320406] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:33 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$IMSETDEVNAME(r3, 0x80184947, &(0x7f0000000000)={0x5, 'syz1\x00'}) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x8, @loopback, 0x101}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:33 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6=@ipv4={[], [], @remote}}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) sendmsg$TIPC_NL_NAME_TABLE_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16, @ANYBLOB="100027bd7000fcdbdf2510000000740005803c000280080003000600000008000400fdffffff08000200c7f9fb795b160a5a8c77fdf6ffff0000080004000100008008000200050000000800010008000000080003000100008034000280080001001f00000008000300ff000000080003000700000008000200ff00000008"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_NL_NODE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x28, 0x0, 0x400, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'macvlan1\x00'}}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40880}, 0x20000090) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r4 = gettid() ptrace(0x4206, r4) tkill(r4, 0x800000009) ptrace(0x11, r4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={r5, 0xff}, 0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e21, 0x8, @remote, 0x6}}, [0x3, 0x7, 0x7f, 0xe39, 0x46, 0x3, 0x7fffffff, 0x7fffffff, 0xffffffffffffffff, 0x3d, 0x3683, 0x0, 0xffff, 0x2, 0xfffffffffffffff9]}, &(0x7f00000000c0)=0x100) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1422.477784] device bond76 entered promiscuous mode [ 1422.540295] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1422.564555] bond76: making interface veth443 the new active one 06:08:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="2000000014000100000000000000000002180000", @ANYRES32=0x0, @ANYBLOB="08000100e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="20000000140001000000ff000001000002100000", @ANYRES32, @ANYBLOB="dc000200e0000001c47a3b04aff236df7e229fc550d4c6a708cb3a048e3e7809af220cb884648e26ea0136b494dceb504779c8c6f34671aedfecdea187acdca0920ba755bbedc792ab9a1d580fe7f92911404a76f910d6dfc326b73eaabfe4884e47ed1a000000ed874b348e322b24bc5bfcf7ffffff7b7412ba6cd2a983"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1}, 0x18}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r6}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x4000000) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="2082c3e6995000000014000100000000000001100000000000", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=@ipv6_delrule={0xb0, 0x21, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x10, 0x0, 0x81, 0x3, 0x0, 0x0, 0x4, 0x2}, [@FRA_SRC={0x14, 0x2, @local}, @FIB_RULE_POLICY=@FRA_TABLE={0x8, 0xf, 0x7ba}, @FRA_DST={0x14, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x16}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00'}, @FRA_DST={0x14, 0x1, @private0}, @FRA_SRC={0x14, 0x2, @mcast1}]}, 0xb0}}, 0x0) sendmsg$NL80211_CMD_GET_MESH_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x4c, 0x0, 0x20, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x4}}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x5, 0x4}}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x1}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x4c}}, 0x4040) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1422.598490] device veth443 entered promiscuous mode [ 1422.622987] bond76: Enslaving veth443 as an active interface with an up link [ 1422.659206] bond76 (unregistering): Releasing backup interface veth443 06:08:33 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x2800000000000000) [ 1422.681738] device veth443 left promiscuous mode 06:08:34 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}, 0xfffffffe}, {{@in6=@local}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x100000, 0x0, 0x80000001}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1422.755654] bond76 (unregistering): Released all slaves [ 1422.790486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1422.905363] device bond76 entered promiscuous mode 06:08:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x80) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c8, r2, 0x2, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @local}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x9}, @NL80211_ATTR_SCAN_SUPP_RATES={0x128, 0x7d, 0x0, 0x1, [@NL80211_BAND_2GHZ={0xf0, 0x0, "41f5fdb37fccff63666adf557cd11cb2b3ba6e8c050d22d0ea93b9bae985a2f02d46186680534ef056e6aadb811ccea2031c655f803a094346957ef5874adb38ec165ca16580b68794e6919973b61fbee160ce98057910dd71dab1bf5ec317a3362fd81d840d94758fe0628b6677e9a42e96ce91209f35035110d010f1e79f525164bed33e9103f9d388871f136ae0b3c9bd5f44a5f64c1248699d7387c0ffe5d8c1c85a47bdd179553501b129083fd71239847ecb3aadfecc422fb30ca6483737b00661536dd241818705b57d5a3001402029067f42a1e2d89d8634af3df5153b5367f41ce0cd548f48e58a"}, @NL80211_BAND_60GHZ={0x31, 0x2, "04d336064d43f53ce58875d7ee4893be750fe5315f3ea096c0b49c2b3eb6893fdd5c13189cca5852c65bf879e0"}]}, @NL80211_ATTR_SCAN_SSIDS={0x60, 0x2d, 0x0, 0x1, [{0x9, 0x0, [0x19, 0x6, 0x3, 0x16, 0x18]}, {0x9, 0x0, [0x1c, 0xa, 0x1b, 0x15, 0x1a]}, {0x5, 0x0, [0x3]}, {0x8, 0x0, [0x1f, 0x12, 0x14, 0xb]}, {0x7, 0x0, [0xe, 0xe, 0x1]}, {0xd, 0x0, [0x0, 0x5, 0x8, 0x10, 0x13, 0x17, 0x11, 0x4, 0xaf]}, {0xa, 0x0, [0xe, 0x11, 0xe, 0x5, 0x7, 0x12]}, {0xe, 0x0, [0x1, 0x16, 0xb, 0xb, 0x17, 0x4, 0x12, 0x15, 0x9, 0xd]}]}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x9, 0x1}}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x1ff}]}, 0x1c8}, 0x1, 0x0, 0x0, 0x1}, 0x14) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 06:08:34 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x6) [ 1422.928452] audit: type=1804 audit(1590041314.187:2699): pid=14793 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/765/file0/file0" dev="loop3" ino=2 res=1 06:08:34 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x2000, 0x0) fcntl$setpipe(r0, 0x407, 0x7) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) write$binfmt_elf64(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="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"], 0x118) sendmsg$nl_generic(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="6891739ff4f88fe022974bc97bb08ad6547ae0f2d1a9601b7d45fd83668b510f57cac8e0cb9cccf0016d8e4c60541e024631a415450090a120d573912d3d8e04be4c7c0a85164f74444942a17a86bd438f5c1b212c1824fbffcb26ba89f7a0260d7ff38912160686acaf55b69f837cd5"], 0x670}, 0x1, 0x0, 0x0, 0x200000d0}, 0x8840) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x4, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x8108, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 06:08:34 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x0, 0x6}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@local, 0x3d}) r3 = dup(r1) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(r0, 0xc01064bd, &(0x7f0000000140)={&(0x7f0000000100)}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x3ecc1ab8, @multicast}) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1423.086836] bond76: making interface veth445 the new active one [ 1423.104789] device veth445 entered promiscuous mode [ 1423.139317] bond76: Enslaving veth445 as an active interface with an up link 06:08:34 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x88a8ffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1423.348685] audit: type=1804 audit(1590041314.607:2700): pid=14824 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/766/file0/file0" dev="loop3" ino=2 res=1 06:08:34 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x148, 0x8800) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') sendmsg$BATADV_CMD_GET_BLA_CLAIM(r1, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="00082dbd7000fddbdf250b000000080034000900000005002d000000000008082b00a000000005002d000100000005002e000100000008003200b6000000"], 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x800) r3 = socket$inet6(0xa, 0x3, 0x1) unlinkat(0xffffffffffffffff, &(0x7f0000000300)='./file0\x00', 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 06:08:34 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) write$vhost_msg_v2(r0, &(0x7f0000000400)={0x2, 0x0, {&(0x7f00000000c0)=""/87, 0x57, &(0x7f0000000240)=""/89, 0x2, 0x1}}, 0x48) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:34 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3f00000000000000) [ 1423.533873] device bond77 entered promiscuous mode [ 1423.639812] bond77: making interface veth447 the new active one [ 1423.676892] device veth447 entered promiscuous mode [ 1423.705698] bond77: Enslaving veth447 as an active interface with an up link [ 1423.754438] bond77 (unregistering): Releasing backup interface veth447 [ 1423.772485] device veth447 left promiscuous mode [ 1423.825619] bond77 (unregistering): Released all slaves 06:08:35 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) recvmsg(r0, &(0x7f0000000100)={&(0x7f0000000000)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4096, 0x1000}], 0x1}, 0x2000) fchmod(r1, 0x1e7) 06:08:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2={0xfc, 0x2, [], 0x4}, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) write$binfmt_elf32(r1, &(0x7f0000000540)={{0x7f, 0x45, 0x4c, 0x46, 0x3, 0x7, 0x6, 0x5b, 0x2, 0x3, 0x6, 0x5, 0x246, 0x38, 0x24d, 0x9, 0x81, 0x20, 0x2, 0x1, 0x1, 0x9}, [{0x4, 0x9, 0x4, 0x7, 0xa3a, 0x80000001, 0x5, 0x4}], "523697900bed05dc531e42313a23f56c665f8e4187b27d53808edbae0f642a5473b1cbb99d16a302394823d9e300bce0d4dc60680ddbf8dc0ceea0f48e6657fbc7de650b24d342aa18bcdd0bcfc2431f4d2fcbc55ecad8075f22bb82447cbb608ec95790904ac139ee86eeae26ea6c9c42304c89352ee3fe557d335727925119f92263496b497b080e7403c470e452a683dd50d01112bae8459efe4c", [[]]}, 0x1f4) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:35 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x7) [ 1423.936989] validate_nla: 2 callbacks suppressed [ 1423.936998] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:35 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x90b04cb0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) futimesat(0xffffffffffffffff, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={{0x77359400}, {0x77359400}}) socket$pppoe(0x18, 0x1, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1424.152149] audit: type=1804 audit(1590041315.407:2701): pid=14940 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/768/file0/file0" dev="loop3" ino=2 res=1 06:08:35 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x4000000000000000) [ 1424.228059] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1424.325747] audit: type=1804 audit(1590041315.587:2702): pid=14974 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/769/file0/file0" dev="loop3" ino=2 res=1 [ 1424.338239] device bond77 entered promiscuous mode 06:08:35 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$VIDIOC_S_PARM(r0, 0xc0cc5616, &(0x7f0000000400)={0x9, @raw_data="39af15f76040c65e55fe4472d77a402aa8f8df41c5f4fc0a42af27b5adc4eeb43946e49273d4663d529e85692f03e2ceda4a222a9e76f56d6dab6f92f12625df2b397eaacc5f61677a04c0f873084901020032b3f7c5998269e3be964712cf12d4ef283900cf1b368ef24c5471848dead2c09c456af65f2b4ee2cecd3a8bf5e123c7cb212d298e143e9df88d0bff3e692034917365c47534d12fc75eef45045058cd676006aecab4d06e2b1e058a882535270cea77e53a9087548754707c62c1c953064ff245166d"}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1424.462812] bond77: making interface veth449 the new active one [ 1424.484161] device veth449 entered promiscuous mode [ 1424.514869] bond77: Enslaving veth449 as an active interface with an up link [ 1424.550512] bond77 (unregistering): Releasing backup interface veth449 [ 1424.575619] device veth449 left promiscuous mode [ 1424.645315] bond77 (unregistering): Released all slaves 06:08:36 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000100)) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000000c0)='./bus/file0\x00', 0x0) 06:08:36 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x6000000000000000) [ 1424.724003] audit: type=1804 audit(1590041315.987:2703): pid=15003 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/770/file0/file0" dev="loop3" ino=2 res=1 [ 1424.761137] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) times(&(0x7f0000000a00)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) sendmsg$rds(r1, &(0x7f00000008c0)={&(0x7f0000000000)={0x2, 0x4e20, @rand_addr=0x64010101}, 0x10, &(0x7f0000000440)=[{&(0x7f0000000040)=""/87, 0x57}, {&(0x7f0000000100)=""/154, 0x9a}, {&(0x7f00000002c0)=""/153, 0x99}, {&(0x7f0000000380)=""/131, 0x83}], 0x4, &(0x7f0000000740)=[@cswp={0x58, 0x114, 0x7, {{0x7f, 0x1}, &(0x7f0000000480)=0x9, &(0x7f00000004c0)=0x9, 0x3, 0xffffffffffffffff, 0x398314b2, 0x9, 0x6c, 0x3525ab7a}}, @rdma_args={0x48, 0x114, 0x1, {{0x3, 0x800}, {&(0x7f0000000500)=""/41, 0x29}, &(0x7f0000000600)=[{&(0x7f0000000540)=""/153, 0x99}], 0x1, 0x59, 0x10000}}, @mask_fadd={0x58, 0x114, 0x8, {{0x80000000, 0x5}, &(0x7f0000000640)=0x9, &(0x7f0000000680)=0x100000001, 0x401, 0x6, 0x3, 0xad22, 0x1, 0x9}}, @mask_fadd={0x58, 0x114, 0x8, {{0x9f, 0x101}, &(0x7f00000006c0)=0x8, &(0x7f0000000700), 0x6, 0x4, 0x3f, 0x2, 0x0, 0x400}}], 0x150}, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x100, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4}, {}, {0x0, 0x5d}, 0x0, 0x0, 0x0, 0x0, 0x3}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x8, 0x2, 0xfffffffc}}, 0xe8) write(r0, &(0x7f0000000900)="aca4f1f70eadcfa957978a92f6c161a7a805dbbd52dfcf9439a563724d95b4b6066284c249cfb09e3094aba76178d34600fe0fe5cbf658a295d5d8f8041eb29549825cd621bef275fa602e631e6d5201aa504fc8173a2c9d8a9b9e1f32d511ce8bb0e00ac4c79d970ab2d80691ef727aeb0f12dc90574f61442d9a0f9abee280a6140d7898e9ffc1ffe5ab5574d9da0a07041d5ce5e68e253454f9162d539d1e3d0e47c8ee7c60acfdef9aeb5a311c4695bdc63db30eb50958db002a4351ad927ce0e2ad42eb1718eedc8bf61bc75ea628", 0xd1) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 06:08:36 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x8) [ 1424.888170] device bond77 entered promiscuous mode [ 1424.985412] audit: type=1804 audit(1590041316.247:2704): pid=15082 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/771/file0/file0" dev="loop3" ino=2 res=1 [ 1425.015862] bond77: making interface veth451 the new active one [ 1425.052250] device veth451 entered promiscuous mode 06:08:36 executing program 3: r0 = openat$bsg(0xffffffffffffff9c, &(0x7f0000000640)='/dev/bsg\x00', 0x40000, 0x0) ioctl$SG_GET_COMMAND_Q(r0, 0x2270, &(0x7f0000000680)) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000400)={{{@in=@multicast1, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@empty}}, &(0x7f00000001c0)=0xe8) lstat(&(0x7f00000000c0)='./bus\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, 0x5c, r1, r2}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x1, 0x80, 0x400, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in6=@local}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r3 = openat$zero(0xffffffffffffff9c, &(0x7f00000016c0)='/dev/zero\x00', 0x480, 0x0) ioctl$KVM_SET_SREGS(r3, 0x4138ae84, &(0x7f0000001700)={{0x4, 0x2, 0xf, 0x0, 0x6, 0x2, 0x5, 0x5, 0x81, 0x3, 0x40}, {0x0, 0x4, 0xf, 0x3f, 0x0, 0xf5, 0x7, 0x46, 0x1f, 0x0, 0x1}, {0x5000, 0x2, 0xe, 0x0, 0x5, 0x7, 0x0, 0xfd, 0xfe, 0x9, 0x9, 0x4}, {0x1000, 0x10000, 0x4, 0x1f, 0x20, 0x0, 0x98, 0x14, 0x8, 0x1, 0x1, 0x1}, {0x6000, 0x1, 0x3, 0x3f, 0x40, 0x20, 0x65, 0x3, 0x80, 0x40, 0x20, 0x5}, {0xd000, 0xd000, 0xb, 0x7, 0x7, 0x3, 0x9, 0x3, 0x9, 0x8, 0x7f, 0x8}, {0x3000, 0x100000, 0x9, 0x8, 0x61, 0xfc, 0xc1, 0x1, 0x0, 0x11, 0x80}, {0x2000, 0x3000, 0xa, 0x9, 0x71, 0x1b, 0x0, 0x5, 0x2, 0xdb, 0x2, 0x81}, {0x6000, 0x8}, {0x6, 0xb58}, 0x80010031, 0x0, 0x4, 0x20000, 0x8, 0xa07e926057c30fc1, 0x1, [0xe6, 0x6, 0x7fffffff, 0x8]}) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r4 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r4) creat(&(0x7f0000000500)='./file0\x00', 0x0) r5 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r6, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r5, &(0x7f0000000000), 0x10000}]) recvfrom$unix(r5, &(0x7f0000000540)=""/238, 0xee, 0x101, &(0x7f0000000240)=@abs={0x1, 0x0, 0x4e21}, 0x6e) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) read$char_usb(r7, &(0x7f00000006c0)=""/4096, 0x1000) 06:08:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r4, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001500010000", @ANYRES32=r4], 0x18}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x2, r4, 0x4}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="0536b1f94a5709b76a3538407df7f3831133fcaa376b5398fe6fc3d9221068981b48932d8455fc879557c2", 0x2b}, {&(0x7f0000000100)="2f661eb632e7e0215424684d80bc7ebefbc61305e7f53732c2c5b579b0a851f439cf8031aa7b2c7e75a48910b91e5e349ad4e804a134fc9b231b84f7522bd0ebf96cf8fe7c8dd1586f9eb3fc8230e0fe9eeae12bdc35c99576135e2f74669d494fc9a6e297980cc9d2c7d232e1e2d655245ce8", 0x73}], 0x2}, 0x4040800) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1425.085733] bond77: Enslaving veth451 as an active interface with an up link 06:08:36 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x9effffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1425.239862] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted [ 1425.246347] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:36 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x8dffffff00000000) [ 1425.365106] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1425.494820] device bond78 entered promiscuous mode [ 1425.523319] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted [ 1425.540038] audit: type=1804 audit(1590041316.807:2705): pid=15153 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/772/file0/file0" dev="sda1" ino=17426 res=1 [ 1425.564292] bond78: making interface veth453 the new active one 06:08:36 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$sock_netdev_private(r1, 0x89fa, &(0x7f0000000040)="0d34581135de926ae3494034daab194de4dbbf3cbfe2343fa0bab132fc73054f1b0d1d6c1eb6d495f48d0e81034925abd9cba08031a160c8c8738e8ea6944893c4604093750a31bfc0fd0287e9271788606ede7ee4aed4ccba5e238c4bb8ea46ca1848176542a2d920e1241deacda0443395") pipe2$9p(0x0, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x5128) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000)='nl80211\x00') sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1425.603567] device veth453 entered promiscuous mode [ 1425.636240] bond78: Enslaving veth453 as an active interface with an up link [ 1425.723657] bond78 (unregistering): Releasing backup interface veth453 [ 1425.741383] device veth453 left promiscuous mode 06:08:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x9) [ 1425.783774] bond78 (unregistering): Released all slaves [ 1425.875088] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1425.967204] device bond78 entered promiscuous mode 06:08:37 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xd8ff000000000000) [ 1426.024725] bond78: making interface veth455 the new active one [ 1426.044413] device veth455 entered promiscuous mode [ 1426.058410] bond78: Enslaving veth455 as an active interface with an up link 06:08:37 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xa5070000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:37 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) socket$key(0xf, 0x3, 0x2) ioctl$VIDIOC_PREPARE_BUF(0xffffffffffffffff, 0xc058565d, &(0x7f0000000000)={0x401, 0x4, 0x4, 0x20000, 0x1, {0x77359400}, {0x2, 0xc, 0xbe, 0x8a, 0x0, 0x1, "4bba5ca7"}, 0x1ff, 0x3, @userptr=0x2, 0x7, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_SET_VERSION(r2, 0xc0106407, &(0x7f0000000080)={0x5d, 0x8, 0x9, 0x20}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1426.213896] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1426.349531] device bond79 entered promiscuous mode [ 1426.397211] bond79: making interface veth457 the new active one [ 1426.407095] device veth457 entered promiscuous mode [ 1426.415802] bond79: