x 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1495.753448][ T2796] asix: probe of 4-1:0.0 failed with error -71 [ 1495.788894][ T2796] usb 4-1: USB disconnect, device number 13 [ 1495.818500][T21754] (null): failure setting delay to 10us [ 1495.826606][T21754] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5 [ 1495.869101][T21754] usb 2-1: USB disconnect, device number 68 [ 1496.499575][T21754] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 1496.588901][ T5] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 1496.838765][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 1496.909914][T21754] usb 4-1: New USB device found, idVendor=2001, idProduct=1a02, bcdDevice=f8.9b [ 1496.920229][T21754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1496.946061][T21754] usb 4-1: config 0 descriptor?? [ 1497.080103][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1497.099621][ T5] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1497.116272][ T5] usb 2-1: Manufacturer: syz [ 1497.122882][ T5] usb 2-1: SerialNumber: syz [ 1497.142720][ T5] usb 2-1: config 0 descriptor?? [ 1497.190165][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 069 [ 1497.208874][T21754] asix 4-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 1497.239695][T21754] asix: probe of 4-1:0.0 failed with error -71 [ 1497.260301][T21754] usb 4-1: USB disconnect, device number 14 16:41:39 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x112, 0x0) 16:41:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16b, 0x0) [ 1497.298657][ T5] (null): failure setting delay to 10us 16:41:39 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x12}}, 0x0) 16:41:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 16:41:39 executing program 3: pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000100)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) sendmsg$alg(r2, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) splice(r2, 0x0, r0, 0x0, 0xd86dac9, 0x0) sendmsg$NLBL_MGMT_C_REMOVEDEF(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x20008040) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x1b, 0xe, 0x0, 0x8, 0x4, 0xffffffffffffffff, 0x4, [], 0x0, r0, 0x0, 0x5, 0x1}, 0x40) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NLBL_MGMT_C_LISTALL(r4, 0x0, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180)='batadv\x00') sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x1c, r7, 0xf, 0x0, 0x0, {0x5}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000100)='SEG6\x00') sendmsg$SEG6_CMD_SETHMAC(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r9, @ANYBLOB="050000000000000000000100000004000400050005000000000005000600000000000800030001000000"], 0x30}, 0x1, 0x6c}, 0x0) sendmsg$SEG6_CMD_SETHMAC(r6, &(0x7f0000001280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x28, r9, 0x10, 0x70bd29, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @rand_addr=' \x01\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x8180) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x9, &(0x7f0000000140)=@raw=[@exit, @map={0x18, 0xd, 0x1, 0x0, r3}, @jmp={0x5, 0x0, 0x8, 0x0, 0x1, 0x2, 0xffffffffffffffee}, @ldst={0x1, 0x3, 0x6, 0x3, 0x9, 0x1, 0xfffffffffffffffc}, @jmp={0x5, 0x0, 0x0, 0xa, 0x0, 0x8, 0x8}, @map_val={0x18, 0x2, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x88}, @ldst={0x0, 0x2, 0x1, 0x5, 0x6, 0xfffffffffffffffe}], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, [], 0x0, 0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 16:41:39 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000600)=ANY=[@ANYRES64=r0], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1497.371961][ T5] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5 [ 1497.479546][ T5] usb 2-1: USB disconnect, device number 69 [ 1497.589512][T19133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 16:41:40 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x113, 0x0) 16:41:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16c, 0x0) [ 1497.810754][T19147] device syz_tun left promiscuous mode [ 1497.821941][T19147] bridge662: port 1(syz_tun) entered disabled state [ 1497.907238][T19147] bridge663: port 1(syz_tun) entered blocking state [ 1497.939466][T19147] bridge663: port 1(syz_tun) entered disabled state [ 1498.023675][T19147] device syz_tun entered promiscuous mode [ 1498.108580][ T5] usb 2-1: new full-speed USB device number 70 using dummy_hcd [ 1498.123033][T19149] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:40 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x114, 0x0) 16:41:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 16:41:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16d, 0x0) 16:41:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x13}}, 