Enslaving veth457 as an active interface with an up link [ 1426.436599] bond79 (unregistering): Releasing backup interface veth457 [ 1426.449271] device veth457 left promiscuous mode [ 1426.512041] bond79 (unregistering): Released all slaves 06:08:37 executing program 2: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$KVM_PPC_ALLOCATE_HTAB(r0, 0xc004aea7, &(0x7f0000000000)=0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r1, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 06:08:37 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe802000000000000) 06:08:37 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) r0 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/nvme-fabrics\x00', 0x40200, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_MPATH(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, r2, 0x208, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="3eb56360e51c"}]}, 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0xd011) prctl$PR_SET_THP_DISABLE(0x29, 0x0) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r3 = open(&(0x7f0000000280)='./bus\x00', 0xa80, 0x6) fchdir(r3) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1426.593879] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1426.687437] device bond79 entered promiscuous mode 06:08:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xa) [ 1426.845756] bond79: making interface veth459 the new active one [ 1426.887701] device veth459 entered promiscuous mode 06:08:38 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x84440, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1426.911953] bond79: Enslaving veth459 as an active interface with an up link 06:08:38 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xb04cb090, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000100)='IPVS\x00') ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2002, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/pfkey\x00', 0x40000, 0x0) fanotify_mark(r2, 0x64, 0x20001010, r3, &(0x7f0000000080)='./file0\x00') [ 1427.102400] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1427.165576] audit: type=1804 audit(1590041318.427:2706): pid=15403 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/774/file0" dev="sda1" ino=15841 res=1 [ 1427.178990] BFS-fs: bfs_fill_super(): Inode 0x00000008 corrupted [ 1427.247414] device bond80 entered promiscuous mode 06:08:38 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xe803000000000000) 06:08:38 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x3, 0x4}, {0x1000080000000, 0x0, 0x0, 0x82}, 0x0, 0x6e6bbc}, {{@in6=@loopback, 0x4d3}, 0x2, @in=@empty}}, 0x5e) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/ip6_tables_matches\x00') readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f00000001c0)=""/4096, 0x141b}], 0x1) readv(r1, &(0x7f0000000580), 0x3c1) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1427.349603] bond80: making interface veth461 the new active one [ 1427.392663] device veth461 entered promiscuous mode [ 1427.453138] bond80: Enslaving veth461 as an active interface with an up link 06:08:38 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x8, 0x40000) ioctl$TIOCNXCL(r2, 0x540d) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$TIOCNOTTY(r3, 0x5422) [ 1427.503491] audit: type=1804 audit(1590041318.767:2707): pid=15462 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/775/file0/file0" dev="sda1" ino=16301 res=1 06:08:38 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1427.611645] bond80 (unregistering): Releasing backup interface veth461 [ 1427.623815] device veth461 left promiscuous mode [ 1427.682660] bond80 (unregistering): Released all slaves [ 1427.727349] audit: type=1804 audit(1590041318.987:2708): pid=15478 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/776/file0/file0" dev="loop3" ino=2 res=1 06:08:39 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xb) 06:08:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, 0x0, @in=@empty, 0x0, 0x2}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1427.837595] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:39 executing program 4: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'veth1_macvtap\x00', 0x5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x1) r3 = dup2(r2, 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x3}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x0, {0xa, 0x6, 0x7d72ec2f, @private0}, r5}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r6}}, 0x18) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1427.937216] device bond80 entered promiscuous mode [ 1427.979108] audit: type=1804 audit(1590041319.237:2709): pid=15553 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/777/file0/file0" dev="loop3" ino=2 res=1 06:08:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@local}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:39 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) ioctl$USBDEVFS_RESET(r3, 0x5514) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:39 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xeffdffff00000000) [ 1428.064114] bond80: making interface veth463 the new active one [ 1428.071396] device veth463 entered promiscuous mode [ 1428.077893] bond80: Enslaving veth463 as an active interface with an up link 06:08:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xc3ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1428.210028] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1428.242400] audit: type=1804 audit(1590041319.507:2710): pid=15578 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/778/file0/file0" dev="loop3" ino=2 res=1 06:08:39 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x4}, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x400}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f00000000c0)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xffffffcb}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1428.320272] device bond81 entered promiscuous mode [ 1428.384043] bond81: making interface veth465 the new active one [ 1428.407829] device veth465 entered promiscuous mode 06:08:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000040)=r2, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/timers\x00', 0x0, 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000300)={0x44, r6, 0x8, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_SSIDS={0x28, 0x2d, 0x0, 0x1, [{0xc, 0x0, [0xc, 0x8, 0x1b, 0x1, 0x1a, 0x9, 0x1b, 0x12]}, {0x6, 0x0, [0x4, 0x8]}, {0x7, 0x0, [0x3, 0xa, 0x1c]}, {0x7, 0x0, [0x13, 0x17, 0x10]}]}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20040004}, 0x20004000) [ 1428.444934] bond81: Enslaving veth465 as an active interface with an up link [ 1428.510204] bond81 (unregistering): Releasing backup interface veth465 [ 1428.531365] device veth465 left promiscuous mode 06:08:39 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet(r1, &(0x7f0000000380)="61083cf9984a52a202aa3615176fd819b6282b3622f79ff4a52e8b55b7e6c0574d27845b2abca1cc060d230459c690e8a2c2f6658d805d92bdbbd685cc93a41bb4a04564d4010614afb8e33a963d3027d4670bd972d8db2fa4b70e0318f45ff0a0108d3b8f1d08990970269c543be196b3faa6aceba71f49519608eb933f5677a87dc667a6d9110728a3807543ae8f1830ec630cfb2bbb8c801e6c5d18a1def7c16b45248ab50744f7903d726a19c6df605721688132784607ecaf2bc05770cf1d50161624d713f097f363fd0ab6aaaf0da844679bb8", 0xd6, 0x30, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r4) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="cd4f4d06", @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf250600000005000100010000000500010000000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x40001) mount$bpf(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='bpf\x00', 0x100400, &(0x7f00000002c0)=ANY=[@ANYBLOB="6dfbffffffffffffff303030303030303030303030303f31303030303030300101000030303030303030362c666f777265723e049ec095ccd8c39d1e57982214dabba7d4a3ea9541ad09c02a44eedbf03469ce0900a7e7a68992f5865c1f5b00", @ANYRESDEC=r4, @ANYBLOB=',subj_type=em1keyring,vboxnet0systemposix_acl_access:,\x00'/67]) [ 1428.603642] bond81 (unregistering): Released all slaves 06:08:40 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xc) 06:08:40 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf401000000000000) [ 1428.812979] device bond81 entered promiscuous mode 06:08:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x8, 0x1, 0x0, 0x0, 0x0, 0x41c1, 0x1804, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000000), 0x8}, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xc5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1428.878244] bond81: making interface veth467 the new active one 06:08:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x7, 0x9}, 0x0, 0x0, 0x7c000000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1428.928831] device veth467 entered promiscuous mode [ 1428.948518] bond81: Enslaving veth467 as an active interface with an up link 06:08:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xf0ffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x801, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@initdev={0xfe, 0x88, [], 0x1, 0x0}, 0xd, 0x0, 0x3, 0xb, 0x400, 0x3ff}, &(0x7f0000000140)=0x20) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) openat$fb0(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/fb0\x00', 0x80000, 0x0) creat(&(0x7f0000000500)='./file0\x00', 0x0) setxattr$security_ima(&(0x7f0000000240)='./bus\x00', &(0x7f0000000280)='security.ima\x00', &(0x7f0000000400)=@v1={0x2, "01f1e66e6ea3c7a24df6d7"}, 0xc, 0x3) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1429.045213] audit: type=1804 audit(1590041320.307:2711): pid=15634 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/779/file0" dev="sda1" ino=15910 res=1 [ 1429.070486] validate_nla: 1 callbacks suppressed [ 1429.070501] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x41040}, 0x0, 0x3, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0xa0, 0x16}, {0x6}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x1, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:40 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x6}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) lookup_dcookie(0xffffffff, &(0x7f0000000400)=""/186, 0xba) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) fsetxattr(r1, &(0x7f0000000580)=@random={'user.', 'cpusetet\x00\x00\x00\x15_O\xf4\xf6,\xfco\x87]\xe09\xdd~BT\xa9\x05\xa6\xc3{\a\xdf\x10{\xadg\x0f\xa6\"\xbb\x85 \xd5\n\n\x9e\xc5x?\t\xe30Q\x166w]F\a\xa1\x10\xf3\x1aC\xac\xae\xd6nh#\x04Z\xe9\x89\x94d\x85Se\xd2}\x1a\x94U\xe9:LF\xda\xf6D\x93\xf3(1\x17\xac\xeb\x84\xbbx\x02\xb6RF\xdd\xa2$Qt\x8a\xab\xc8\xb9\xd0\xda\x97\x197a\xb9\xcdOB\xe0^\x82\xd9\xe8\xa9n\x14\xb9 \x9a\xfe\xdc\xe2]\xff\xe8\xee\xd2p\xeb\xaaM}\xaa_\x1b\x1d\x7f\xa6\xe9\x10\xbc\x1f\x04[\xe3\xae1\x98k\xba\x8dZ\xac|\'\xbf \xb6_\x01\xa6\x8c\xa6Y\xea*Q\x1big\x17\x97\xbcf\xa1C\x02\x0e\xc8\x96\xa9\xfai\xda\xea\xaeD\xb0v\x06\xb9+\f\x97n6\xb0\xba\xf0\x1c\x01\xdd\xf8\xd6\xc96\xe4\xd5\x8b\xcc\xfd(\xca\xf6\xb2\x1d\r\xe1\xb5'}, &(0x7f0000000100)='bcs\x00', 0x4, 0x2) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1429.209429] audit: type=1804 audit(1590041320.467:2712): pid=15746 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/780/file0/file0" dev="loop3" ino=2 res=1 [ 1429.236528] device bond82 entered promiscuous mode 06:08:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x204200, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$DRM_IOCTL_RM_CTX(r4, 0xc0086421, &(0x7f0000000180)={0x0, 0x2}) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80800) ioctl$VIDIOC_G_EDID(r5, 0xc0285628, &(0x7f0000000140)={0x0, 0x1, 0xffffffe1, [], &(0x7f0000000100)=0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$SIOCPNADDRESOURCE(r2, 0x89e0, &(0x7f0000000000)=0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:40 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x0, 0x0, 0xfffffffffffffffd}, 0x4, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x0, 0x8000000}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r4}) [ 1429.332507] bond82: making interface veth469 the new active one [ 1429.355866] device veth469 entered promiscuous mode [ 1429.395632] bond82: Enslaving veth469 as an active interface with an up link [ 1429.424700] bond82 (unregistering): Releasing backup interface veth469 [ 1429.437867] BFS-fs: bfs_fill_super(): Inode 0x00000003 corrupted [ 1429.466716] device veth469 left promiscuous mode [ 1429.544359] bond82 (unregistering): Released all slaves 06:08:40 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xf5ffffff00000000) [ 1429.582337] audit: type=1804 audit(1590041320.847:2713): pid=15800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/781/file0/file0" dev="sda1" ino=16334 res=1 06:08:40 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x10001}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180)='TIPC\x00') sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x100, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x2}}, ["", ""]}, 0x24}}, 0x4000801) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x1, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xbd}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0585609, &(0x7f0000000040)={0x9, 0xb, 0x4, 0x1000, 0x3f, {0x0, 0x2710}, {0x6, 0x8, 0x0, 0x6, 0x7, 0x8, "2c7f21d0"}, 0x8, 0x4, @fd, 0x400, 0x0, r0}) openat$cgroup_subtree(r5, &(0x7f0000000100)='cgroup.subtree_control\x00', 0x2, 0x0) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r6) getsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f0000000000), 0x10) [ 1429.662346] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xd) 06:08:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x6, &(0x7f0000000440)=0x7, &(0x7f0000000480)=0x4) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r3 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$unlink(0x9, r2, r3) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r3) r4 = add_key$keyring(&(0x7f0000000280)='keyring\x00', &(0x7f0000000400)={'syz', 0x1}, 0x0, 0x0, r3) add_key$user(&(0x7f0000000140)='user\x00', &(0x7f00000001c0)={'syz', 0x2}, &(0x7f0000000240)="8431db63", 0x4, r4) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) uname(&(0x7f00000000c0)=""/116) [ 1429.816737] device bond82 entered promiscuous mode [ 1429.911727] audit: type=1804 audit(1590041321.177:2714): pid=15893 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/782/file0/file0" dev="loop3" ino=2 res=1 [ 1429.927306] bond82: making interface veth471 the new active one 06:08:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xadac, 0x4000) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000100)) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1430.037513] device veth471 entered promiscuous mode [ 1430.080559] bond82: Enslaving veth471 as an active interface with an up link 06:08:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x2, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @perf_bp={0x0}, 0x800, 0x0, 0x0, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0xfffffc38, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="ba295e67b4d8a6b52380c4337417566db3da1ec83859b7f8adb98abb2a730bc15ab499c7a95dd2d6f7f5551773b657a00dd1b7317a7c92ab97089839c86be9199b8ad794617c749af638b0b6321b1278de0c0df04ca4789037b7adb8e7b0eb4a2a6a401393b9457775d114209e5e8835c311a678ccd28a5a93a23b2b3543d343b160418a04cca58829981ec3c0eea985d3a0d82e38b8e6c769405cae8fa81577cae92a6d25c595925da2f05a6129d42b0d41711b15ba862406c3cb7c84ba1bdc7a110102d6eb0a52fd4b825443cd16b25a37a2a8d7aa453c4ecd182ec7296a93680e87a25fd6653851f6811e6e649c29cbd5ff6da3d7f9861bf371201daa2cd7fd5d8868b719d642481fa53cbb5723e9daed9ec39da2103d10b44bdfaf1f834fb5859e1e94cf564406e334604a8f8f7311fa8aecb839df4415ebc2ae91aec521174da4e0121baae17f25692824c75eaa03ab347505251515e19cf71cf6761188fd105f007833232936fd4382ba6f8b878d2e2961f65ec6f4b55a03a41264f441e0e51f684f1c3176f04f48385b9d536ee126ba15fd7fed0308b291fd264ae1b1eb8497e6e17ea8", @ANYRES16=r3, @ANYBLOB="3f02000000000000000001000000000000000b0000000013001462726f6164636173742d6c696e6b0000"], 0xa4}, 0x1, 0xfffffff0}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/mixer\x00', 0x80, 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) sendmsg$TIPC_CMD_GET_LINKS(r4, &(0x7f0000000100)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, r3, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x73}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x24008841}, 0x44) r6 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r7, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r6, &(0x7f0000000000), 0x10000}]) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000300)='./bus\x00', r6}, 0x10) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xfeffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1430.220496] audit: type=1804 audit(1590041321.487:2715): pid=15906 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/783/file0/file0" dev="loop3" ino=2 res=1 06:08:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r0, 0x8917, &(0x7f00000000c0)={'bond_slave_1\x00', {0x2, 0x4e22, @remote}}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1430.358519] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:41 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001, 0x8000, 0x0, 0x0, 0x6}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/bus/input/devices\x00', 0x0, 0x0) write$FUSE_STATFS(r2, &(0x7f0000000040)={0x60, 0x0, 0x4, {{0x8, 0x101, 0x0, 0x631, 0x6, 0x3, 0x1}}}, 0x60) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x2}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) umount2(&(0x7f0000000080)='./file0\x00', 0x0) 06:08:41 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc00000000000000) 06:08:41 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0xaaaaaaaaaaaae4c, &(0x7f0000000080)=[{&(0x7f0000000100)="cefaad9c64d56249cd8659d7e60e1b1b1bb83c000040dc", 0xa, 0xfffffffffffffffe}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f00000000c0)) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1430.531236] device bond83 entered promiscuous mode 06:08:41 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xe) [ 1430.613566] bond83: making interface veth473 the new active one [ 1430.648846] device veth473 entered promiscuous mode [ 1430.692593] bond83: Enslaving veth473 as an active interface with an up link 06:08:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={r2, @in6={{0xa, 0x4e24, 0x7, @empty, 0x3}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000000)={r2, @in6={{0xa, 0x4e20, 0x8, @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x43}}, 0x5}}}, 0x84) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$TCGETS2(r5, 0x802c542a, &(0x7f0000000100)) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1430.743409] bond83 (unregistering): Releasing backup interface veth473 [ 1430.794530] device veth473 left promiscuous mode 06:08:42 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xf) [ 1430.873664] bond83 (unregistering): Released all slaves 06:08:42 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) dup(r0) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x800, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000140), 0x4) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000040)={0x8}) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000100)) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1431.004575] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1431.138064] device bond83 entered promiscuous mode [ 1431.224047] bond83: making interface veth475 the new active one [ 1431.265044] device veth475 entered promiscuous mode [ 1431.280269] bond83: Enslaving veth475 as an active interface with an up link 06:08:42 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffffa888, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:42 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfe80000000000000) 06:08:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, 0x0, r3}, &(0x7f0000000700)=""/250, 0xfa, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$unlink(0x9, r5, r6) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$search(0xa, r4, &(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, r6) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) [ 1431.501207] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:42 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440)='l2tp\x00') sendmsg$L2TP_CMD_SESSION_GET(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x30, r5, 0x1, 0x0, 0x0, {0x7}, [@L2TP_ATTR_IFNAME={0x14}, @L2TP_ATTR_SEND_SEQ={0x5}]}, 0x30}}, 0x0) sendmsg$L2TP_CMD_SESSION_GET(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x54, r5, 0x400, 0x70bd27, 0x25dfdbfb, {}, [@L2TP_ATTR_L2SPEC_TYPE={0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x5f}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @multicast1}, @L2TP_ATTR_IP_SADDR={0x8, 0x18, @remote}, @L2TP_ATTR_UDP_ZERO_CSUM6_RX={0x5, 0x22, 0x1}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0xe04d}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x2a}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4008040}, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1431.670720] device bond84 entered promiscuous mode [ 1431.733704] bond84: making interface veth477 the new active one [ 1431.748287] device veth477 entered promiscuous mode [ 1431.770728] bond84: Enslaving veth477 as an active interface with an up link 06:08:43 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfec0000000000000) [ 1431.797537] bond84 (unregistering): Releasing backup interface veth477 [ 1431.813029] device veth477 left promiscuous mode 06:08:43 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x2c) [ 1431.869561] bond84 (unregistering): Released all slaves [ 1431.962588] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:43 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000001580)={0x0, 0x1000, "701a2776461d7a93e2de64a256135641f58ea0a6004e20a3ef663f14daf00b98e7b093da06972a48657e74fb8f846a09f7b842cc9edbed44ed7000be8aa93299dafaf690f15ff68c6daeb71c0237944872bd0ace3f312e66e7d27173a400c96e52e8c45394429bdbd5313cc2a53232276b263610e6d37756fd28abdbd5cfa6c3414ed439f56c8c8ded6b6e7cedd2194cb61adc4936ee38b8b468a6b8c7f97318f39af07237c1d83d1676eaea35cc772d1656ffb296bf5d5e9bd6360446b5f58d21a2b51c39f4a5f0c0896facf10c498468591a66744a2a4a59b777ca185bb87bb79dcaffb8b6aa1a580bc5bbb5e0d1e87430ef43e91aa4283ff0a13df78d2fab09f26b6ede58e0352d804d9b9a6a67525c6c8ab2d148a6397bb0b5e8dc44f89628cad1ed054145e2efadbdfe50e3cac16fe00cfc80a90b9a5249e0fb132f18171ffe12bd9d7d8a09f23432b1471e12f28a2c851a33ca2c576c3ed4fabbca393bf7f02680d76330b2b8ed1332a1ac6fd7c66705a52b2b83a72678ea56d0b2c5bab59cfd1361e8071f7c75fc87ab565f992c2008b128075f2359535f2ce50805e479868e6bef0a55149db2a7b6bea33919dab130635046e78fb155e211824b48f42be013feba63bb02470a08a8830c08ae99269efe6c26b8f5ae1ab57665aa02e890ac7a18d47add1adeb5e7e3a9af9212fe91992e1c3c27a0bea93afaa6dcf4118ae9b558eaa6a7eec0950e28d501a2f721d7fdfea1a1244750fcf6a8a865ada6a8ef2d3ed9433d315f5b39e892d7cc1f707d802b69b0047b993ea26e9a2c0eaf798664bb5d05da472f412f78c9884555b367fe2bc6d6e19c40ec3398ebdb1b830db1a3cb37ae5d0f36d0e12a0e120b2ec9979727cef7061f18f701ee22ad44578759420b3d5673e9259b7479db3bbcbc72f8699bee4f2df48f7d348630ddef3a9323b0f9111f94ccd1106f6264795078a18454ce9c1e713ce70e254cb788118c029e04c4a5ec21bdc1ed188844b472b31b61f1f9d231bab92bf2e6dd782acf4afd6d5f946bf9b3a5611d97a2497ff6b9026cf5b0060d339282846eafdd1cc785adee04d1f0f47a3d16a8946fc71e0a0a68899c4b17470542c4f69a55ddca8fc39ad6f336f34791e5d1c0a9e7b4f2ea1500c255a188038e96e9d72551444a5284bd3a7c38e114ca5d875ffa574f6c1483e069c94dd5012e1937d17f2705f9344f481fd6dd83a70b0e1c8e87ce03532d77ef97647513dee8d8bfebb9be6f06a833f99b849c6814daf6cdd5f552d1ec6fb4379356c2b548f0c533069687a9f452dbba85b6061978581f28c12e7ca543d07a67183ee4c43e76000ba50b2a2c9db44868c7042c31cdd0292afa40c7f8275fd8f4084430ef29934836ac44e93a096e284f187552e2da50362e287a9134d7c3fc6b061f889cca1c0cf8c1497caa4e636f3f91d7e5bb5c21d0442a3b2d521736a237de525417d7842b93f9ba16ba0f1336eb7c8856afd34a4d4dcd9f1e61e67928ea38d5605cab3d40ff86370e91b7db7ac17bdb2a1c661e6c4cd0bbcf00d65d50165769987508b48806c15aa033437e9f6c95c1b3f47df0efaf46f95428a7f05526461e787ea8ee5c0b13373034b0f9d5671dd63db851104734f9d34b953c2619b179c7ed4c6d8f74356f44907ee09ce83a9b4fb3c88f902007627e6010ee490643b9b17dddfa14990c5c5a1a57c0c6dd2b0ae47692224eacd1edd0193d38cb7edfffefd32438ede9212be863743c7ee732361481876312b9e3aa251f24f6c6e120b8b364a20fcee0b363aeaa6f231256201bff31a73097ee1d6723adf6fbc604f4945f74032c9808df6a76f3b664a339413ca3f84039944519ab81fecb2cc22e97dd765b876a8d763f33aa18483131769649cd405a10519e5d9628808d8870dee7b72be2384ff8a1f1bb8098ebc85c0b3f1a28598def46ca319b3021bf3e4ee62809e1d8fbf9c0b5e64a9cd71fb76a8a2b1a7c11c0108ec01cb4faeb231ec5fa98bdbf5e4146e8fa1f594b1796e8c0e3542db1a80117cb17d42fc693fc93647d5104e824b5f6a8c8f287898359443e922519963524e9093127942b5e6d8538b5758f7ff8547afb0e978aac3f1fe56cc41a639b58e7fe2fbabe177eba4fe3f0b57a88f8c9ca782945bf7932cf1377d18167d7bfcdddfb2ff7a2e2df54ed3f9e796f5e00c36f1e31a39428924f4baa432fccf9c09142d356c20320316e1a163c9742856d9322d481cbf15d94bc073a5412470d305835d8a0bb9ebac5def00b2e9c7db5d2690b761c495fa713d3cff0f8b070bf9ce73e59203ccb2de9d3af226b94e9916f4031111bd9c4ebb2eb31d3743962b15f91ac46460d828668febd98e054c3017ad9bdfd508d4654c38ca3fe98877574e8dcc45fb335cbda294beef338d63bbdc627b1b59fd2d82ed0fad67a32d11212b8dca1a6e6580eebdcb12a499964d8439215dd134514445fc55f0f675b9fd34bcd384965c22f076bd6427c46ff1d3de151e8c67772642a03a7fc9beccb2b50c93cc1585a9831a83ed942be5d7d153a18549dc7f2943b54fcfc3715b31dc98354d493e6bdca02906441cf871629232ebccce4ca2fbc77eeec84a5ab98fd6ecd5607f4f6358e6475177db9b3ce1c75cbfb71d26804b9541f4d64350202624fb77ce77999a3653ab1825509cf96f5ec44cf339f14d76200a74220a037525bacd08c8ab079c657348545e97e18f3010c17d80ce7fb39bd86412d9eb030ee0f769e9042d4ea0e9cae246fd4501514dd803ea156202bbc01a5f14b7314144bfe78f063175416f880d06d0950903925605bdaf4ebb4d6625bcca2abc3fb6995d4c57e555552256bd462c93f4ae87dd461f45d92a90e7f315fe18852836c2a3c2a534aef8a53ff918e4694f196a390ff691d3039eef1b801228ab831c13386fcf0a32ed14d7986d023bccf7f5a6abc4d699259024c290de1cb628d3ca461b5f3db4486ca14b4e3f9ea7b8e6ca6d3899c4d78f7c620d16c207b4edea7e79131854f834c8ac84ecd97fc5b36fea25275a07bd2adb8405697ca46f96344d2a0b412c5c1e5056176726a9a6621d8b13ab674ea9e313d1fac84fa9149911a02f1b86d064919473142c09cf55c40070c8ebc5f8a8c2c70f94e4b0758fb553743a3410dc44d3fda8895794cf9cdd2da1e22377fdfe70a60a3486632d144bb20f58163ad5fc30c398597fa1d70dd520aa9809449ea97c6f92f125075f91ab68ccbeee7165bd768456e6d6e32662bbcb19e715f6312651011163c099e63677564eb6d1dc3d07c30e81690979e5a317695e3ec7c2060c8e7c1e72b8ccbe5671b95de69d118ed3ddd273a968fd010d3cd647e20a8b4101925d8b2db2c565e157e366942c055c89e423388792c0451238cb8eaa5eeaf9a8a9ca1278f4061d350573335b705926aff26824b261462cdd65ea41459b7de36f37eb2e92ca62ee28952a57e5dd3b4e2b8f4383216e2135f06610ed3b5bfd4e3d1448b199a4679f014a9a53d0f901fae420913ea93f1b1410a7eab41123937fa091d73799c6cdc4da00ff37b5675932bb07494101c0ebd66568aa59e0d7565ba769c192181d1b7a4b20bf0bbd96fa3c0882808ce1921ec241e8a8adde102c4969978bf659a2a6fd858762fc6b3bc5edb03c928662d34896fd171c5f525927e1eaa701b9cedf2f36bfcdc39914c8151e5df1e3c140d97602dafa6667d5c3e330c4acf8636b9c8efb1992550d0a95dd2075b09b02bb16cbb9df30614d9fa422972f8d83025407a4f8f0a544eeb71a1de52c85ce91aae60631ea3d0b29ef2056f25c40272ac5908dfc45b130306ca4d9322bdbe9267cc2591aa71f6f97907f9202cd97f140a9e365d613dae489f053a0f582f5c0cdae63242d427124cf7b2b00cf15cfb4a6a815d37aba44f504cf625fff8df0e7ee9eb0607426e79c12e32ca60315ded944195179f07f8718c96577a7baed4bdcd5be11dc613e4b9177f7738fa30edf9225619207ae87955cd2e1eeec712d5740054dee7243dab329552fe339c46e5636c70cc5f06ce2bf1664658d2f1412be4f6b3970a62d0bd0786ba25956ce8abd94d4e6483917be33b725465729a0a748f3ef4a4ec2f1a6e4bc4c2300c7037186d20ec3450cf221258f282f7bd12a6a2e1eec0bdded580069f373a689102a7398a4415a77946cb3938af1c6f0af3ac02ec3d093b2919b292bf9223ae7e5eac4795706d932284a628a75f3b395cc2bf6e0d078d36a38880edf698ee8eb4d49af4d1849c1b4805932c5b4804fd451b0b17de46717ee32a0e094963aa04d45bf37692f7aa8f1ae9909414f71e01e6ac18269520aa23a876a668074442562b5d4cf25fd668a25b0edabd8af6261097e73d3901e3b548cb6284662597df6855e8d02f49ed9dc1bb34c54c9eaeebc8915e4cba7974897f89c65d59d08f74bbbd8d67de450678844fae14dcaec26029c956f511b4a7667050a7af066e1853572a08348234f5d91f14c587919e12777e8fe7730041d34d21bec0a194d74d171475dcbd17bd7edcb3b049d15d3f3083bcb976e2c5759e51ad07a7f5719fb60b5ba3163e7c8922f6d12adab2d8e2903b818086b9b6f8c121da4ec077ad3d815a7d63ceba979f324708853392d43be109906d069df6deeb32fc7f66a963def93a096d6adf0d8a8a9f795ea886220c4f2df797f618b109f9c4d021c45a868d8efe18211286973aa0bee08009b455b1a7497c65848da9fe3abd9ae52f36ed0a81a9d61c884338836b65127f7606d3b7718d04674ec8dead32d9a4c9fda33f0dcce0b528c3bc3a4ebb09a11f90becee667e6ee376c6125aba1e8964a6293cef32e3a9924f943ee330bc087ea392005d39c37421e3cdea88388d3c0445170b926f010aa1ad5ccd76db29fad278ceb92fa1ea5ea06b707a20d7115e6168107d9e4f9561929a222bb13c402d43e838b31e4f41b7df5ad8bcebb7ec7e3004449fe9ca5c047f1b89f27d6e4f672aa71d2cf9fbf78179009719b8660ef26dd0639320c76499b931540273af492ab434a9fe112fb6944fd196ccc4a93c6c892113a45b430feac55443eae21778de755c7ed02e6c9c75bdae181939fc8d6626800f7aaed9f35fe51ff785e2d9a5505a0785c91360e7feef128a0227ff4e9493d8e7f4f37617561605ac55ad658c2f38d5992b8362ccdc66241e9515af8dfb118c6f9c51328bd124c845fc1fc134343a425201ec5193ed180613244d2e8538ce96f9f469cb3058d2bef6b2796204a8ff50a9e0f6812b9a2096690464bf731297384e5bc226eda63776e954ca886f564952b5db69c44231f701eb3d6627a35537bed89f949384c46852a30bfc3949ddba987d5e7101323502e64b9e0fa2405b4324b05aa1db7d4eef34d202f1a62139f70af6378639033031175dbb6c58ca19a5339bc3f971e560c5a3b96f6ee4165f0a345ea1dd5efb17f320ffa366f4352dba7cd742a8340472b29947821c5e7d15c95fbd5338cf72fa305eef6574a5f97d46b49dc3b8a7018ec59d1362aad1f6e48f1c3b08c9f64580c58780bcf539b29e3b8e8e020463544efd9e9d824f119d95fbbcc1baa6c5da42297da2d5dfbb9ae2873da132aa06eef5a5ac49ab6b037fbd202f04256b72ab86cdcf3ce195a6fc4138c9849acdb48c8e165c5a1de02559851ba3253cc23095d12d0d89341ee901c40c729f950e4d7dd4818b30ce6e223011f8c9cf25d96817a6b8364d3b3479754e22d1941fcd721be3e25fb3c26929ad12d411ddd00c9c3a1dba5fbf02e"}, &(0x7f0000000300)=0x1008) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f0000000100)={r4, 0x2, 0x401, 0x5b9, 0xffff, 0x200, 0x7, 0xa03d, {r5, @in6={{0xa, 0x4e21, 0x10001, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0xfffffffb}}, 0x3f, 0x0, 0x8, 0x5, 0xff}}, &(0x7f0000000040)=0xb0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000001480)={0x0, @in6={{0xa, 0x4e23, 0x3, @remote, 0x6}}}, &(0x7f0000001540)=0x84) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1432.063876] device bond84 entered promiscuous mode 06:08:43 executing program 4: syz_genetlink_get_family_id$tipc2(&(0x7f0000000000)='TIPCv2\x00') perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PERF_EVENT_IOC_DISABLE(r2, 0x2401, 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0x1a}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x6c}, {0x0, 0x0, 0x4000200, 0x0, 0x0, 0xfa39}, {}, 0x0, 0x6e6bbf, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@broadcast, 0x0, 0x3, 0x2, 0x6, 0xfffffffb, 0x20}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1432.144474] bond84: making interface veth479 the new active one [ 1432.165751] device veth479 entered promiscuous mode [ 1432.197235] bond84: Enslaving veth479 as an active interface with an up link 06:08:43 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xfffff000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1432.438669] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:43 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xff00000000000000) [ 1432.546654] device bond85 entered promiscuous mode 06:08:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x2, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000000)={0x79, 0x0, [0x9, 0x3, 0x1, 0x9]}) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, 0xffffffffffffffff) [ 1432.622238] bond85: making interface veth481 the new active one [ 1432.651817] device veth481 entered promiscuous mode [ 1432.683144] bond85: Enslaving veth481 as an active interface with an up link [ 1432.721545] bond85 (unregistering): Releasing backup interface veth481 [ 1432.747900] device veth481 left promiscuous mode 06:08:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x60) [ 1432.835086] bond85 (unregistering): Released all slaves 06:08:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xffffffffffffffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0xe7}, {}, {}, 0x2000000, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1432.940978] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1433.024293] device bond85 entered promiscuous mode 06:08:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4, 0x10000001, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) sendto$rxrpc(0xffffffffffffffff, &(0x7f00000057c0)="fabe1074a575cbb38a49310f0c728764c971600a00575f5ae909448bb3e45ff779b639c895df87f925f13f7bfdc97e0b2906d04a64147669b0ba1eeffd618e1849b5133cce60fa94c93c4e257174e1b8af9094e91c567c8163291949cb24f403c468a99f1d7e4cad89884e0821ccb97101a242bd56e475d74768c956c78c9ee5dd37dfb51b2d31b18984c1f80a3f2059", 0x90, 0x5, &(0x7f0000005880)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@dev={0xfe, 0x80, [], 0xc}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff80}, {0x0, 0x3}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendmmsg(r3, &(0x7f00000056c0)=[{{&(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @multicast2}, 0x2, 0x0, 0x1, 0x2}}, 0x80, &(0x7f0000000100)=[{&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000013c0)="0c4290888fe154520e52043b59e50d956a4d25d47ca75974aff1062cfcfd1e0b8a35f94a7a15ee1272bddfc614a8e2435e3a199abf744774f9659d8c60b7bf8ebb67ad41cb6aecf375738cd902168403df987009beb471260a69745f772b63f029d0e6f358d5d89c32a911ecd8e2419dfce2ee31902803cb127c1b62755799cce8330e5f64fbedca42189c5ca6774a9d509638b14de9755448d17bd2e36ca2351811c4f6e80df8e2b631431fedb455c22af04862f8eaf7c97e3d43ce9efa7a37c0bf0c12af25ab", 0xc7}, {&(0x7f00000014c0)="4436077121feb9bf0f9e1cc5b7c3870a6fd15923b605424319d196165f46eca218749d4c99a74a878100887c3a90b22e6c6a8624363bd2b638159e2e1dbd3b93afce6cb1b42ee05d1f0013205d943d5ab282c07e4d9d7b96d7eaa34c472c9266e104903d32b9f28d454e490d4fb21bf55afe5bd05c0ffdef1bbc20907e5e4c63949bde417cde0dad8799ca7aba9161dcda768c76bc48ac8bd05365b9cb0687dfcf8d051c5b6656813bfc7f889958242662d1ecf873cdc3f44802cdce75f2dcff3d0d2ad7153f4017017f063b91611ec8dd3c2f3f338663f8d7148ca301263d3790ceaca108488b21b56044df168a", 0xee}], 0x3, &(0x7f00000015c0)=[{0x40, 0x6, 0x5, "44310a2ab3a98d23d4e6ccd82496d9d64bdae8921d15d38e31d54fde7803af48f8a9e35a804c637f56b0"}, {0x1010, 0xff, 0x7, "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"}, {0x1010, 0x1f1, 0xffff, "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"}], 0x2060}}, {{&(0x7f0000000140)=@rc={0x1f, @none, 0x7}, 0x80, &(0x7f0000001300)=[{&(0x7f00000012c0)="76a3de88bde59b357d272c6547b6ee0024df013904a0724cab7f3600d8cc7dd76b1cb724f3334b04f31827", 0x2b}, {&(0x7f0000003640)="a1ed9af634003ac0cf47648fcbd5fe081122e3794e173f64f4532e36144870766884c0380f8b3b5e7744e2f4b4ac8c2eb09d1d222437faabec779850c1730bb0e4089383ddd2667831f66efb37c93415a5f27d88c88f31bc78359573168ec84c3d35c188313f6bf9b5f1301b3f534f93369a9aa63973427ea0257431e16cc3cb2edfcb71137f432071cceb7bc86483f9edf553134ffd003597830bfe0d3e2cfd72f3e029054f509b8597ebcc11a04ad29cf8", 0xb2}, {&(0x7f0000003700)="8d0e0938832218e8f94d6e1bc65ff8c4846dc90ec18a9dc6f5da4597c33d7fd1cfc2c9d47dde6d869976b7590766e0178c2f3ee3467805bb13160ed765271eb50cfd0fbfec41cf34d9e8267a1149a42de3e459525ed467c74c38ea07b50057db7550a0114d62b9f0e7415005084dd6da2ebdfd4225dc43f17cec5eb1649a98878f0e953f3ee410f4bc62e058e8efe72cf855b343f239f8bfddccacfd93b638084d099df758ca74dc1a4b18cd6a76406a1a2fc619306ea1253a11981ae3a37d16130b525d5d037109f5379b188936bc40a357d6d788ee37332c6455d2f7", 0xdd}, {&(0x7f0000003800)="dae3498b52c98050401b19b2917bf512084e7e4349e04f195023ced9a1bafdaa977935eda18245a5ca35b06139bac959d5120296bd4fc4e428f8eadf3aa923b0bd380e36446de43322c5490f7a10122f5c49e95cd2b9b9f426e6523129e6b1c8d310e5bdde7c3256b389550dbb848f4e7dd5fda25a49b9785df6011df8d326906c9a98fbf14c8f606aee3bf0dbfb493eb940e3d7b1e1f8e23d11367c7bab2b5e98145833bf4c09a93932db5fd6449bd18b3081e1eabe1a11cc88dfb8c304a70b1f2ca1b7370b611f068f6e99978aeb38420dd8e55be89549da235c3ab0e3c557a97e2419486783e995", 0xe9}], 0x4, &(0x7f0000003900)=[{0x30, 0x117, 0x1f, "9523e83836ac5af33b4f434d6fd9b0ab3edd485e667b4eef5052143ff9"}], 0x30}}, {{&(0x7f0000003940)=@pppoe={0x18, 0x0, {0x4, @random="f7dee29d6003", 'wg1\x00'}}, 0x80, &(0x7f0000003e80)=[{&(0x7f00000039c0)="2e271ebdc199f45d6c4afce0f33c9b54b3280bee3130a8f426caababbda3f4deaadb22c03548b71bb33e628d5f102f91e06c68d0c7f7202459461252eb01186e957ca8aa8dd2a085254db213611d5c870e80c57231b3c6cc12c77df097abfd36a959868f13843baf85fe2d5acc1900821560b61e679258f56b3ee25cc3b88ed7f79fabc5081dc0470a4087f5faa7cf9af0", 0x91}, {&(0x7f0000003a80)="f2f4f9f203f10168328aef797eff8c9ed3ad58f197249aef656089e31e264715d97c8a2b29658787bef414a7c04af68b5800d6f362deb773a34318e7b2c17b5046747f767bd0281dd85349ee93358668998e77ebdadc159e839bf8ee496d0a6e2a1b959d222c8270855eb30adef8237ae231f07ab744a7193f004768ee8c2a8fc6b6d08f76f680b8219793712b3b1643225d95fec71e3bc89597863e69fca4a3107564d0cd45ba57a0685fadd52a4db8ea171aeffdfa010ffc", 0xb9}, {&(0x7f0000003b40)="5c37feee4f570750e65f087b6c372f5f1dcbd089565aabb1ab4c71a0a155e40c6dedc76bc3354a85bf000e40892962e9dfe7196f128e79ab269424942496c97394d61bde1bbba61555c5c5164477", 0x4e}, {&(0x7f0000003bc0)="4ab8dd324febfa10fbc528f89e258775704c1bff3d9c93e2721fe32d1fa06dbacf0740f8168ec1a8a511b3e656086ddb809700349133b253392252442e", 0x3d}, {&(0x7f0000003c00)="9c7f966112fd5e2e3fd5d029f87feaa5ca41e8889f1de685726600d7c6a9d0d3a555a0b7053ff2d8d31047c82fdcd824275fa66477e1699791605a239173ca002edee3ac5cdab8c8ada2dbab5ce7d6be9b15c7ee613bdd5c2d9989b7e5ea9a7e634ba5ed95cb26dcfe60fddce42c2661afe74497ccb47bf29924ee4b1214a9757af5c08744b5749be340fcb7078be38729ba01bafe4fd27b57f72f4396348ee78fadfdb47a51fec4218e6e51b8ba435647b8e06733b2d2f238e710953d055ff03d80a9b0bc40cc6307", 0xc9}, {&(0x7f0000003d00)="a1ff8b4d03bce990f81cfdc28dec5dd4f6d5cee1fbff5f9f3aed229210ccecfd2da1b5cd71ee6fd2510cf9ff8a01d46b742e00", 0x33}, {&(0x7f0000003d40)="9f1ef5d93df2da2e1cf914c96308ec56718a5b05005030a8075a1872fdea31691496e091b50a1f61cc6161a9c7f61bbb2e1c423168575f5ace3bdcd69d221bb2b8a73b6a4447", 0x46}, {&(0x7f0000003dc0)="9e3b78", 0x3}, {&(0x7f0000003e00)="7f24572cd35689f0cb7b2ef44b7a0c4503ae55654c16b971cc1d24afd4340888d175c08332ed525f6ee55b8fef0b1f8529c97687476cbf9ab263ee937b0235a009bc7757d42c6a1b9b61944a79b71f9e6cdc5f4ffc16f0b61f8dc7c9d49d8b8c33bd72184b1e447e792ed6b0668f6ea300a3f88222b0ccf448e39310", 0x7c}], 0x9, &(0x7f0000003f40)=[{0x70, 0x10c, 0x80000000, "63011d561e8c13443ca9c849342d8eb2b90242bca966c294eac0ac22a05056155f17809de7e100fd4bfd328e231e266b35e8c2d62865625ac50a2f03b7f1739476e107aec0ca88c1765616fc1559a0a680a0e76e364d6952327374272a03"}, {0x20, 0x3a, 0xb6ba, "69134025444ab21db91be74adb"}, {0xf0, 0x1, 0x66bb, "37548b01955ec0f474addff0454d2d8b4e734cd2881f72a4e3ce80a7d95d28897b00750ac062a73614386813327e2c8e4058f0dffd20f5d5f5625d7b311483b61851109cd90df746bd7b21375234655a3d9b2d59448a40d773b1645300d63221533e3f271da47c551303d7c83e55e7976facfe1549f1e294f6a7b901dc8bb0b215b62ca80a6c683a4de947884611204712930e251f41637124e648ead269a61a3de5e884ceb10fa10ed0a36dc855c84934af1def6b7534b4647094d8ff57d1151e9a916d37ddde251593022e0a6baa5b81dd7318a3e8722e967c4f82e26e95ed"}], 0x180}}, {{0x0, 0x0, &(0x7f0000005240)=[{&(0x7f00000040c0)="1700bc8cb89cd6856d2d0452a502640f3d7fb453445739635839dc2319e098ac869b5efc75de2f187c9d3b3d55db323d661b0de6abc922ae62c36ce02856f1e9ecd3058d9576c3958c45cbac68cd6a1a31e313ebd58a2ee536d3c9ab9c382e022393116e87e9f7b039dbe2eba8998da488253b08f62e7d56e3bac08ab1e6cb10a7658747e56cdbd24cf2a4862b91868b8ad7e5030ff64d681f5d1eb718beb0fc54d12772aaefa2e547270ae9e296c4a5cefd85c7a16626b2ee80970faaffdc3ece2a3bf984d3770527183388042d0248dfe652755f1110c8f8c0cb575feae3b359c7c5f0d12ac82b28d2cd2bc1bedaba223c8816", 