0x0) [ 1498.390013][ T5] usb 2-1: device descriptor read/64, error 18 16:41:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) [ 1498.475980][T19168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16e, 0x0) 16:41:41 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x115, 0x0) [ 1498.648493][T19173] device syz_tun left promiscuous mode [ 1498.660412][T19173] bridge663: port 1(syz_tun) entered disabled state 16:41:41 executing program 3: syz_usb_connect$cdc_ncm(0x2, 0x6e, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x10, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x5c, 0x2, 0x1, 0x0, 0x0, 0x0, {{0x9, 0x4, 0x0, 0x0, 0x1, 0x2, 0xd, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, {0x6}}, {{0x9, 0x5, 0x81, 0x3, 0x0, 0x2}}}}}}]}}, 0x0) [ 1498.778588][ T5] usb 2-1: device descriptor read/64, error 18 [ 1498.789873][T19173] bridge664: port 1(syz_tun) entered blocking state [ 1498.838414][T19173] bridge664: port 1(syz_tun) entered disabled state [ 1498.877591][T19173] device syz_tun entered promiscuous mode [ 1498.992077][T19173] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1499.067950][ T5] usb 2-1: new full-speed USB device number 71 using dummy_hcd [ 1499.228879][ T2484] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 1499.338536][ T5] usb 2-1: device descriptor read/64, error 18 [ 1499.599022][ T2484] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1499.616942][ T2484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1499.635367][ T2484] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1499.728524][ T5] usb 2-1: device descriptor read/64, error 18 [ 1499.819333][ T2484] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1499.832287][ T2484] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1499.848004][ T2484] usb 4-1: Product: syz [ 1499.853952][ T2484] usb 4-1: Manufacturer: syz [ 1499.865857][ T5] usb usb2-port1: attempt power cycle [ 1499.872478][ T2484] usb 4-1: SerialNumber: syz [ 1500.168673][ T2484] cdc_ncm 4-1:1.0: bind() failure [ 1500.201142][ T2484] cdc_ncm 4-1:1.1: bind() failure [ 1500.237943][ T2484] usb 4-1: USB disconnect, device number 15 16:41:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x116, 0x0) 16:41:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16f, 0x0) 16:41:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x14}}, 0x0) 16:41:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x8c}}, 0x0) 16:41:43 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xabe7ea8d954f6bc5, 0x100) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r2, 0x28, &(0x7f00000000c0)}, 0x10) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x20, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1500.664572][T19217] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x170, 0x0) 16:41:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x117, 0x0) [ 1500.828817][T19228] device syz_tun left promiscuous mode [ 1500.856401][T19228] bridge664: port 1(syz_tun) entered disabled state 16:41:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 16:41:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) [ 1500.933650][T19228] bridge665: port 1(syz_tun) entered blocking state [ 1500.958703][ T5412] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 1501.017427][T19228] bridge665: port 1(syz_tun) entered disabled state [ 1501.032221][ T5] usb 2-1: new high-speed USB device number 72 using dummy_hcd 16:41:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x118, 0x0) [ 1501.096293][T19228] device syz_tun entered promiscuous mode [ 1501.159153][ T5] usb 2-1: Using ep0 maxpacket: 16 [ 1501.216409][T19247] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x15}}, 0x0) [ 1501.401855][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1501.422121][ T5412] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1501.427348][ T5] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1501.462314][ T5412] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1501.483256][ T5] usb 2-1: Manufacturer: syz [ 1501.505842][ T5] usb 2-1: SerialNumber: syz [ 1501.513202][T19252] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1501.528441][ T5412] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1501.533186][ T5] usb 2-1: config 0 descriptor?? [ 1501.576927][T19254] device syz_tun left promiscuous mode [ 1501.586342][T19254] bridge665: port 1(syz_tun) entered disabled state [ 1501.640822][ T5] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 072 [ 1501.667663][T19254] bridge666: port 1(syz_tun) entered blocking state [ 1501.690167][T19254] bridge666: port 1(syz_tun) entered disabled state [ 1501.706087][T19254] device syz_tun entered promiscuous mode [ 