0xf4}, {&(0x7f00000041c0)="967eef972aa5bc4dd17624e799be0b2b49312ad764eb77a6d44a2d5fd30d5583b7866a79028433268236a8b49d151a809ec5b3fee7531d97891f1b123f03239ff9a13e13915351f08bde0d9bad", 0x4d}, {&(0x7f0000004240)="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", 0x1000}], 0x3, &(0x7f0000005280)=[{0x48, 0x1, 0xfff, "10cc3f7c214e11a67f1b0bd5c71dbdb62e21e61ec5c42c3740f8834d39998eada947ba226d7cd769645811050bbfc90feb2fc13e9a1139"}, {0x48, 0x29, 0x2, "8ab463b0f87c6de6d26e8662efc75fc5a4ad43e23d8b7d9562a3010e46ed83d72480fc079e8dcd4b893034945f4d36b22f578c5def68860f"}, {0xf8, 0x101, 0x0, "0db9f3ab03fb6bbf121ee30202996fac10a0c5d32f9164d2ba840aed82768187ebaffa1eac4a9ed5626db1bb12a84324a5d7fabc6f718616bdd4cf58e9375577eeeb11ce493b6c77851ec2916fd2449bf8eed82129004aa73e2cbaa8a8d19afdb399ad9239ae9fcfbbeb607144f068f270344745c7b9396ec580b53473acc848166d8b650f393d854c7f159e2b6c18670c496a35b4b8cfc338266e0d5926d19293812518cd704f1c2ea678244e716e4043f355e95115106e41bf21782acc3382d0f7fa358d240637595f814f7d6153af3e1a4789bd80dfb215f002fa21da11f7dde1"}, {0xc0, 0x110, 0x7ff, "0473cb5898822cb5395487fd5b8f6fa72c2b38215e8f4d2a488f9df427a24426df61efe0e625c454039f32c048b30f9cda6d4b800eef6f8aede906686accab5840d5224cf03d7618f19c706f3697d5c255b3d72300105f9470150da6f0f7e65d7128e3514c0eb6cb112ddb07912c73068735381b60beaf059ff6192083d18af703ceb536de1a2ccf269d08a8e39f3c3d5b93b6ca05273a777d7c1c38fc9c4130b9d4221d90e1d8c7cbd070545ba5"}, {0x70, 0x10d, 0xfffffffe, "ea6817846cbfafaf371ecbadb34acfd2d328ad36c8e0df878b4a42c7e6faa0165628f311649e4c108524cee5682733e80ec2a30fb86049a1cfd18d2cee09d88bb57a32adb82842c130bca10e92222502a7988897435f766927"}, {0x58, 0x1, 0x3, "c76b7a9e686ac64a5aa6ee6ebddbfa9d415fdacedb4312e85d530c97c28a012287a878b4491e50890c8c85d22eeef84d55eda3cfd93cddc0d9bd8800492530cfbd6c49041ae210"}, {0x108, 0x104, 0x80, "48407fe1d6fd500a228a234cbf0a93c6e3b297d6feef8f5013d75a7b230d06470b7eef7eb0558a64caa5880bba64f6488061006ab0867598c18d3a50ec90e5d396a7a7c034ecd91d443e50ee33e6cb78fc8fabca8c3607c3aeec971623c02d3d5aac62d1cc5ee762e99e8dbe881f7ab848d2f7bf91888e9f330edcd7de278511669427f3af33f5a165b8358dd7413b2479b0ae193cc2e0a6d89cc4dbe93f06dffad454b2e2badc037242314e10ade6b4cdb7ac1b36328117f7f208fd81c0f137ad213961c17fe7caf5a5163a7bedbec02d7e195e59711ad4ec4ad77a031da8828aab2700ab6b390cdf301df88e03859ca743a4947543"}], 0x418}}], 0x4, 0x800) r5 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nvram\x00', 0x48000, 0x0) ioctl$NBD_SET_SIZE_BLOCKS(r5, 0xab07, 0x10000) 06:08:44 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x1f4) 06:08:44 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffff000000000000) [ 1433.137421] bond85: making interface veth483 the new active one [ 1433.176705] device veth483 entered promiscuous mode [ 1433.205510] bond85: Enslaving veth483 as an active interface with an up link 06:08:44 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffffff7f, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r7}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r7, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={@empty, 0x41, r7}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1433.383339] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1433.505930] device bond86 entered promiscuous mode 06:08:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) fsetxattr$security_ima(r0, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@sha1={0x1, "33805ba9e510f0665e6b1aa580f526f685a16a1a"}, 0x15, 0x1) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x2, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x2}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1433.587845] bond86: making interface veth485 the new active one [ 1433.614077] device veth485 entered promiscuous mode [ 1433.632326] bond86: Enslaving veth485 as an active interface with an up link [ 1433.668096] bond86 (unregistering): Releasing backup interface veth485 [ 1433.681996] device veth485 left promiscuous mode 06:08:45 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffff7f00000000) 06:08:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$SNDRV_PCM_IOCTL_PAUSE(r1, 0x40044145, &(0x7f0000000000)=0x5) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1433.742598] bond86 (unregistering): Released all slaves [ 1433.796008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:08:45 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x300) 06:08:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) utimes(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={{}, {0x0, 0x2710}}) r1 = socket$inet6(0xa, 0x3, 0x1) getegid() connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1434.147976] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1434.244059] device bond86 entered promiscuous mode [ 1434.303025] bond86: making interface veth487 the new active one [ 1434.325748] device veth487 entered promiscuous mode [ 1434.345429] bond86: Enslaving veth487 as an active interface with an up link 06:08:45 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xffffffff00000000) [ 1434.356507] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:08:45 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, &(0x7f0000000000)=0xfffff5ae, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:45 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffffff9e, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:45 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x578c}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r2, &(0x7f0000000000)=""/70, 0x46) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1434.487038] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1434.607914] device bond87 entered promiscuous mode 06:08:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$PIO_UNISCRNMAP(r2, 0x4b6a, &(0x7f00000002c0)="fd95331bf32b2694bee4b17042a1dcfbd81645fa293ca887e39726ff3efe1be3aed105472d337bab09afdd07bb8d44f1f36dceb06af4c1096f45b1baa9fd1aababb1b7a621a5632a6457e60547c3f9081d6ea30f73c16665e91ac56b17886c1443764f449007524b75ca4f64b17206e3cdd1820d7609df2c01556c1d4d0ee0bdd9ccf55bc04c0f98ed437385cd20094b68282a551e49a51b85125218cf8ab53462e02f2578909ddc6ac0c930593aacc33d40be43f7e707eef744388d1f278ba67725a806015fb4217a2112d0bf28e80f78937ecb57d315206b247ea692d069c2f77d36f004beb4e762383fff59aade95022c85dc6e97") [ 1434.695765] bond87: making interface veth489 the new active one [ 1434.720694] device veth489 entered promiscuous mode [ 1434.733767] bond87: Enslaving veth489 as an active interface with an up link [ 1434.766259] bond87 (unregistering): Releasing backup interface veth489 [ 1434.775619] device veth489 left promiscuous mode 06:08:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) ioctl$sock_inet_SIOCGIFNETMASK(0xffffffffffffffff, 0x891b, &(0x7f0000000040)={'vxcan1\x00', {0x2, 0x4e21, @local}}) r2 = socket(0x11, 0x800000003, 0x8) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/qat_adf_ctl\x00', 0x280, 0x0) ioctl$VHOST_SET_VRING_KICK(0xffffffffffffffff, 0x4008af20, &(0x7f00000003c0)={0x0, r3}) r4 = add_key(&(0x7f0000000080)='.dead\x00', &(0x7f0000000100)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$KEYCTL_PKEY_QUERY(0x18, r4, 0x0, &(0x7f0000000300)='vxcan1\x00', &(0x7f0000000340)) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x6, 0x4}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1434.853571] bond87 (unregistering): Released all slaves 06:08:46 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x3e8) [ 1434.955501] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:46 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffffffc3, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:46 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfffffffffffff000) 06:08:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1435.206620] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1435.315428] device bond87 entered promiscuous mode [ 1435.387739] bond87: making interface veth491 the new active one [ 1435.420646] device veth491 entered promiscuous mode [ 1435.449393] bond87: Enslaving veth491 as an active interface with an up link [ 1435.486086] bond87 (unregistering): Releasing backup interface veth491 [ 1435.498237] device veth491 left promiscuous mode 06:08:46 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x80, r3, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x40}, @IPVS_CMD_ATTR_DAEMON={0x50, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @remote}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @local}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}]}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}]}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000010}, 0x4000) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:46 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x64a8ad9f}, 0x41820, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x2100) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000002c0)=""/247) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = accept4$x25(r2, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0xc0800) connect(r4, &(0x7f0000000100)=@hci={0x1f, 0x1}, 0x80) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1435.554837] bond87 (unregistering): Released all slaves [ 1435.636599] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1435.718044] device bond87 entered promiscuous mode 06:08:47 executing program 4: perf_event_open(&(0x7f00000003c0)={0x3, 0x70, 0x0, 0x0, 0x0, 0x8, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x1}, 0x1, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sync_file_range(r3, 0x7, 0x100000000, 0x6) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}, 0x1, 0x0, 0x0, 0x804}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@setlink={0x34, 0x13, 0x4, 0x70bd2b, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, 0x40d32, 0x600}, [@IFLA_IFNAME={0x14, 0x3, 'syzkaller1\x00'}]}, 0x34}, 0x1, 0xf0ffffff, 0x0, 0x4}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="00eb23e723685e2a8f00c73e1ad500"/28, @ANYRES32=r6], 0x18}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000700)={'vcan0\x00', r6}) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000780)={&(0x7f0000000740)={0x1c, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x801) [ 1435.797824] bond87: making interface veth493 the new active one [ 1435.837891] device veth493 entered promiscuous mode [ 1435.876255] bond87: Enslaving veth493 as an active interface with an up link [ 1435.914372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 06:08:47 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x500) 06:08:47 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xfffffff0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4, 0x1ff, @loopback, 0x1}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1436.107511] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1436.290428] device bond88 entered promiscuous mode [ 1436.428801] bond88: making interface veth495 the new active one 06:08:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1436.484087] device veth495 entered promiscuous mode [ 1436.510471] bond88: Enslaving veth495 as an active interface with an up link [ 1436.535260] bond88 (unregistering): Releasing backup interface veth495 [ 1436.546185] device veth495 left promiscuous mode [ 1436.597297] bond88 (unregistering): Released all slaves 06:08:47 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) getsockopt$sock_buf(r2, 0x1, 0x3b, &(0x7f0000000100)=""/125, &(0x7f0000000080)=0x7d) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x401, 0x0) [ 1436.693468] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1436.797204] device bond88 entered promiscuous mode [ 1436.854594] bond88: making interface veth497 the new active one [ 1436.897195] device veth497 entered promiscuous mode 06:08:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f0000000000)={0x3ff, 0x2, 0x8, 0x9e54, 0x1000, 0xeadbfc5a}) 06:08:48 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x600) [ 1436.918974] bond88: Enslaving veth497 as an active interface with an up link 06:08:48 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xfffffffe, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1437.131744] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2200, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x58, 0x12, 0x1, 0x70bd2b, 0x25dfdbfc, {@in=@local, 0x4d3, 0x2, 0x32}, [@tfcpad={0x8, 0x16, 0x9}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x2, 0x6, 0xb9}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1437.259079] device bond89 entered promiscuous mode 06:08:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = semget$private(0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r3) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setuid(r7) r8 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r8, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r9, 0x0) semctl$IPC_SET(r1, 0x0, 0x1, &(0x7f0000000000)={{0x2, r3, r5, r7, r9, 0xe1, 0xffff}, 0x4, 0x1, 0x0, 0x0, 0x0, 0x0, 0x400}) [ 1437.322728] bond89: making interface veth499 the new active one [ 1437.343471] device veth499 entered promiscuous mode [ 1437.359328] bond89: Enslaving veth499 as an active interface with an up link [ 1437.391199] bond89 (unregistering): Releasing backup interface veth499 [ 1437.397901] device veth499 left promiscuous mode 06:08:48 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) [ 1437.461352] bond89 (unregistering): Released all slaves [ 1437.593491] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1437.676206] device bond89 entered promiscuous mode 06:08:49 executing program 4: r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0xe) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) [ 1437.792462] bond89: making interface veth501 the new active one [ 1437.829696] device veth501 entered promiscuous mode 06:08:49 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x700) [ 1437.847462] bond89: Enslaving veth501 as an active interface with an up link 06:08:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0xffffffff, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1438.068475] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:49 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xd0240, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff, 0x1}, 0x800}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000)='gtp\x00') sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000240)={0x14, r3, 0xc694d42685586125, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) ioctl$sock_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={0x0, @xdp={0x2c, 0x8, 0x0, 0x10}, @isdn={0x22, 0x1f, 0x1, 0x6, 0x4}, @nfc={0x27, 0x0, 0x1, 0x2}, 0xb5, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000040)='wg1\x00', 0x0, 0x7, 0x9}) sendmsg$GTP_CMD_NEWPDP(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="100028bd7000ffdbdf250000000008000100", @ANYRES32=r4, @ANYBLOB="08adc1eaaa0e9a6ea26611e7485f164dbe4b0b787ea6f7fd32f2cab086363bc4f437fd8efb5969fed12fc8258474baef553323b89433f71a86006283fa8c8a4c9fc39dda5794c03394f95b62f45a31c715b6c3b0184825ebe035b080d49deebf84b789b3ba91543e098589a4b69597e8b050bccce1b3a5e6d6078db2bb7364cd3de161e406c2"], 0x1c}}, 0x400c0) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$IP_SET_OP_GET_BYINDEX(r5, 0x1, 0x53, &(0x7f00000003c0), &(0x7f0000000480)=0x28) [ 1438.134109] device bond90 entered promiscuous mode 06:08:49 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) unshare(0x30010000) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000440)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffe) r2 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000000)={0x0, r1, r2}, &(0x7f0000000700)=""/250, 0xfa, 0x0) keyctl$describe(0x6, 0x0, &(0x7f0000000000)=""/120, 0x78) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1438.183989] bond90: making interface veth503 the new active one [ 1438.199250] device veth503 entered promiscuous mode [ 1438.221030] bond90: Enslaving veth503 as an active interface with an up link [ 1438.250818] bond90 (unregistering): Releasing backup interface veth503 [ 1438.264432] device veth503 left promiscuous mode [ 1438.320949] bond90 (unregistering): Released all slaves 06:08:49 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/430], 0x70}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) bind$netlink(r2, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xa}, {}, {0x0, 0x101, 0x0, 0x8000000000000}, 0x9, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x6, 0x0, 0x100}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1438.529961] device bond90 entered promiscuous mode 06:08:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x2, 0x0, 0x0, 0x0, 0x3}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1438.571668] bond90: making interface veth505 the new active one [ 1438.590030] device veth505 entered promiscuous mode [ 1438.603822] bond90: Enslaving veth505 as an active interface with an up link 06:08:49 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xa, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:50 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x900) [ 1438.927615] device bond91 entered promiscuous mode 06:08:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@remote, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/meminfo\x00', 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_TTSTAMP(r1, 0x40044103, &(0x7f0000000040)=0x75) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$sock_inet_SIOCSIFBRDADDR(r2, 0x891a, &(0x7f0000000080)={'veth1_to_batadv\x00', {0x2, 0x4e23, @remote}}) [ 1439.036737] bond91: making interface veth507 the new active one [ 1439.063780] device veth507 entered promiscuous mode [ 1439.089993] bond91: Enslaving veth507 as an active interface with an up link 06:08:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000000a80)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x10000}]) setsockopt$pppl2tp_PPPOL2TP_SO_REORDERTO(0xffffffffffffffff, 0x111, 0x5, 0x1d0a96f7, 0x4) io_submit(r3, 0x8, &(0x7f0000000a40)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x6, 0x8454, 0xffffffffffffffff, &(0x7f0000000100)="f38597081c44d6aef6fc55835e6de7fecd1dfbfc445be4e8208f928bdbdc620de1418544cf099b247e338577de31fd5fd4d1c3fde4c3171d158c5c710f34a8fbbd15001dc0c0239211342f5096aa97ce779599165d27bf0e3caa2099cad4e695fb4c1f1b393b024d99dae6519c6edd15b520d2ff4ce283d9daf0a7d50cce79b806ba2db08ef34994bff8015d9b910801573e18527a5fdf38cd68331a8e543687297b", 0xa2, 0x101, 0x0, 0x7}, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x40, 0xffffffffffffffff, &(0x7f0000000300)="5f25345025ba28d975fa5dd27da5c061048df5144e9a21e7bb537208bd38c9f8389aaad5f35be83e692b4402ee564a6483dea315566144dc914d91736b113d45e18bf9d6c9c4705bf288eda6f1e5d6eac90535c427278f5fe5f0a4f7869b8a6a67150a6a9d462b949505977b421abae19b1bd154aae139090d4c99975b7cbbd81c8e2cd77cd4bdbfee622d13c8d5901f38e9a9ea62a0769cefb2cc5870b6345fe5d01ba6f22599cf227289b4252d8f168804764f2e3fc9a42223006b4fda30e27b73c9692bf71f0986e05703e0c5fd10449b495646a8505e5be09645e0ba", 0xde, 0xe7f, 0x0, 0x2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x7, 0xffffffffffffffff, &(0x7f0000000440)="86bc99126360e55416d6fcf636dc39bf1f6164cfb6fa6d556d72b374318ee6f8b2d1800c8b6d046db6a2005ac719b5567702fd20dabd703ce5259e2d5ddeda54d0f6406c4be6b065c301c9f89fcd8412e2540fc0c65930fceea8fab6f223720d80f685a6fa1f3db02922a304f5bdbbbd", 0x70, 0x1, 0x0, 0x2}, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x1, 0x400, 0xffffffffffffffff, &(0x7f0000000580)="f22390b2d01c70430af3dc276a2e04dbce91710f31d8911ce59b54fe7f2e5bb4d90dbd074a2261e15a02b4e059a393b0bdd4711d0c5670ab808424c56a73ab4e166cee76d70e440a71b77090a92f8c5747d72cc22e283cd9a4c9368b5f9dbd60369bc07822a3e450924b074b504fa48ebc9138fb77faa9fd9403428bf384abc44c510472759aafac87d97f6b85d860278665db87979b3f58fa831727068feac3306c72e7aeb66316f472d24f249d3510afd89f24", 0xb4, 0x9, 0x0, 0x1}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x9, 