1501.726952][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1501.750651][ T5412] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1501.777814][ T5412] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1501.796764][ T5412] usb 4-1: Product: syz [ 1501.804826][ T5412] usb 4-1: Manufacturer: syz [ 1501.811761][ T5412] usb 4-1: SerialNumber: syz 16:41:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x172, 0x0) 16:41:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9]}}]}}]}, 0x8c}}, 0x0) 16:41:44 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x119, 0x0) 16:41:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x16}}, 0x0) 16:41:44 executing program 3: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xe9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$ipvs(0xffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x0) [ 1501.939467][ T5412] cdc_ncm 4-1:1.0: bind() failure [ 1502.029368][ T5412] cdc_ncm 4-1:1.1: bind() failure [ 1502.085586][T19272] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1502.147099][ T5412] usb 4-1: USB disconnect, device number 16 [ 1502.285512][T19282] device syz_tun left promiscuous mode [ 1502.300767][ T5] i2c i2c-0: connected i2c-tiny-usb device [ 1502.326206][T19282] bridge666: port 1(syz_tun) entered disabled state [ 1502.395248][T19282] bridge667: port 1(syz_tun) entered blocking state [ 1502.420256][T19282] bridge667: port 1(syz_tun) entered disabled state [ 1502.449671][T19282] device syz_tun entered promiscuous mode [ 1502.470426][T19282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1502.503176][T21754] usb 2-1: USB disconnect, device number 72 [ 1503.288553][ T5] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1503.558738][ T5] usb 2-1: Using ep0 maxpacket: 16 16:41:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa]}}]}}]}, 0x8c}}, 0x0) 16:41:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11a, 0x0) 16:41:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x173, 0x0) 16:41:46 executing program 3: syz_usb_connect$cdc_ecm(0x0, 0x5f, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x2, 0x0, 0x0, 0x20, 0x525, 0xa4a1, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x4d, 0x1, 0x1, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6, 0x0, 0x0, {{0x5}, {0x5}, {0xd}, [@mdlm_detail={0x5, 0x24, 0x13, 0x0, "c3"}, @dmm={0x7}, @country_functional={0x6}]}}}]}}]}}, 0x0) 16:41:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x17}}, 0x0) 16:41:46 executing program 1: r0 = syz_usb_connect(0x4, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902f3ff00000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) ioctl$NS_GET_NSTYPE(r1, 0xb703, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r2, 0x800c6613, &(0x7f0000000180)=@v2={0x2, @aes256, 0x1, [], "28661f85268580aebb1a3d2d155cc76c"}) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) ioctl$SG_GET_LOW_DMA(r3, 0x227a, &(0x7f0000000140)) r4 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/full\x00', 0x20200, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f0000002640)="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", &(0x7f00000014c0)="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", 0xfffff252, r4}, 0x38) rt_sigtimedwait(&(0x7f0000000200)={[0x8001]}, &(0x7f0000000280), &(0x7f0000000300), 0x8) setsockopt$IP_VS_SO_SET_EDITDEST(r1, 0x0, 0x489, &(0x7f0000000000)={{0x3a, @local, 0x4e24, 0x0, 'sed\x00', 0x7, 0x0, 0x79}, {@dev={0xac, 0x14, 0x14, 0x16}, 0x4e24, 0x10000, 0x3, 0x80000000, 0x68000000}}, 0x44) r5 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(r5, 0x0, r5) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x1d, &(0x7f0000000340)=0x3, 0x4) [ 1503.899224][ T5] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1504.035546][ T5] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1504.070771][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x174, 0x0) [ 1504.144241][ T5] usb 2-1: Manufacturer: syz 16:41:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11b, 0x0) [ 1504.211252][T19327] device syz_tun left promiscuous mode [ 1504.228456][T21754] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1504.240062][ T5] usb 2-1: config 0 descriptor?? [ 1504.277951][T19327] bridge667: port 1(syz_tun) entered disabled state [ 1504.306119][ T5] usb 2-1: can't set config #0, error -71 [ 1504.396141][T19327] bridge668: port 1(syz_tun) entered blocking state [ 1504.417406][ T5] usb 2-1: USB disconnect, device number 73 [ 1504.444979][T19327] bridge668: port 1(syz_tun) entered disabled state [ 1504.541027][T21754] usb 4-1: Using ep0 maxpacket: 32 [ 1504.564066][T19327] device syz_tun entered promiscuous mode 16:41:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x175, 0x0) 16:41:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11c, 