0xffffffffffffffff, &(0x7f0000000680)="ae3d448cd2cc18daa62316c6e6907a680a79bc086ecb44cf7896d1216439d00eeb64d32a4bb791cacb7f6a8d2eb8ef5995cf48654072e28d7664742a807d1f44535b893ea143d434406e6d54997693e1e9b93d5d18c7683a35743fa650c1cdde6e66647db57d3fcb4ba844540fdc8112", 0x70, 0x6753, 0x0, 0x3}, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x4, 0xffffffffffffffff, &(0x7f0000000740)="68fa055b1b91c02a48406db27156fc5d02440b6be070d2d248b6cf2dc314cfd31203527210eb521e5330872a8df49aa9095e9eeb7e9bdb218ff8d0dad6314489852ec2126a248c4753a2ffd232f08d18acebc0f0afceb9210729a318ec14182376c8fea08562899b1080c4e2c907fd54dd418f2d44d558d5b1247694468ac89f44695f8763d2651b13ec96", 0x8b, 0x371, 0x0, 0x1}, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x7ff, 0xffffffffffffffff, &(0x7f00000013c0)="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", 0x1000, 0x8, 0x0, 0x2}, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x3, 0x4, 0xffffffffffffffff, &(0x7f0000000900)="e2f9b5704afeff5c337a05a30c06126aaae2c3cecfa5dee0387fcaf7b809ca3ea61b02938320cd9147db84ea61ad424936e64918f97b7270f869a55bfadf6a98774a0a97463079025d77702734063af8f3bbb7fc919af75320ed1921873e34c981e8efd99fcd70b4228e2bf581e2e9253f264e8c12b0eceff59b4ff1bbabc93ce2ece329a2af6aa218ba9ba27bc7b196628be06293c6cedbb1f496c0b84a1c1ff7d6bc53cfcbe15b52686401f5eaa1e1174a5130993e0ad497d45bb0690efb9bbb94cccc8b046d52b5b3cf193d8c97c97478c5f7aa801e489e8d53c4", 0xdc, 0xf23, 0x0, 0x2}]) r5 = openat(0xffffffffffffffff, &(0x7f0000000040)='./bus\x00', 0x101000, 0x41) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0xfffffffffffffffc}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xdc) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) [ 1439.182594] bond91: Enslaving veth509 as a backup interface with an up link 06:08:50 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xf, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:50 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f000025c000)={0x400000001, 0x70, 0x2005, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = perf_event_open(&(0x7f000001d000)={0x7, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x11, r0, 0x0) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000300)) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x200007fe, &(0x7f0000000100)={0x2, 0x10004e23, @dev={0xac, 0x14, 0x14, 0xc}}, 0x10) sendto$inet(r1, &(0x7f0000d7cfcb), 0xffffffffffffffef, 0x1f4, 0x0, 0xf0000000000e803) r2 = socket(0x11, 0x800000003, 0x8) bind(r2, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000140)={r3, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000000)={r3, @in6={{0xa, 0x4e20, 0x4, @private0, 0x200}}, 0x3, 0x7ff}, 0x90) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setresgid(0x0, 0x0, 0x0) write$FUSE_ENTRY(0xffffffffffffffff, &(0x7f00000004c0)={0x90, 0xfffffffffffffffe, 0x6, {0x4, 0x40000000003, 0x6b75, 0x6605, 0x7, 0x7, {0x6, 0xfff, 0x9, 0x5, 0x9, 0x81, 0x0, 0x2, 0x9, 0x3f, 0x7, 0x0, 0x0, 0x0, 0x5}}}, 0x90) r4 = socket$inet6(0xa, 0xa, 0x800) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) 06:08:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) getsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000300)=""/50, &(0x7f0000000340)=0x32) ioctl$DRM_IOCTL_MODE_GETPROPERTY(r1, 0xc04064aa, &(0x7f0000000180)={&(0x7f0000000380)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[{}, {}, {}], 0x9, 0x0, [], 0x200000000000009f, 0x1}) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@loopback, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x8005}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x634}}, 0xe8) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r6 = fcntl$getown(r2, 0x9) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000040)=r6, 0x12) ioctl$SNDRV_PCM_IOCTL_STATUS64(r5, 0x80984120, &(0x7f00000003c0)) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1439.367734] validate_nla: 3 callbacks suppressed [ 1439.378005] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1439.494985] device bond92 entered promiscuous mode 06:08:50 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x7a598, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7c, 0x0, @perf_bp={0x0}, 0x8000, 0x0, 0xfffffffe}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x3}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000080)={r5, 0x36, "16a7f6dddeea85fd0d9c6318bd62805cfecf17f03d5797176148ad25fbe92f743478045c6b18ad8ea7010526b3d262e47fc081f01533"}, &(0x7f0000000100)=0x3e) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x0, 0x80000}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) [ 1439.582330] bond92: making interface veth511 the new active one [ 1439.623782] device veth511 entered promiscuous mode [ 1439.650686] bond92: Enslaving veth511 as an active interface with an up link [ 1439.716940] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:51 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xa00) [ 1439.795165] bond92: Enslaving veth513 as a backup interface with an up link 06:08:51 executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_ACCEPT(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r2, 0x400, 0x70bd27, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'team0\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x800) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) 06:08:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) r1 = creat(&(0x7f0000000140)='./bus\x00', 0x1a8) io_setup(0xa00, &(0x7f00000004c0)=0x0) r3 = accept4$llc(0xffffffffffffffff, 0x0, &(0x7f00000003c0), 0x0) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r3, 0x6612) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r4, &(0x7f00000001c0)={0x0, 0xfffffc38, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a40000007bd3f0f24cd2b65144b303adffac4e9132f27d62992bb7284ea21b3786d0a63d15e50075ce038457b4e12a5aa1a490af4cd156c72087a7c4ff03fbb5b8bfd7b1ea33c4afae81b3b409868315681c921fe9fbb9c56c22b2ff288b7901ba671775433293987c9700a1417ce92fab9f59b3d77ab1b5a0ccb3e99664984b2e943ef126dbf563320b0fc0e08f0d02f5ef90117e4e016d3fc0b88d3f6dfc3503ecee94627f13a6c2b35599ed1be029f8828757afff1bec3b1138fa138306148a", @ANYRES16=r5, @ANYBLOB="3f02000000000000000001000000000000000b0000000013001462726f6164636173742d6c696e6b0000"], 0xa4}, 0x1, 0xfffffff0}, 0x0) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r5, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @l2={'ib', 0x3a, 'macvlan1\x00'}}}}, 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x40005) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r6 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r6, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r6, &(0x7f0000000480), 0x2e9, 0x0) 06:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x10, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:51 executing program 1: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r2, &(0x7f0000000340)={&(0x7f0000000100), 0xc, &(0x7f0000000300)={&(0x7f0000000140)={0x58, 0x2, 0x7, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x5}]}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x1}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_FILTER={0x4}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}, @NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}}, 0x81) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) ioctl$FS_IOC_GETVERSION(r0, 0x80087601, &(0x7f0000000000)) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) connect$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2711}, 0x10) [ 1440.053062] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1440.153970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2248 sclass=netlink_route_socket pid=17384 comm=syz-executor.5 [ 1440.184431] device bond93 entered promiscuous mode [ 1440.220481] bond93: making interface veth515 the new active one [ 1440.255838] device veth515 entered promiscuous mode [ 1440.281685] bond93: Enslaving veth515 as an active interface with an up link 06:08:51 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x7}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) semget$private(0x0, 0x4, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1440.323459] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1440.408167] bond93: Enslaving veth517 as a backup interface with an up link 06:08:51 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x25, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x81, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x4, 0x3}, 0x42442, 0x0, 0xfffffff8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getsockopt$bt_hci(r1, 0x0, 0x2, &(0x7f0000000100)=""/158, &(0x7f0000000300)=0x9e) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockname$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, &(0x7f0000000040)=0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@loopback, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x3}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1440.618299] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1440.730694] device bond94 entered promiscuous mode 06:08:52 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xb00) [ 1440.811198] bond94: making interface veth519 the new active one [ 1440.825411] device veth519 entered promiscuous mode [ 1440.851831] bond94: Enslaving veth519 as an active interface with an up link [ 1440.881659] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1440.917522] bond94: Enslaving veth521 as a backup interface with an up link 06:08:52 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000080)='batadv\x00') fsetxattr$security_ima(r1, &(0x7f0000000000)='security.ima\x00', &(0x7f0000000040)=@v1={0x2, "e71818c7"}, 0x5, 0x2) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r2, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r3 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x0, 0x0) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r3, 0x29, 0xd2, &(0x7f0000000140)={{0xa, 0x4e20, 0x4, @private2={0xfc, 0x2, [], 0x1}}, {0xa, 0x4e21, 0x8001, @empty, 0x7ff}, 0x3, [0xb5, 0x0, 0x1f7, 0x1, 0xe00000, 0x4, 0x4342bb2e, 0xfd88]}, 0x5c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0xb) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) write$FUSE_NOTIFY_INVAL_INODE(r4, &(0x7f00000002c0)={0x28, 0x2, 0x0, {0x4, 0x1, 0x7fff}}, 0x28) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xffffffffffffffff}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x9}}, 0xe8) setuid(0x0) ioctl$TUNSETOWNER(r4, 0x400454cc, 0x0) sendmmsg(r2, &(0x7f0000000480), 0x2e9, 0x0) 06:08:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x2f, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1441.085606] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1441.158683] device bond95 entered promiscuous mode 06:08:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e23, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r1, 0x84, 0x71, &(0x7f0000000000)={r4, 0x1ff}, 0x8) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$SCSI_IOCTL_SYNC(0xffffffffffffffff, 0x4) openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ocfs2_control\x00', 0x101000, 0x0) [ 1441.228384] bond95: making interface veth523 the new active one [ 1441.249340] device veth523 entered promiscuous mode [ 1441.270106] bond95: Enslaving veth523 as an active interface with an up link [ 1441.302827] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:52 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg$NFNL_MSG_CTHELPER_GET(r1, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"/430], 0x70}, 0x1, 0x0, 0x0, 0x408c0}, 0x1) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffa, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, r3, 0x0) bind$netlink(r2, 0x0, 0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) getsockopt$PNPIPE_ENCAP(r4, 0x113, 0x1, &(0x7f0000000000), &(0x7f0000000040)=0x4) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r5 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r5, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@private=0xa010100, @in=@broadcast, 0x0, 0x2, 0x0, 0x0, 0xa}, {}, {0x0, 0x101, 0x0, 0x8000000000000}, 0x9, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@empty, 0x0, 0x0, 0x1, 0x6, 0x0, 0x100}}, 0xe8) sendmmsg(r5, &(0x7f0000000480), 0x2e9, 0x0) [ 1441.407153] bond95: Enslaving veth525 as a backup interface with an up link 06:08:52 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:52 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x34, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1441.657264] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xc00) [ 1441.799260] device bond96 entered promiscuous mode 06:08:53 executing program 4: perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x6}, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$TIOCNOTTY(r2, 0x5422) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000000)={'syzkaller1\x00', 0x401}) [ 1441.876718] bond96: making interface veth527 the new active one [ 1441.911985] device veth527 entered promiscuous mode [ 1441.935569] bond96: Enslaving veth527 as an active interface with an up link 06:08:53 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SCSI_IOCTL_STOP_UNIT(r2, 0x6) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) getsockopt$packet_buf(r3, 0x107, 0x2, &(0x7f0000000000)=""/34, &(0x7f0000000040)=0x22) [ 1441.980199] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1442.113729] bond96: Enslaving veth529 as a backup interface with an up link 06:08:53 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x4a, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:53 executing program 1: pselect6(0x40, &(0x7f0000000000)={0x100000001, 0x10000, 0x100000001, 0x7, 0x8, 0x7, 0x4b50d99c, 0x5}, &(0x7f0000000040)={0x5, 0x2, 0x101, 0x80000000, 0x2, 0x10000, 0x7fffffff, 0x100000000}, &(0x7f0000000080)={0x6, 0x7fffffff, 0x9, 0x9, 0x0, 0x0, 0x5c28210e, 0x7}, &(0x7f0000000100), &(0x7f0000000180)={&(0x7f0000000140)={[0x1f]}, 0x8}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1442.377482] device bond97 entered promiscuous mode 06:08:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r2, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, r2, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1442.484988] bond97: making interface veth531 the new active one [ 1442.516216] device veth531 entered promiscuous mode [ 1442.552639] bond97: Enslaving veth531 as an active interface with an up link [ 1442.624441] bond97: Enslaving veth533 as a backup interface with an up link 06:08:53 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xd00) 06:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x60, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:54 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x2200, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@getsa={0x58, 0x12, 0x1, 0x70bd2b, 0x25dfdbfc, {@in=@local, 0x4d3, 0x2, 0x32}, [@tfcpad={0x8, 0x16, 0x9}, @address_filter={0x28, 0x1a, {@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@remote, 0x2, 0x6, 0xb9}}]}, 0x58}, 0x1, 0x0, 0x0, 0xc0}, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:54 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) fcntl$setpipe(r0, 0x407, 0x8) [ 1442.950562] device bond98 entered promiscuous mode [ 1443.028617] bond98: making interface veth535 the new active one [ 1443.053401] device veth535 entered promiscuous mode [ 1443.095817] bond98: Enslaving veth535 as an active interface with an up link 06:08:54 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xc0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1443.243259] bond98: Enslaving veth537 as a backup interface with an up link 06:08:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000000)={0xffff, 0x66d8}) 06:08:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x0, 0x64a8ad9f}, 0x41820, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = openat$mice(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mice\x00', 0x2100) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f00000002c0)=""/247) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = accept4$x25(r2, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0xc0800) connect(r4, &(0x7f0000000100)=@hci={0x1f, 0x1}, 0x80) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:54 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000240)="cefaad1bb83c000040dc", 0xa}], 0xc502, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x48) fchdir(r0) r1 = creat(&(0x7f0000000500)='./file0\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) io_submit(r3, 0x1, &(0x7f0000000280)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7, 0x0, r4, &(0x7f0000000180)="c3ccb446640d8bf5708875dd72e542", 0xf}]) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$VIDIOC_TRY_EXT_CTRLS(r2, 0xc0205649, &(0x7f0000000140)={0xfffffff, 0x8, 0xda2, r5, 0x0, &(0x7f0000000100)={0x9a0917, 0x8, [], @p_u8=&(0x7f00000000c0)=0x7f}}) write$P9_ROPEN(r6, &(0x7f00000001c0)={0x18, 0x71, 0x2, {{0x8, 0x2, 0x3}, 0x6}}, 0x18) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = syz_open_dev$vcsn(&(0x7f0000000400)='/dev/vcs#\x00', 0x0, 0x10000) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000009c0), 0xc, &(0x7f0000000b80)={&(0x7f0000000a00)={0x178, 0x0, 0x100, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x120, 0x8, 0x0, 0x1, [{0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x95}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xf58}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x22d0373}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x460462af}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xea}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xd3dff59}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7776ab3a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x7d}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d4373ee}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x7a498bc7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0xfafa6e8}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6fb51dd6}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x37}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x743a427a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x47c536b3}]}, {0x4c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x51}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x3cb722e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x8}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xbc}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xd2}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xa1}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6d56d5a7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x74}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x14}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x631ad05a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x222f89d7}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2a4bb220}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x163259f7}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xdb}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x2c, 0x4, 0x0, 0x1, [{0x5}, {0x5}, {0x5, 0x3, 0x4}, {0x5}, {0x5, 0x3, 0x7}]}]}, 0x178}, 0x1, 0x0, 0x0, 0x800}, 0x40) sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x164, 0x0, 0x8, 0x70bd2b, 0x25dfdbfb, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MLSCATLST={0x114, 0xc, 0x0, 