0x0) [ 1504.670191][T19328] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb]}}]}}]}, 0x8c}}, 0x0) 16:41:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x18}}, 0x0) [ 1504.719703][T21754] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 16:41:47 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7cc25"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000500)={0x44, &(0x7f0000000000)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1504.982295][T19350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x176, 0x0) 16:41:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11d, 0x0) [ 1505.069051][T21754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1505.104869][T21754] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1505.121845][T21754] usb 4-1: Product: syz [ 1505.131567][T21754] usb 4-1: Manufacturer: syz [ 1505.178940][T21754] usb 4-1: SerialNumber: syz [ 1505.203768][T19355] device syz_tun left promiscuous mode [ 1505.226505][T19355] bridge668: port 1(syz_tun) entered disabled state [ 1505.310275][T21754] cdc_ether: probe of 4-1:1.0 failed with error -22 [ 1505.448595][T19355] bridge669: port 1(syz_tun) entered blocking state [ 1505.453545][ T9564] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1505.514911][ T2796] usb 4-1: USB disconnect, device number 17 [ 1505.523944][T19355] bridge669: port 1(syz_tun) entered disabled state [ 1505.584812][T19355] device syz_tun entered promiscuous mode [ 1505.637613][T19358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1505.739048][ T9564] usb 2-1: Using ep0 maxpacket: 16 [ 1506.008701][ T9564] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1506.031904][ T9564] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1506.057006][ T9564] usb 2-1: Manufacturer: syz [ 1506.070339][ T9564] usb 2-1: SerialNumber: syz [ 1506.090649][ T9564] usb 2-1: config 0 descriptor?? [ 1506.142077][ T9564] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 074 [ 1506.298940][ T2796] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 1506.558609][ T2796] usb 4-1: Using ep0 maxpacket: 32 [ 1506.688788][ T2796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 0 [ 1506.765489][T19359] udc-core: couldn't find an available UDC or it's busy [ 1506.785672][T19359] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1506.818745][ T9564] i2c i2c-0: failure reading functionality [ 1506.865877][ T9564] i2c i2c-0: connected i2c-tiny-usb device [ 1506.889879][ T2796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1506.904912][ T9564] usb 2-1: USB disconnect, device number 74 16:41:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x177, 0x0) 16:41:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc]}}]}}]}, 0x8c}}, 0x0) 16:41:49 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11e, 0x0) 16:41:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x19}}, 0x0) 16:41:49 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) [ 1506.960861][ T2796] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1507.070562][ T2796] usb 4-1: Product: syz [ 1507.117265][ T2796] usb 4-1: Manufacturer: syz [ 1507.157241][T19405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1507.194170][ T2796] usb 4-1: SerialNumber: syz 16:41:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x178, 0x0) [ 1507.329631][ T2796] usb 4-1: can't set config #1, error -71 16:41:49 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x11f, 0x0) [ 1507.452475][ T2796] usb 4-1: USB disconnect, device number 18 [ 1507.488662][T19411] device syz_tun left promiscuous mode [ 1507.567103][T19411] bridge669: port 1(syz_tun) entered disabled state 16:41:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe]}}]}}]}, 0x8c}}, 0x0) 16:41:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x120, 0x0) [ 1507.668823][ T2825] usb 2-1: new high-speed USB device number 75 using dummy_hcd [ 1507.732894][T19411] bridge670: port 1(syz_tun) entered blocking state [ 1507.767498][T19411] bridge670: port 1(syz_tun) entered disabled state [ 1507.795682][T19411] device syz_tun entered promiscuous mode [ 1507.833113][T19414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1507.865443][T19405] device syz_tun left promiscuous mode [ 1507.878608][ T2796] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 1507.919706][T19405] bridge670: port 1(syz_tun) entered disabled state [ 1507.988645][ T2825] usb 2-1: Using ep0 maxpacket: 16 [ 1508.120276][ T2796] usb 4-1: Using ep0 maxpacket: 8 [ 1508.240227][ T2825] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1508.284915][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1508.321205][ T2825] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1508.358452][ T2825] usb 2-1: Manufacturer: syz 16:41:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1a}}, 0x0) 16:41:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x179, 0x0) 16:41:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x121, 0x0) 16:41:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf]}}]}}]}, 0x8c}}, 0x0) [ 1508.377423][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 16:41:50 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r1}, 0x15) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r2}, 0x15) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000000)={0x0, 0x66, "a36fa6043b56492752df2f9792bdc9dd4959417a63affe369a20711a3315635e7c30f41453037dc75713d2c649bc0cefbf6ade048df2db3b153ddfb44e6942471aa868606afd482df27ad91ef8859b5b4b26ae87a7b9f303369ce8c3ee65bf9bb084d0fef5e3"}, &(0x7f0000000080)=0x6e) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f00000000c0)={r3, 0x4bb5, 0x0, 0x7, 0xffffffffffffa07c}, &(0x7f0000000100)=0x18) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1508.435177][ T2825] usb 2-1: SerialNumber: syz [ 1508.502989][ T2825] usb 2-1: config 0 descriptor?? [ 1508.551630][T19444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1508.559389][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 16:41:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17a, 0x0) [ 1508.639251][ T2825] usb 2-1: can't set config #0, error -71 16:41:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x122, 0x0) [ 1508.821171][T19454] bridge671: port 1(syz_tun) entered blocking state [ 1508.847244][ T2825] usb 2-1: USB disconnect, device number 75 [ 1508.873531][ T2796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1508.883716][T19454] bridge671: port 1(syz_tun) entered disabled state [ 1508.910354][T19454] device syz_tun entered promiscuous mode [ 1508.955484][ T2796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1508.986660][T19457] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1509.047754][ T2796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1509.130160][T19412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1509.189590][T19412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1509.229863][ T2796] hub 4-1:1.0: bad descriptor, ignoring hub [ 1509.276555][ T2796] hub: probe of 4-1:1.0 failed with error -5 [ 1509.308380][ T2825] usb 2-1: new high-speed USB device number 76 using dummy_hcd [ 1509.434920][T19412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1509.444277][T19412] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1509.588554][ T2825] usb 2-1: Using ep0 maxpacket: 16 [ 1509.694773][ T2796] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 19 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1509.909172][ T2825] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1509.928410][ T2825] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1509.962904][ T2825] usb 2-1: Manufacturer: syz [ 1509.984778][ T2825] usb 2-1: SerialNumber: syz [ 1510.013451][ T2825] usb 2-1: config 0 descriptor?? [ 1510.070012][ T2825] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 076 [ 1510.488756][T19412] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 1510.761138][ T2825] i2c i2c-0: connected i2c-tiny-usb device [ 1510.788728][T19412] usb 4-1: Using ep0 maxpacket: 8 [ 1510.941657][T19480] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1510.974419][T19480] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1510.988467][ T2825] usb 2-1: USB disconnect, device number 76 [ 1511.108596][ C0] usblp0: nonzero read bulk status received: -71 16:41:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1b}}, 0x0) 16:41:53 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10]}}]}}]}, 0x8c}}, 0x0) 16:41:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x123, 0x0) 16:41:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17b, 0x0) 16:41:53 executing program 3: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[], 0x0) [ 1511.252402][ T9564] usb 4-1: USB disconnect, device number 19 [ 1511.393112][ T9564] usblp0: removed 16:41:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11]}}]}}]}, 0x8c}}, 0x0) [ 1511.487372][T19510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17c, 0x0) 16:41:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x124, 0x0) [ 1511.768812][T19518] device syz_tun left promiscuous mode [ 1511.841088][T19518] bridge671: port 1(syz_tun) entered disabled state [ 1511.869003][ T2825] usb 2-1: new high-speed USB device number 77 using dummy_hcd [ 1511.968752][ T9564] usb 4-1: new high-speed USB device number 20 using dummy_hcd 16:41:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17d, 0x0) [ 1512.033512][T19518] bridge672: port 1(syz_tun) entered blocking state [ 1512.083457][T19518] bridge672: port 1(syz_tun) entered disabled state [ 1512.157349][T19518] device syz_tun entered promiscuous mode [ 1512.168539][ T2825] usb 2-1: Using ep0 maxpacket: 16 [ 1512.187195][T19544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1512.300962][ T2825] usb 2-1: config 0 has an invalid interface number: 236 but max is 0 16:41:54 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) ioctl$TIOCGDEV(r2, 0x80045432, &(0x7f0000000000)) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:41:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x125, 0x0) 16:41:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1c}}, 0x0) 16:41:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12]}}]}}]}, 0x8c}}, 0x0) 16:41:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17e, 0x0) [ 1512.352733][ T2825] usb 2-1: config 0 has no interface number 0 [ 1512.372147][ T9564] usb 4-1: Using ep0 maxpacket: 8 [ 1512.441151][ T2825] usb 2-1: too many endpoints for config 0 interface 236 altsetting 111: 93, using maximum allowed: 30 [ 1512.539735][ T9564] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1512.567227][ T2825] usb 2-1: config 0 interface 236 altsetting 111 has 0 endpoint descriptors, different from the interface descriptor's value: 93 [ 1512.593920][T19553] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17f, 0x0) [ 1512.653017][ T9564] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 16:41:55 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x126, 0x0) [ 1512.711548][ T2825] usb 2-1: config 0 interface 236 has no altsetting 0 [ 1512.746390][ T9564] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1512.778733][ T2825] usb 2-1: string descriptor 0 read error: -71 [ 1512.786615][T19561] device syz_tun left promiscuous mode [ 1512.789908][ T2825] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1512.799762][T19561] bridge672: port 1(syz_tun) entered disabled state [ 1512.832105][ T9564] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1512.838760][ T2825] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1512.904950][ T2825] usb 2-1: config 0 descriptor?? [ 1512.959867][ T9564] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1512.969457][ T2825] usb 2-1: can't set config #0, error -71 [ 1513.019669][ T2825] usb 2-1: USB disconnect, device number 77 [ 1513.078017][ T9564] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1513.133238][T19561] bridge673: port 1(syz_tun) entered blocking state [ 1513.150612][T19519] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.156962][T19561] bridge673: port 1(syz_tun) entered disabled state [ 1513.166151][T19519] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.177686][T19561] device syz_tun entered promiscuous mode [ 1513.189611][ T9564] hub 4-1:1.0: bad descriptor, ignoring hub [ 1513.197365][ T9564] hub: probe of 4-1:1.0 failed with error -5 [ 1513.235855][T19561] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1513.271262][T19553] device syz_tun left promiscuous mode [ 1513.290776][T19553] bridge673: port 1(syz_tun) entered disabled state [ 1513.398681][ T2825] usb 2-1: new high-speed USB device number 78 using dummy_hcd [ 1513.431998][T19519] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.459161][T19519] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1513.658652][ T2825] usb 2-1: Using ep0 maxpacket: 16 [ 1513.736856][ T9564] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 20 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1513.910297][ T2825] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1513.924304][ T2825] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1513.934778][ T2825] usb 2-1: Manufacturer: syz [ 1513.956398][ T2825] usb 2-1: SerialNumber: syz [ 1513.975513][ T2825] usb 2-1: config 0 descriptor?? [ 1514.021496][ T2825] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 078 [ 1514.418589][T19519] usb 4-1: reset high-speed USB device number 20 using dummy_hcd [ 1514.688535][T19519] usb 4-1: Using ep0 maxpacket: 8 [ 1514.707210][ T2825] i2c i2c-0: connected i2c-tiny-usb device [ 1514.806737][T19592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1514.830155][T19592] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1514.888573][ C1] usblp0: nonzero read bulk status received: -71 [ 1514.932072][ T2825] usb 2-1: USB disconnect, device number 78 [ 1515.078140][ T2826] usb 4-1: USB disconnect, device number 20 [ 1515.103088][ T2826] usblp0: removed 16:41:58 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='htcp\x00', 0xfd6b) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, [], 0x1c}, 0xd}, 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vcan0\x00'}) sendto$inet6(r0, &(0x7f0000000200)='\n', 0xfffffdef, 0x40080, 0x0, 