0x1, [{0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x6872}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xab41}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7391}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x68675e0a}]}, {0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xa8c4b03}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59ce7c08}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2cd3de56}]}, {0x34, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x2cc2}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x6d733310}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x72536c3c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb44c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x385c}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xb13a}]}, {0x2c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x10bf}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x2fcf58e5}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x60c3958c}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x7a005692}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x92ea}]}, {0x24, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x59775285}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x17ac15a8}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x4235c075}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf5c4}]}, {0x4c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x7abe}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0xb359316}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x27}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcc78}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0x38da}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xfd05}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xc66}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xcacd}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xa877}]}]}, @NLBL_CIPSOV4_A_MLSCATLST={0x20, 0xc, 0x0, 0x1, [{0x1c, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xf6db}, @NLBL_CIPSOV4_A_MLSCATLOC={0x8, 0x9, 0x154c440e}, @NLBL_CIPSOV4_A_MLSCATREM={0x8, 0xa, 0xe028}]}]}, @NLBL_CIPSOV4_A_TAGLST={0xc, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x6}]}]}, 0x164}, 0x1, 0x0, 0x0, 0x4001}, 0x4004010) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@multicast1, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@private0}}, &(0x7f0000000440)=0xe8) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000480)={0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, r8}) 06:08:54 executing program 1: perf_event_open(&(0x7f0000001340)={0x5, 0x70, 0x0, 0x3, 0x0, 0x5, 0x0, 0x41c1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x0, 0x2, 0x0, 0x1}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000380), 0x4) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@private0, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x3500, 0x0, 0x0, 0x6}}, 0xe8) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCGETD(r1, 0x5424, &(0x7f0000000080)) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000400)='/proc/partitions\x00', 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r7, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@RTM_NEWNSID={0x54, 0x58, 0x20, 0x70bd2d, 0x25dfdbfc, {}, [@NETNSA_PID={0x8}, @NETNSA_PID={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_FD={0x8}, @NETNSA_PID={0x8}]}, 0x54}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r7, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x70}}, 0x18}}, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000040)={@mcast2, 0x26, r7}) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1443.437425] device bond99 entered promiscuous mode [ 1443.573463] bond99: making interface veth539 the new active one 06:08:54 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xe00) [ 1443.648190] device veth539 entered promiscuous mode [ 1443.689458] kauditd_printk_skb: 2 callbacks suppressed [ 1443.689472] audit: type=1804 audit(1590041334.959:2718): pid=17800 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/786/file0/file0" dev="sda1" ino=17456 res=1 [ 1443.694169] bond99: Enslaving veth539 as an active interface with an up link [ 1443.742519] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:08:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x3c}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x2, 0x6}}, 0xe8) write$binfmt_misc(r0, &(0x7f00000002c0)={'syz1', "84ab89205d9e43727ec299b05819aa109ae3c5143f626eec73a053f2a2675467cf19d87fd0b414be01954ebf5c07ddab907905d25c362ff875e06065c231eb549e3725df1bf68e1271d148904fbbc12310a5dcf0ca7a442a3267409f89aa8bb763224bd87316c8443d90996a6e3d9d9400bf0d0640dab4fb07d422390ac6aeb39d9a3f0148d1"}, 0x8a) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x14000, 0x0) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$VIDIOC_CROPCAP(r2, 0xc02c563a, &(0x7f0000000100)={0xc, {0x7, 0x9, 0x7, 0x8}, {0x6, 0x4, 0x0, 0xc00000}, {0x5, 0x1ff}}) 06:08:55 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) r3 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000040)={'syz', 0x1}, &(0x7f0000001740)="01", 0x1, 0xfffffffffffffffd) r4 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000000)={'syz'}, &(0x7f0000000280)="585ccbe4ed83b836c1a6474914dc55e72206297b6895b66147b3c7218a9169a85ea0bdc9e1587a050000000000000042e33089754c8107c3cd3923dd4a71c2ff06007b6b4816122d2550829eaa9435c99926022b8753a188748c569f435fb3bae96efb74b50ec93c152f5e8e198a29e5c0d0c60000ce0637ce0000b4ec24c53d3d661ff5ff70e48884ca000018cea71fcfacf40d32e4b58a8d2725561f6110fd7b06f90b5274cc5c1e298a16324fe27da2a9d5ba9ff3c009d308bd73f4772539", 0xc0, 0xfffffffffffffffe) keyctl$dh_compute(0x17, &(0x7f0000000000)={r4, 0x0, r3}, &(0x7f0000000700)=""/250, 0xfa, 0x0) r5 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f00000005c0)={'syz'}, &(0x7f0000000100)='\x00', 0x1, 0xfffffffffffffffd) r6 = add_key(&(0x7f0000000040)='user\x00', &(0x7f0000000000)={'syz', 0x1}, &(0x7f0000000300)='4', 0x1, 0xfffffffffffffffe) keyctl$unlink(0x9, r5, r6) add_key(&(0x7f0000000040)='big_key\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, r6) keyctl$search(0xa, r4, &(0x7f0000000040)='logon\x00', &(0x7f0000000100)={'syz', 0x1}, r6) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd, 0x1, 'fq_codel\x00'}, {0xc, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}]}}]}, 0x40}}, 0x0) r7 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) [ 1443.866115] bond99: Enslaving veth541 as a backup interface with an up link [ 1443.902547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. 06:08:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x6c0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0xfffffffffffffffe}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) open(&(0x7f00000000c0)='./file1\x00', 0x2880, 0xc2) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getpeername(r1, &(0x7f0000000100)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @loopback}}, &(0x7f00000001c0)=0x80) creat(&(0x7f0000000500)='./file0\x00', 0x0) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) write$6lowpan_control(r2, &(0x7f0000000480)='connect aa:aa:aa:aa:aa:10 2', 0x1b) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r3 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r3, &(0x7f0000000000), 0x10000}]) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') sendmsg$NL80211_CMD_REQ_SET_REG(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r6, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8c902810}, 0xc, &(0x7f0000000400)={&(0x7f0000000280)={0x28, r6, 0x20, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_NAME={0x14, 0x2, 'netpci0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x20004001}, 0x2004040) 06:08:55 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x19, 0x73b000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @private=0xa010100}, 0xffff, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x6, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000140)={0x2c, 0x2}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f0000000300)={0x3, 0xb, 0x32, "93f141d8d7b8003cb7f697238c16b88490f7ddeb2433eb5d880775529028f8e5eaabae8752329a2858abe465557d8e13936039271b5d72ae8818d3c4", 0x36, "0a716082ab08536529d2ef455d43668903d0e8c366e9b2f65b95b90900a6a23b4e9fec3011f97f7a6574200901e2d020632400", 0x80}) memfd_create(&(0x7f0000000000)='proc]\x00', 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1444.156907] device bond100 entered promiscuous mode [ 1444.193062] audit: type=1804 audit(1590041335.459:2719): pid=17831 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/787/file0/file0" dev="loop3" ino=2 res=1 [ 1444.232061] bond100: making interface veth543 the new active one 06:08:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x80, 0x8, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0xfffffffffffffffa}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:55 executing program 2: r0 = openat$mice(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x2) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000000)=0x8, 0x4) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000080)={'veth1_macvtap\x00', 0x5}) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/cpuinfo\x00', 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x1c, 0xe, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x1) r3 = dup2(r2, 0xffffffffffffffff) r4 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r4, &(0x7f0000000100)={0x3, 0x40, 0xfa00, {{0xa, 0x4e21, 0x0, @local, 0x3}, {0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}, r5}}, 0x48) write$RDMA_USER_CM_CMD_LISTEN(r4, &(0x7f0000000040)={0x7, 0x8, 0xfa00, {r5}}, 0x10) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffffff, &(0x7f0000000200)={0x10, 0x30, 0xfa00, {&(0x7f00000001c0)={0xffffffffffffffff}, 0x0, {0xa, 0x6, 0x7d72ec2f, @private0}, r5}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000240)={0x11, 0x10, 0xfa00, {&(0x7f0000000140), r6}}, 0x18) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r0, &(0x7f0000000140)={0x11, 0x10, 0xfa00, {&(0x7f0000000100), r6}}, 0x18) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1444.239872] device veth543 entered promiscuous mode [ 1444.245721] bond100: Enslaving veth543 as an active interface with an up link 06:08:55 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0xec0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1444.303314] bond100: Enslaving veth545 as a backup interface with an up link 06:08:55 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) openat$userio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/userio\x00', 0x408100, 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) setsockopt$packet_tx_ring(r2, 0x107, 0xd, &(0x7f0000000080)=@req3={0x7fff, 0x4, 0x4, 0xfff, 0x20, 0x10000, 0x9}, 0x1c) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) accept4$tipc(r1, &(0x7f0000000000)=@name, &(0x7f0000000040)=0x10, 0x800) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1444.418030] validate_nla: 8 callbacks suppressed [ 1444.418040] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:55 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r4}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r4, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="180000001500010000", @ANYRES32=r4], 0x18}}, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x2c, 0x2, r4, 0x4}, 0x10, &(0x7f0000000080)=[{&(0x7f0000000040)="0536b1f94a5709b76a3538407df7f3831133fcaa376b5398fe6fc3d9221068981b48932d8455fc879557c2", 0x2b}, {&(0x7f0000000100)="2f661eb632e7e0215424684d80bc7ebefbc61305e7f53732c2c5b579b0a851f439cf8031aa7b2c7e75a48910b91e5e349ad4e804a134fc9b231b84f7522bd0ebf96cf8fe7c8dd1586f9eb3fc8230e0fe9eeae12bdc35c99576135e2f74669d494fc9a6e297980cc9d2c7d232e1e2d655245ce8", 0x73}], 0x2}, 0x4040800) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1444.547943] device bond101 entered promiscuous mode [ 1444.610677] audit: type=1804 audit(1590041335.879:2720): pid=17944 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/788/file0/file0" dev="loop3" ino=2 res=1 [ 1444.665289] bond101: making interface veth547 the new active one 06:08:56 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xf00) 06:08:56 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) clock_settime(0x6, &(0x7f0000000100)={r1, r2+60000000}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1444.730089] device veth547 entered promiscuous mode [ 1444.738959] bond101: Enslaving veth547 as an active interface with an up link [ 1444.784636] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. 06:08:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) [ 1444.878297] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:56 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) uname(&(0x7f0000000000)=""/149) [ 1444.945539] bond101: Enslaving veth549 as a backup interface with an up link 06:08:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x33fe0, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1445.005649] audit: type=1804 audit(1590041336.269:2721): pid=17972 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/789/file0/file0" dev="loop3" ino=2 res=1 [ 1445.179251] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1445.287938] device bond102 entered promiscuous mode [ 1445.355529] bond102: making interface veth551 the new active one [ 1445.374220] device veth551 entered promiscuous mode [ 1445.391438] bond102: Enslaving veth551 as an active interface with an up link [ 1445.405638] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1445.442948] bond102: Enslaving veth553 as a backup interface with an up link 06:08:56 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x8, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) modify_ldt$read_default(0x2, &(0x7f0000000000)=""/131, 0x83) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1f, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6, 0x2000}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getgid() r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x1) ioctl$BLKDISCARD(r3, 0x1277, &(0x7f0000000100)=0x200) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) dup(r4) ioctl$sock_SIOCDELDLCI(r4, 0x8981, &(0x7f0000000140)={'syzkaller0\x00', 0x8}) 06:08:56 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0)='NLBL_UNLBL\x00') sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r1, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x5420a08}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x60, r2, 0x200, 0x70bd28, 0xe9a, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private1={0xfc, 0x1, [], 0x1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @private0}]}, 0x60}, 0x1, 0x0, 0x0, 0x4805}, 0x8080) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r3 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_TUNER(r5, 0x4054561e, &(0x7f00000000c0)={0x7, "16501d50451d5f3b6e70059cb485a3f9bb08a5a3b2c9b7a25e8ce7f4aeaeecb5", 0x1, 0x100, 0x4a, 0x7, 0x2, 0x4, 0x400, 0x7f}) setsockopt$inet_icmp_ICMP_FILTER(0xffffffffffffffff, 0x1, 0x1, &(0x7f0000000480)={0xfffffff9}, 0x4) fchdir(r3) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x73, "99eb32c8703b84f397d46d3d528e98a6308a5eecbd8f93375b8fecf6189d6588766bd0fc9bddcbca1f090d39d485e2f74916973c7ca05d68b558ad9d6929163d48979c1e4396fcf4109e13441f8bf4292016eca3e9c205d7ed954facc55b1774569d10f5db7a0daf18c31fd62b4a32796fafa7"}, &(0x7f0000000080)=0x7b) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:56 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:56 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20000520, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1445.582518] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:57 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x2c00) [ 1445.756475] device bond103 entered promiscuous mode [ 1445.827048] bond103: making interface veth555 the new active one [ 1445.843689] audit: type=1804 audit(1590041337.109:2722): pid=18095 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/790/file0/file0" dev="loop3" ino=2 res=1 [ 1445.856158] device veth555 entered promiscuous mode [ 1445.903698] bond103: Enslaving veth555 as an active interface with an up link [ 1445.940500] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:57 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000100)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x3, &(0x7f0000000240)=[{&(0x7f0000000000)="cefaad1bb83c000040dc", 0xa}, {&(0x7f0000000540)="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", 0x1000, 0xaa08}, {&(0x7f0000000080)="5e09390f32acc99413ad359d372888ca56a9056e6c458551da0e478f60324331b3996fbe03d5bdcc806698b4adadf75c66fdab6a00f999e1e7958f825962cfca39acd215009a1d5d180c23ce1a8fa2c21e", 0x51, 0x7fffffff}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:08:57 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x2, @loopback, 0x4}, 0x1c) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$ASHMEM_SET_SIZE(r2, 0x40087703, 0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) sync_file_range(r0, 0x7, 0x5, 0x6) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ioctl$FITHAW(r4, 0xc0045878) r5 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r6 = dup2(0xffffffffffffffff, r5) r7 = syz_open_procfs(0x0, 0x0) preadv(r7, &(0x7f00000017c0), 0x333, 0x0) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r8, @ANYBLOB="100027bd7000fcdbdf2510000000740005803c000280080003000600000008000400fdffffff08000200c7f9fb795b160a5a8c77fdf6ffff0000080004000100008008000200050000000800010008000000080003000100008034000280080001001f00000008000300ff000000080003000700000008000200ff00000008"], 0x88}, 0x1, 0x0, 0x0, 0x80}, 0x80) sendmsg$TIPC_NL_BEARER_SET(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x2cc, r8, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x3c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9336}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}]}, @TIPC_NLA_LINK={0x104, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x194f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2759}]}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1aa39dd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}]}, @TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x90b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}]}, @TIPC_NLA_BEARER={0x7c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1c0}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x3a}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1b4}]}, @TIPC_NLA_LINK={0x8c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_MON={0x24, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3ff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0x24, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3575}]}, @TIPC_NLA_NODE={0x10, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8846}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1ff8000}]}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c800) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x0, 0x1}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) [ 1446.036707] bond103: Enslaving veth557 as a backup interface with an up link 06:08:57 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x7ffff000, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:57 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xffff, 0x80000001}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) getsockname$l2tp(r4, &(0x7f0000000300)={0x2, 0x0, @dev}, &(0x7f0000000340)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000100)={r2, @in6={{0xa, 0x4e21, 0x101, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x8}}, 0x8, 0x27, 0x4, 0x2, 0x6, 0x2e94, 0x8}, 0x9c) chdir(&(0x7f0000000000)='./file0\x00') connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@rand_addr=0x64010102, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x62}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x3, 0x0, 0x1, 0x1}, {{@in=@empty, 0xfffffffd, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0xa}}, 0xe8) [ 1446.249849] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:57 executing program 3: socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x0, 0x3, 0x2}, 0x4}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) rt_sigaction(0x16, &(0x7f0000000140)={&(0x7f0000000240)="0fd95c43fec4e2010380f1000000a2e68f00000000000030ce410f381df3c4035d5e0d0300000030660f3806bc875e000000c4c2d5394000c421c2c27dfc08363e0f51adcc040000", 0x40000000, &(0x7f0000000400)="c4837d088d8a000000902e66430f38044302f3440f6f923370000066450f5a483ff3430f1efac422bbf5ae87f00000f20fd6d42e6466660f3a0c0b39d96206f364f046ff89d2000000", {[0xf907]}}, &(0x7f00000004c0)={&(0x7f00000001c0)="c4c37d056d12304580159fb40000a7660f1ace6fd9f3c4a269bb243cc4e1965204faf044804600d4c401e573f5160f9a67ad", 