0x1eb) 16:41:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1d}}, 0x0) 16:41:58 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x127, 0x0) 16:41:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x180, 0x0) 16:41:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x13]}}]}}]}, 0x8c}}, 0x0) [ 1515.718535][ T9564] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1515.781104][T19632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1515.868506][T19638] bridge674: port 1(syz_tun) entered blocking state [ 1515.909241][T19638] bridge674: port 1(syz_tun) entered disabled state [ 1515.937995][T19638] device syz_tun entered promiscuous mode [ 1515.958673][ T9564] usb 2-1: Using ep0 maxpacket: 16 [ 1515.994995][T19638] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1516.208749][ T9564] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1516.218787][ T9564] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1516.227408][ T9564] usb 2-1: Manufacturer: syz [ 1516.233340][ T9564] usb 2-1: SerialNumber: syz [ 1516.247239][ T9564] usb 2-1: config 0 descriptor?? 16:41:58 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$capi20(0xffffff9c, &(0x7f0000000000)='/dev/capi20\x00', 0x0, 0x0) 16:41:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) 16:41:58 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x128, 0x0) 16:41:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x58]}}]}}]}, 0x8c}}, 0x0) 16:41:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x1e}}, 0x0) [ 1516.314056][ T9564] usb 2-1: can't set config #0, error -71 [ 1516.387846][ T9564] usb 2-1: USB disconnect, device number 79 [ 1516.519677][T19656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:41:59 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x68, r1, 0x5, 0x0, 0x0, {{}, {0x0, 0xb}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) 16:41:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x60]}}]}}]}, 0x8c}}, 0x0) 16:41:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x129, 0x0) 16:41:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x182, 0x0) [ 1516.714712][T19665] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1516.748881][T19656] device syz_tun left promiscuous mode [ 1516.787175][T19656] bridge674: port 1(syz_tun) entered disabled state 16:41:59 executing program 3: socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) close(0xffffffffffffffff) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') r0 = socket$inet6(0xa, 0x400000000001, 0x0) close(r0) r1 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) sendfile(r0, r1, 0x0, 0x80001d00c0d0) 16:41:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x25}}, 0x0) 16:41:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e]}}]}}]}, 0x8c}}, 0x0) 16:41:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x183, 0x0) 16:41:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12a, 0x0) [ 1517.154617][ T29] audit: type=1800 audit(1595522519.691:42): pid=19682 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 [ 1517.231358][T19686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1517.329971][T19693] bridge676: port 1(syz_tun) entered blocking state [ 1517.363702][T19693] bridge676: port 1(syz_tun) entered disabled state 16:42:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x184, 0x0) 16:42:00 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12b, 0x0) [ 1517.485925][T19693] device syz_tun entered promiscuous mode [ 1517.614120][T19693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1517.635247][ T29] audit: type=1800 audit(1595522520.171:43): pid=19682 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 16:42:00 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf0]}}]}}]}, 0x8c}}, 0x0) 16:42:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x185, 0x0) 16:42:00 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x3, 0x0, &(0x7f0000000280)) 16:42:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x2f}}, 0x0) 16:42:00 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12c, 0x0) 16:42:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x186, 0x0) 16:42:00 executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f00000000c0)=0x6, 0x4) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 16:42:00 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}}]}}]}, 0x8c}}, 0x0) [ 1517.989259][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1518.078479][T19717] device syz_tun left promiscuous mode [ 1518.087784][T19717] bridge676: port 1(syz_tun) entered disabled state 16:42:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x187, 0x0) [ 1518.174569][T19717] bridge677: port 1(syz_tun) entered blocking state [ 1518.203136][T19717] bridge677: port 1(syz_tun) entered