0x0, &(0x7f0000000480)="6566430f66f5c46279222bc4e23d4787e0000000c4e13dd97418650f9be066490f38f50dfb000000d0206466400f381eac89b111c74e260f573a26450f9a664e"}, 0x8, &(0x7f0000000540)) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getsockopt$inet_dccp_int(r2, 0x21, 0x6, &(0x7f00000000c0), &(0x7f0000000100)=0x4) [ 1446.408871] device bond104 entered promiscuous mode 06:08:57 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) perf_event_open(&(0x7f0000348f88)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r1, 0x0) prctl$PR_SET_MM_MAP_SIZE(0x19, 0x73b000, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in6=@ipv4={[], [], @private=0xa010100}, 0xffff, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x2, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0x6, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$FBIOPUT_CON2FBMAP(r4, 0x4610, &(0x7f0000000140)={0x2c, 0x2}) ioctl$BLKROGET(r2, 0x125e, &(0x7f0000000040)) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$VIDIOC_S_JPEGCOMP(r5, 0x408c563e, &(0x7f0000000300)={0x3, 0xb, 0x32, "93f141d8d7b8003cb7f697238c16b88490f7ddeb2433eb5d880775529028f8e5eaabae8752329a2858abe465557d8e13936039271b5d72ae8818d3c4", 0x36, "0a716082ab08536529d2ef455d43668903d0e8c366e9b2f65b95b90900a6a23b4e9fec3011f97f7a6574200901e2d020632400", 0x80}) memfd_create(&(0x7f0000000000)='proc]\x00', 0x4) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1446.448833] bond104: making interface veth559 the new active one [ 1446.463113] device veth559 entered promiscuous mode [ 1446.470935] bond104: Enslaving veth559 as an active interface with an up link 06:08:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x8, 0x107000) getsockopt$inet_sctp_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080), &(0x7f0000000100)=0xe) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$SNDCTL_DSP_GETBLKSIZE(r2, 0xc0045004, &(0x7f0000000000)) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x141002, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r4, 0xc1105511, &(0x7f00000002c0)={{0x3, 0x2, 0x7, 0x80000001, '\x00', 0x1}, 0x4, 0x2, 0x1f, 0x0, 0x1, 0x7, 'syz1\x00', &(0x7f0000000180)=['/dev/vcs#\x00'], 0xa, [], [0x3, 0xa2, 0xfc01, 0xfff]}) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1446.527133] audit: type=1804 audit(1590041337.789:2723): pid=18176 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/792/file0/file0" dev="loop3" ino=2 res=1 [ 1446.527571] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:58 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x3f00) [ 1446.734920] bond104: Enslaving veth561 as a backup interface with an up link 06:08:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x2, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = openat$vcsa(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x260200, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1447.000338] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:08:58 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0xefa1) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x81) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r1, 0x5382, &(0x7f0000000000)) [ 1447.112019] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2 sclass=netlink_route_socket pid=18234 comm=syz-executor.5 [ 1447.149347] device bond105 entered promiscuous mode [ 1447.259573] bond105: making interface veth563 the new active one [ 1447.308689] device veth563 entered promiscuous mode 06:08:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=""/5) [ 1447.339451] bond105: Enslaving veth563 as an active interface with an up link [ 1447.377584] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1447.455661] bond105: Enslaving veth565 as a backup interface with an up link 06:08:58 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x3, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:58 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$vsock_stream(0x28, 0x1, 0x0) sync_file_range(r2, 0xffffffff, 0xffff, 0x5) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) r3 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$UFFDIO_UNREGISTER(r3, 0x8010aa01, &(0x7f0000000000)={&(0x7f0000ffe000/0x2000)=nil, 0x2000}) 06:08:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000000)={0x7f, 0x20, 0xffff, 0x4, 0x401}) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:08:58 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$GTP_CMD_GETPDP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x54, 0x0, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_PEER_ADDRESS={0x8, 0x4, @initdev={0xac, 0x1e, 0x0, 0x0}}, @GTPA_FLOW={0x6}, @GTPA_LINK={0x8, 0x1, r3}, @GTPA_I_TEI={0x8, 0x8, 0x3}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_VERSION={0x8}, @GTPA_FLOW={0x6, 0x6, 0x3}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x10) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r6 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r6) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1447.726783] device bond106 entered promiscuous mode [ 1447.735970] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3 sclass=netlink_route_socket pid=18312 comm=syz-executor.5 06:08:59 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x4000) [ 1447.841646] bond106: making interface veth567 the new active one [ 1447.867276] device veth567 entered promiscuous mode 06:08:59 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) pkey_free(0xffffffffffffffff) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(0xffffffffffffffff, 0x84, 0x7, &(0x7f0000000400), &(0x7f0000000440)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r1, 0x0, 0xe2, 0x45, &(0x7f00000002c0)="853906b6fa99e003d2d15c482066facb1b76dee15bdeee75fe1a23c9402419b4d91f1d47c3a2b635feabfc64c976d85e866b07bbc1d6e30b9d01ce6d66e6dd0eb76212ff743e56799b811ed309438b1d0ef7e25441070de44064e9beabb583b0385c403a1193dbaa189eb923367f39a96252fc707ba1c91873a3e87745f981430944a9941f7b35e384dcecc662d6613ae06b0f52963023f93d62cab2e31b6dec9e31f049e29839be6edff48aaff52ee2336bda64e27977489a4038047bc8588c6a574f489509cf4aebfa62e70393c79986a05d2336a27f86284ac43a2c8431da699f", &(0x7f0000000000)=""/69, 0x5, 0x0, 0x26, 0xb3, &(0x7f0000000080)="6b8a627a1f4c343cac71b483c5ce2315715b16bb078593b2118d79dfb40ae2c60b993f833226", &(0x7f0000000100)="e83ee993b698aa985e6341f050e8ac91a57235287afaf11980ab52ebf852b35a5d2ef373d9a5668e3802b39a90737898cad74b22f28c6e520f037fe6c8c3accf9bb08997cfd0dec2b5a846a13bc35cf821961967a259badf40062eef5f6adcab7a3383ac67b188067b5bb3a2814cea6a696361f19b934303750640a731d351b2fdedd6b8b46b2082e85c1ec06653ab22663fe408d2a20f3345425e6f5249b19e09d3d5e51e6a3e6cac5e50c607ffc21a4f5a75"}, 0x40) [ 1447.898972] bond106: Enslaving veth567 as an active interface with an up link [ 1447.953598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1447.974567] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 06:08:59 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = gettid() ptrace(0x4206, r3) tkill(r3, 0x800000009) fcntl$setownex(r1, 0xf, &(0x7f00000000c0)={0x0, r3}) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1448.070348] bond106: Enslaving veth569 as a backup interface with an up link 06:08:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x4, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1448.131978] BFS-fs: bfs_fill_super(): Inode 0x00000002 corrupted 06:08:59 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x433859bf, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fsetxattr$security_evm(r0, &(0x7f0000000000)='security.evm\x00', &(0x7f0000000040)=@ng={0x4, 0xc, "34a55ae91340aca0a3b1748971"}, 0xf, 0x2) ioctl$DRM_IOCTL_GET_STATS(r3, 0x80f86406, &(0x7f00000002c0)=""/239) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x32}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1448.198346] audit: type=1804 audit(1590041339.469:2724): pid=18317 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/793/file0/file0" dev="sda1" ino=17470 res=1 06:08:59 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) fcntl$setstatus(r1, 0x4, 0x44000) [ 1448.347338] device bond107 entered promiscuous mode [ 1448.375201] audit: type=1804 audit(1590041339.639:2725): pid=18400 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/794/file0/file0" dev="loop3" ino=2 res=1 06:08:59 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f00000000c0)='./bus\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$RTC_PLL_SET(r1, 0x40207012, &(0x7f0000000100)={0x7c4e1879, 0x3b7, 0x6, 0x7fffffff, 0x7f, 0x99b8, 0x8}) [ 1448.442946] bond107: making interface veth571 the new active one [ 1448.463208] device veth571 entered promiscuous mode [ 1448.479461] bond107: Enslaving veth571 as an active interface with an up link 06:08:59 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:59 executing program 3: r0 = openat$urandom(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/urandom\x00', 0x416080, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/btrfs-control\x00', 0x20601, 0x0) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = syz_open_dev$cec(&(0x7f0000000140)='/dev/cec#\x00', 0x3, 0x2) poll(&(0x7f00000001c0)=[{r0, 0x4000}, {r1, 0x184}, {r3, 0x100}, {r4, 0xc108}], 0x4, 0xf9) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in=@rand_addr=0x64010100}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc102, 0x0) r5 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r5) creat(&(0x7f0000000500)='./file0\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r6, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r7 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r8, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r7, &(0x7f0000000000), 0x10000}]) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, 0xffffffffffffffff, &(0x7f0000000240)={r6, r7, 0x8000}) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1448.584359] bond107: Enslaving veth573 as a backup interface with an up link 06:08:59 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) setxattr$security_evm(&(0x7f0000000400)='./bus\x00', &(0x7f0000000440)='security.evm\x00', &(0x7f0000000480)=@md5={0x1, "5b9d43a73228f87cb74c8939f237265f"}, 0x11, 0x3) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) socket(0x11, 0x800000003, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1b}, 0xa}}, 0x6, 0x8df, 0x5, 0x8004, 0x1}, &(0x7f0000000100)=0x98) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) sendmsg$NFT_MSG_GETSET(r5, &(0x7f00000003c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000380)={&(0x7f0000000040)=ANY=[@ANYBLOB="120000000a0a01040000000000003f331c2516286549a9c903a57c828023f13b7b"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x24000004) syz_open_dev$ptys(0xc, 0x3, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:08:59 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x5, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:08:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) syz_open_dev$tty20(0xc, 0x4, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) socket$bt_rfcomm(0x1f, 0x1, 0x3) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1448.763665] device bond1 entered promiscuous mode 06:09:00 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x6000) 06:09:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {0x4, 0x0, 0x9}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1448.849180] bond1: making interface veth3 the new active one [ 1448.874067] device veth3 entered promiscuous mode [ 1448.875748] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=5 sclass=netlink_route_socket pid=18486 comm=syz-executor.5 [ 1448.892683] bond1: Enslaving veth3 as an active interface with an up link [ 1448.944367] audit: type=1804 audit(1590041340.209:2726): pid=18491 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/796/file0/file0" dev="loop3" ino=2 res=1 [ 1448.973510] device bond108 entered promiscuous mode 06:09:00 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) sendmsg$RDMA_NLDEV_CMD_GET(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1401, 0x20, 0x70bd2c, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000044}, 0x4804) 06:09:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket(0x40000000001e, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4408000033c8c0a66ea83637", @ANYRES16=r5, @ANYBLOB="000429bd7000fddbdf250d0000000c00038008000500e00000022400028008000800060000000800060001ffffff08000900c77400000800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x20000004) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3a}}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x810) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1449.071064] bond108: making interface veth575 the new active one [ 1449.087678] device veth575 entered promiscuous mode [ 1449.100380] bond108: Enslaving veth575 as an active interface with an up link [ 1449.131035] bond1 (unregistering): Releasing backup interface veth3 [ 1449.160102] device veth3 left promiscuous mode [ 1449.196322] audit: type=1804 audit(1590041340.459:2727): pid=18539 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/797/file0/file0" dev="loop3" ino=2 res=1 06:09:00 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket(0x40000000001e, 0x1, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x14, r5, 0x64223e343cb77e85, 0x0, 0x0, {0xf}}, 0x14}}, 0x0) sendmsg$IPVS_CMD_GET_CONFIG(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="4408000033c8c0a66ea83637", @ANYRES16=r5, @ANYBLOB="000429bd7000fddbdf250d0000000c00038008000500e00000022400028008000800060000000800060001ffffff08000900c77400000800050001000000"], 0x44}, 0x1, 0x0, 0x0, 0x40081}, 0x20000004) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)={0x44, r5, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@ipv4={[], [], @dev={0xac, 0x14, 0x14, 0x3a}}}, @IPVS_SVC_ATTR_PROTOCOL={0x6, 0x2, 0x3a}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x5}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x29}]}]}, 0x44}, 0x1, 0x0, 0x0, 0xc041}, 0x810) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) [ 1449.557465] bond1 (unregistering): Released all slaves [ 1449.600326] validate_nla: 6 callbacks suppressed [ 1449.600336] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1449.687698] bond108: Enslaving veth577 as a backup interface with an up link 06:09:01 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xe803) 06:09:01 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x6000000, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x11, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:09:01 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x6, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1449.873075] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 06:09:01 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x0, 0x8044) seccomp$SECCOMP_SET_MODE_STRICT(0x0, 0x0, 0x0) 06:09:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0x0, r5, 0x0) ioctl$TUNSETGROUP(r2, 0x400454ce, r5) r6 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) ioctl$FS_IOC_RESVSP(r7, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xfffb, 0x100000000}) ioctl$TUNSETOWNER(r6, 0x400454cc, r4) dup(r1) ioctl$DRM_IOCTL_ADD_BUFS(r6, 0xc0206416, &(0x7f0000000100)={0x6, 0xfff, 0x8000, 0x0, 0x2, 0xd3f}) getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f00000002c0)=""/194, &(0x7f0000000000)=0xc2) [ 1449.978647] device bond1 entered promiscuous mode [ 1450.020498] bond1: making interface veth5 the new active one [ 1450.030068] device veth5 entered promiscuous mode [ 1450.056107] bond1: Enslaving veth5 as an active interface with an up link 06:09:01 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in6=@remote}, {0x0, 0x2}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r0, 0xc058534b, &(0x7f00000000c0)={0x7, 0x3, 0x4, 0x80000000, 0xe74, 0xff}) r1 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r1) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r6, @ANYBLOB="000000000000a0af45ffffffff0014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="2000004014000100000000000000000002180000", @ANYRES32=r6, @ANYBLOB="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"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r6, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r6}}, 0x18}}, 0x0) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000005600)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000055c0)={&(0x7f0000001080)={0xa00, 0x0, 0x4, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8}, {0xc0, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x80000001}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x9}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x4, 0x4, 0xf2, 0x7ff}, {0x138b, 0x80, 0x1, 0x3}]}}}]}}, {{0x8}, {0x1e4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0xba}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}, {0x3c, 0x1, @lb_tx_method={{0x24, 0x1, 'lb_tx_method\x00'}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x40}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0xffff}}}, {0x54, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x24, 0x4, [{0x40, 0x3, 0x4, 0x9}, {0x20, 0x7, 0x6c, 0x1bb}, {0x3ff, 0xfe, 0x81, 0xb8}, {0x3f, 0xc1, 0x80}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x4}}}]}}, {{0x8}, {0x108, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xf6}}, {0x8}}}]}}, {{0x8}, {0xb0, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24, 0x1, 'user_linkup_enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24, 0x1, 'mcast_rejoin_count\x00'}, {0x5}, {0x8, 0x4, 0x1}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x5}}}, {0x34, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x4}}}, {0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0xffff}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24, 0x1, 'activeport\x00'}, {0x5}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24, 0x1, 'bpf_hash_func\x00'}, {0x5}, {0x14, 0x4, [{0x5, 0xe, 0x0, 0x2}, {0x6f8, 0x4, 0x40, 0x7}]}}}]}}, {{0x8}, {0x4}}, {{0x8}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24, 0x1, 'lb_stats_refresh_interval\x00'}, {0x5}, {0x8, 0x4, 0x85}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24, 0x1, 'lb_tx_hash_to_port_mapping\x00'}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0xfffffffa}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}]}}, {{0x8}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24, 0x1, 'priority\x00'}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8}, {0x130, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x40000000}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0xfff}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x5}, {0x8, 0x4, 0x65e63086}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}]}}, {{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x5}, {0x8, 0x4, 0x7f}}}, {0x40, 0x1, @lb_port_stats={{{0x24, 0x1, 'lb_port_stats\x00'}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24, 0x1, 'enabled\x00'}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @queue_id={{{0x24, 0x1, 'queue_id\x00'}, {0x5}, {0x8, 0x4, 0x9}}, {0x8, 0x6, r6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x5}, {0x8, 0x4, 0x7fffffff}}, {0x8}}}]}}]}, 0xa00}, 0x1, 0x0, 0x0, 0x8c1}, 0x20008000) [ 1450.064472] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=6 sclass=netlink_route_socket pid=18643 comm=syz-executor.5 [ 1450.084331] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1450.147900] audit: type=1326 audit(1590041341.409:2728): auid=0 uid=0 gid=0 ses=4 subj=system_u:system_r:kernel_t:s0 pid=18640 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45f86a code=0x0 [ 1450.190858] device bond109 entered promiscuous mode [ 1450.244524] bond1 (unregistering): Releasing backup interface veth5 [ 1450.288407] device veth5 left promiscuous mode [ 1450.437337] Unknown ioctl 1076910120 [ 1450.442680] IPVS: length: 194 != 2950900408 [ 1450.487194] bond1 (unregistering): Released all slaves [ 1450.538108] bond109: making interface veth579 the new active one [ 1450.544378] device veth579 entered promiscuous mode [ 1450.556558] bond109: Enslaving veth579 as an active interface with an up link [ 1450.576327] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1450.612177] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1450.630336] audit: type=1804 audit(1590041341.899:2729): pid=18678 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/798/file0/file0" dev="loop3" ino=2 res=1 [ 1450.669862] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. 06:09:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x7, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:09:02 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0xf401) 06:09:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f0000000140)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="90000000000701080000000000000000070000080c000340fffffffffffffffe08000540000000022c00078008000140000000080800020001080001400000003f0800014000000aec0c000240000000000000e56633e6307aeeeb7a31000000000c00024000000000000000060c00064000000000000000050900010073797a3000000000"], 0x90}, 0x1, 0x0, 0x0, 0x40000}, 0x10000) r2 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r2) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:09:02 executing program 4: r0 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000100)={0x980000, 0x80, 0x1, r2, 0x0, &(0x7f0000000080)={0x9e0903, 0x2, [], @value=0x1}}) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = socket$inet6(0xa, 0x3, 0x1) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(0xffffffffffffffff, 0x40505331, &(0x7f0000000000)={{0x7, 0x3f}, {0xf7, 0x55}, 0x4, 0x1, 0x6}) r4 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r4, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) sendmsg$NL80211_CMD_START_AP(r4, &(0x7f0000000840)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10100004}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="0509fc1b", @ANYRES16=0x0, @ANYBLOB="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"], 0x540}, 0x1, 0x0, 0x0, 0x1}, 0x0) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = syz_open_dev$vivid(&(0x7f0000001a00)='/dev/video#\x00', 0x1, 0x2) ioctl$FS_IOC_FSGETXATTR(r5, 0x801c581f, &(0x7f0000001a40)={0x2, 0x800, 0x527, 0xfffffff8, 0xfff}) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r3, &(0x7f0000000480), 0x2e9, 0x0) [ 1450.838123] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:09:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r3, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) ioctl$SIOCAX25GETINFOOLD(r2, 0x89e9, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_DISABLE(r0, 0x2401, 0xa490) io_submit(r1, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x10000}]) setsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000)=0x4, 0x4) r4 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r4, &(0x7f0000000480), 0x2e9, 0x0) [ 1450.949083] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7 sclass=netlink_route_socket pid=18752 comm=syz-executor.5 [ 1450.980293] device bond110 entered promiscuous mode 06:09:02 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x10000}]) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000000)={0x1f, 0x8, 0x400}) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1451.066333] bond110: making interface veth581 the new active one [ 1451.087930] audit: type=1804 audit(1590041342.349:2730): pid=18801 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/799/file0" dev="sda1" ino=16483 res=1 [ 1451.128189] device veth581 entered promiscuous mode [ 1451.150159] bond110: Enslaving veth581 as an active interface with an up link [ 1451.194271] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:09:02 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x96, 0x0, 0x40, 0x0, 0x41c1, 0x40000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_config_ext={0x5e3b, 0x7ff}, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x1, 0xffffffffffffffff, 0xb) bind$netlink(r0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0x9}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(r2, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x90000001}) r3 = socket$nl_generic(0x10, 0x3, 0x10) dup3(0xffffffffffffffff, r2, 0x80000) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040)='nl80211\x00') openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/btrfs-control\x00', 0x4002, 0x0) ioctl$VIDIOC_G_SELECTION(0xffffffffffffffff, 0xc040565e, &(0x7f0000000300)={0x3, 0x3, 0x4, {0x9, 0x800ad22, 0x3ff, 0x1}}) sendmsg$NL80211_CMD_REQ_SET_REG(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x20, r4, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x20, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x2404c055}, 0x48008) sendmsg$L2TP_CMD_TUNNEL_MODIFY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB=';\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="235825bd7000fedbdf2503000000060001000000000006001c00ff070000"], 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:09:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xa}], 0xc182, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) r1 = creat(&(0x7f00000002c0)='./bus\x00', 0x0) ioctl$VHOST_SET_FEATURES(r1, 0x4008af00, &(0x7f00000001c0)=0x1000000) r2 = openat$vcsa(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcsa\x00', 0x1, 0x0) preadv(r2, &(0x7f0000001640)=[{&(0x7f0000000100)=""/29, 0x1d}, {&(0x7f0000000400)=""/218, 0xda}, {&(0x7f0000000540)=""/201, 0xc9}, {&(0x7f0000000240)=""/97, 0x61}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000000140)=""/64, 0x40}], 0x6, 0x2) 06:09:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x3f00) [ 1451.291310] bond110: Enslaving veth583 as a backup interface with an up link 06:09:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x8, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1451.455889] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1451.503354] audit: type=1804 audit(1590041342.769:2731): pid=18829 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/800/file0/file0" dev="sda1" ino=16479 res=1 [ 1451.567387] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8 sclass=netlink_route_socket pid=18835 comm=syz-executor.5 06:09:02 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) accept$netrom(0xffffffffffffffff, 0x0, &(0x7f0000000040)) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@local, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa6a}, {0x0, 0x400000000}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r2 = creat(&(0x7f0000000000)='./bus\x00', 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, &(0x7f0000000080)={0x0, 0x0, 0xffff, 0x80000001}) r3 = openat(0xffffffffffffffff, &(0x7f00000002c0)='./bus\x00', 0x200100, 0x130) getsockopt$bt_sco_SCO_CONNINFO(r3, 0x11, 0x2, &(0x7f0000000300)=""/236, &(0x7f0000000400)=0xec) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r4, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f0000000000), 0x10000}]) syz_genetlink_get_family_id$smc(&(0x7f0000003740)='SMC_PNETID\x00') sendmsg$SMC_PNETID_FLUSH(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000440)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES64, @ANYBLOB="36002c0402000005000404000000000000000073797a3100000000000000000000ca32048b492eb0a9598ddd09e5bcd891e9c0d5d52e7068ee"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x40004) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x0) 06:09:02 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB="340000001000050d00"/20, @ANYRES32=r3, @ANYBLOB="000000000000000014001280090001007663616e"], 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x18, 0x0, 0x0, r3}, [@IFA_LOCAL={0x8, 0x2, @multicast1}]}, 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="2000000014000100000000000001000002100000", @ANYRES32=r3, @ANYBLOB="08000200e0000001"], 0x20}, 0x1, 0xf0ffffff}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=@ipv4_deladdr={0x18, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}}, 0x18}}, 0x0) r4 = creat(&(0x7f0000000000)='./bus\x00', 0x0) io_setup(0xa00, &(0x7f00000004c0)=0x0) io_submit(r5, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r4, &(0x7f0000000000), 0x10000}]) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@private0, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @initdev}}}, &(0x7f0000000280)=0xe8) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000880)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000640)=ANY=[@ANYBLOB="c8010000", @ANYRES16=0x0, @ANYBLOB="00022cbd7000fedbdf25010000002400018008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r3, @ANYBLOB="0b000100", @ANYRES32=r6, @ANYBLOB="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"], 0x1c8}, 0x1, 0x0, 0x0, 0x10}, 0x24000040) getegid() creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) [ 1451.671101] device bond111 entered promiscuous mode 06:09:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x1fffff) 06:09:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x800, 0x0, 0x0, 0x0, 0xa, 0x80, 0x0, 0x2b}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) openat(r2, &(0x7f0000000000)='./file0\x00', 0x204040, 0x40) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1451.763301] bond111: making interface veth585 the new active one [ 1451.798094] device veth585 entered promiscuous mode 06:09:03 executing program 2: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0xf6ffffff00000000) [ 1451.821063] bond111: Enslaving veth585 as an active interface with an up link [ 1451.860540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1451.890165] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1451.945666] bond111: Enslaving veth587 as a backup interface with an up link [ 1451.966282] audit: type=1804 audit(1590041343.229:2732): pid=18888 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/801/file0" dev="sda1" ino=16441 res=1 06:09:03 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0xfec0000000000000) [ 1451.999082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. 06:09:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0xfc) 06:09:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0x9, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 06:09:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x40, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x480, 0x4}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x802) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm_plock\x00', 0xe2c02, 0x0) recvfrom$rxrpc(r2, &(0x7f0000000300)=""/180, 0xb4, 0x10003, &(0x7f00000003c0)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x4e22, @local}}, 0x24) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e24, 0x5, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}}, 0x70, 0x5, 0x8001, 0x7, 0x1, 0x8, 0x1}, &(0x7f0000000080)=0x9c) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f00000002c0)={0x2, 0x7, 0x25c917d47569b755, 0x101, 0x6, 0x6, 0xab, 0x9, r4}, 0x20) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000000)) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) 06:09:03 executing program 3: setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000300)={{{@in6=@private2, @in=@multicast1}, {}, {0x0, 0x0, 0x0, 0x2}}, {{@in6=@local}, 0x0, @in=@empty}}, 0xe8) syz_mount_image$bfs(&(0x7f0000000000)='bfs\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x1, &(0x7f0000000080)=[{&(0x7f0000000180)="cefaad1bb83c000040dc", 0xff0f}], 0xc102, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000400)) fchdir(r0) creat(&(0x7f0000000500)='./file0\x00', 0x0) creat(&(0x7f00000002c0)='./bus\x00', 0x0) 06:09:03 executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(r0, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00003cef9f), 0x0, 0x0, &(0x7f0000618000)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) pipe2$9p(0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r1, &(0x7f0000000480), 0x2e9, 0x4000000000000000) [ 1452.211598] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 06:09:03 executing program 2 (fault-call:0 fault-nth:0): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000440)=[{&(0x7f0000000140)="01434430303107004c494e55582020202020202020a7500a8ba9ec534b20202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000200)="1743ef8c294ee99bd2aa1c3702b3fb76f5a5ef99d462295306302a63dc2911", 0x1f, 0x2}], 0x0, 0x0) [ 1452.304826] audit: type=1804 audit(1590041343.569:2733): pid=18917 uid=0 auid=0 ses=4 subj=system_u:system_r:kernel_t:s0 op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir752425196/syzkaller.wOeYdK/802/file0/file0" dev="loop3" ino=2 res=1 [ 1452.310999] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=18951 comm=syz-executor.5 [ 1452.349659] device bond112 entered promiscuous mode 06:09:03 executing program 3 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) ioctl$PERF_EVENT_IOC_DISABLE(0xffffffffffffffff, 0x2401, 0x0) [ 1452.437935] bond112: making interface veth589 the new active one [ 1452.456457] device veth589 entered promiscuous mode [ 1452.463578] bond112: Enslaving veth589 as an active interface with an up link [ 1452.469943] FAULT_INJECTION: forcing a failure. [ 1452.469943] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.482999] CPU: 1 PID: 18968 Comm: syz-executor.2 Not tainted 4.19.124-syzkaller #0 [ 1452.490893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.500336] Call Trace: [ 1452.502941] dump_stack+0x1fc/0x2fe [ 1452.506592] should_fail.cold+0xa/0x14 [ 1452.510496] ? setup_fault_attr+0x200/0x200 [ 1452.514841] __should_failslab+0x115/0x180 [ 1452.519085] should_failslab+0x5/0xf [ 1452.522808] __kmalloc+0x2ab/0x3c0 [ 1452.526356] ? __se_sys_memfd_create+0xf7/0x410 [ 1452.531034] __se_sys_memfd_create+0xf7/0x410 06:09:03 executing program 4 (fault-call:1 fault-nth:0): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) [ 1452.535542] ? memfd_file_seals_ptr+0x150/0x150 [ 1452.540304] ? __se_sys_clock_nanosleep+0x2b0/0x2b0 [ 1452.545330] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1452.550174] ? trace_hardirqs_off_caller+0x69/0x210 [ 1452.555198] ? do_syscall_64+0x21/0x620 [ 1452.559182] do_syscall_64+0xf9/0x620 [ 1452.562996] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1452.568186] RIP: 0033:0x45ca29 [ 1452.571381] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1452.590381] RSP: 002b:00007fb8283ffa68 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1452.596299] netlink: 'syz-executor.5': attribute type 1 has an invalid length. [ 1452.598172] RAX: ffffffffffffffda RBX: 0000000000508a00 RCX: 000000000045ca29 [ 1452.598182] RDX: 0000000020000470 RSI: 0000000000000000 RDI: 00000000004c1b91 [ 1452.598189] RBP: 000000000078bf00 R08: fe03f80fe03f80ff R09: 0000000000000001 [ 1452.598197] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000003 06:09:03 executing program 0: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000961fe4)=[@in={0x2, 0x0, @dev}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="01050000", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000001580)=[{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000240)="ca", 0x1}], 0x1, &(0x7f0000000080)=[@sndinfo={0x20, 0x84, 0x2, {0x0, 0x4}}], 0x20}], 0x1, 0x1000000) 06:09:03 executing program 1: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket(0x11, 0x800000003, 0x8) bind(r3, &(0x7f0000000280)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x58) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x1f, &(0x7f0000000140)={r4, @in6={{0xa, 0x4e21, 0x0, @private0={0xfc, 0x0, [], 0x1}, 0xa5c6}}, 0x6}, &(0x7f0000000000)=0x90) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f0000000000)={r4, @in={{0x2, 0x4e23, @multicast1}}, 0x6, 0x3f, 0x8, 0x200, 0x7fff}, &(0x7f0000000100)=0x98) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@mcast2, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x33}, 0x0, @in=@broadcast, 0x0, 0x0, 0x0, 0x6}}, 0xe8) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 1452.598205] R13: 0000000000000bef R14: 00000000004ce30f R15: 00007fb8284006d4 [ 1452.657488] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=9 sclass=netlink_route_socket pid=18951 comm=syz-executor.5 [ 1452.720120] FAULT_INJECTION: forcing a failure. [ 1452.720120] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.750712] CPU: 0 PID: 18978 Comm: syz-executor.4 Not tainted 4.19.124-syzkaller #0 [ 1452.758626] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1452.767984] Call Trace: [ 1452.770600] dump_stack+0x1fc/0x2fe [ 1452.774243] should_fail.cold+0xa/0x14 [ 1452.778147] ? setup_fault_attr+0x200/0x200 [ 1452.782483] __should_failslab+0x115/0x180 [ 1452.786727] should_failslab+0x5/0xf [ 1452.790450] __kmalloc+0x2ab/0x3c0 [ 1452.794006] ? tracepoint_probe_unregister+0x1a1/0x680 [ 1452.796718] bond112: Enslaving veth591 as a backup interface with an up link [ 1452.799294] ? perf_trace_sched_kthread_stop+0x4e0/0x4e0 [ 1452.799328] ? perf_trace_sched_kthread_stop+0x4e0/0x4e0 [ 1452.817537] tracepoint_probe_unregister+0x1a1/0x680 [ 1452.822652] ? perf_trace_sched_kthread_stop+0x4e0/0x4e0 [ 1452.828120] trace_event_reg+0x181/0x340 [ 1452.832612] ? __sanitizer_cov_trace_switch+0x45/0x70 [ 1452.837828] perf_trace_event_unreg.isra.0+0xaa/0x200 [ 1452.843552] perf_trace_destroy+0xb5/0xf0 [ 1452.847713] ? perf_tp_event_init+0x120/0x120 [ 1452.852220] _free_event+0x33b/0x1180 [ 1452.856039] ? ring_buffer_attach+0x630/0x630 [ 1452.860584] ? wait_for_completion_io+0x10/0x10 [ 1452.865274] put_event+0x40/0x50 [ 1452.868656] perf_event_release_kernel+0x64a/0xc60 [ 1452.873620] ? put_event+0x50/0x50 [ 1452.877178] ? perf_event_release_kernel+0xc60/0xc60 [ 1452.882288] perf_release+0x33/0x40 [ 1452.885944] __fput+0x2cd/0x890 [ 1452.889241] task_work_run+0x13f/0x1b0 [ 1452.893141] exit_to_usermode_loop+0x251/0x2a0 [ 1452.897732] do_syscall_64+0x538/0x620 [ 1452.901629] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1452.906818] RIP: 0033:0x45ca29 [ 1452.910017] Code: 0d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 db b6 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1452.929090] RSP: 002b:00007f7353259c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 1452.936782] RAX: 0000000000000000 RBX: 00000000004dac40 RCX: 000000000045ca29 [ 1452.944040] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1452.951308] RBP: 000000000078bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1452.958581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004 06:09:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = fcntl$dupfd(r4, 0x0, r3) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="fe2f0000000100001c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5000000010001fff000000000008000000000000", @ANYRES32=0x0, @ANYBLOB="000000000000000028001200090001007665746800000000180002001400010000000000", @ANYRES32, @ANYBLOB="200002000010000008000a00", @ANYRES32=r6], 0x50}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000500)=@newlink={0x20, 0xa, 0x40d, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) [ 1452.965850] R13: 0000000000000078 R14: 00000000005255f2 R15: 00007f735325a6d4 06:09:04 executing program 2 (fault-call:0 fault-nth:1): syz_mount_image$iso9660(&(0x7f0000000000)='iso9660\x00', &(0x7f0000000040)='./file0\x00', 0xfffffffffffffffe, 0x2, &(0x7f0000000440)=[{&(0x7f0000000140)="01434430303107004c494e55582020202020202020a7500a8ba9ec534b20202020202020202020204344524f4d20202020202020202020202020202020202020202020202020202000000000000000004f0200000000024f000000000000000000000000000000000000000000000000000000000000000001000001010000010008", 0x82, 0x8000}, {&(0x7f0000000200)="1743ef8c294ee99bd2aa1c3702b3fb76f5a5ef99d462295306302a63dc2911", 0x1f, 0x2}], 0x0, 0x0) 06:09:04 executing program 4 (fault-call:1 fault-nth:1): r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0xdd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0)