disabled state 16:42:00 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12d, 0x0) [ 1518.257067][T19717] device syz_tun entered promiscuous mode [ 1518.299384][T19715] device syz_tun left promiscuous mode [ 1518.313130][T19715] bridge677: port 1(syz_tun) entered disabled state [ 1518.513716][T19717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x188, 0x0) 16:42:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x3c}}, 0x0) 16:42:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12e, 0x0) 16:42:01 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}}]}}]}, 0x8c}}, 0x0) [ 1518.843672][T19747] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x189, 0x0) 16:42:01 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="120100003ab3f110401c3405ce63080003010902120001000000000904"], 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) capget(&(0x7f0000000000)={0x20080522, r1}, &(0x7f0000000040)={0x40003, 0x280001, 0xffff8001, 0x0, 0x7fffffff, 0x934}) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) r3 = socket$netlink(0x10, 0x3, 0x15) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140)='devlink\x00') sendmsg$DEVLINK_CMD_PORT_SET(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="f8000000", @ANYRES16=r4, @ANYBLOB="01030000000000000000060000000f046706129dc1d85b22799d13cc94ed0a7c3475ac8296337671c5a26e82f8c1bfc6bef0343aef0da9b28d4152ee4dcce23679f934cda765b6508511128830740d550df954dabb45cc3901508b5bfd7c57907988b2a06420002871f4a9e1b3ac751441781781b50a89c216cea4daa21797b07daf4a29c9613c848c13f31de58c729755e1fa19d27e4c2301f73618cc909f40e583138be7d9367ae97f7b42c7fd20441331e9a14821408588a9e0b995bfe768fcaa626cbc55f93bebde"], 0xf8}}, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000180)='status\x00') bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000280)={r5, 0xc0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=0x7, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x4}, 0x0, 0x0, &(0x7f0000000080)={0x2, 0x10, 0x74db, 0x944}, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=0xff}}, 0x10) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000002c0)={0xfffffff9, r6}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2, &(0x7f00000000c0)='^\x00', r6}, 0x30) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r4, 0x300, 0x70bd2d, 0x25dfdbfe, {}, [{@nsim={{0xe, 0x1, 'netdevsim\x00'}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000047}, 0x4000010) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) [ 1519.019946][T19751] bridge678: port 1(syz_tun) entered blocking state [ 1519.032535][T19751] bridge678: port 1(syz_tun) entered disabled state 16:42:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x12f, 0x0) [ 1519.060621][T19751] device syz_tun entered promiscuous mode [ 1519.085891][T19754] device syz_tun left promiscuous mode [ 1519.095384][T19754] bridge678: port 1(syz_tun) entered disabled state 16:42:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18a, 0x0) [ 1519.291222][T19754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:02 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, [], 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff28, 0x10, &(0x7f0000000000), 0xfeb6}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x2, 0xe, 0x0, &(0x7f0000000b00)="6d0200"/14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 16:42:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}}]}}]}, 0x8c}}, 0x0) [ 1519.408404][ T2825] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1519.436330][T19747] bridge678: port 1(syz_tun) entered blocking state [ 1519.477129][T19747] bridge678: port 1(syz_tun) entered disabled state 16:42:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x130, 0x0) 16:42:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18b, 0x0) [ 1519.528006][T19747] device syz_tun entered promiscuous mode 16:42:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x47}}, 0x0) [ 1519.658791][ T2825] usb 2-1: Using ep0 maxpacket: 16 16:42:02 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f0000000240)={'icmp6\x00'}, &(0x7f0000000280)=0x1e) 16:42:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x612]}}]}}]}, 0x8c}}, 0x0) 16:42:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x131, 0x0) [ 1519.840063][T19792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18c, 0x0) [ 1519.940898][ T2825] usb 2-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=63.ce [ 1519.993935][ T2825] usb 2-1: New USB device strings: Mfr=8, Product=0, SerialNumber=3 [ 1520.021017][ T2825] usb 2-1: Manufacturer: syz [ 1520.028858][T19798] device syz_tun left promiscuous mode [ 1520.030752][ T2825] usb 2-1: SerialNumber: syz [ 1520.035240][T19798] bridge678: port 1(syz_tun) entered disabled state [ 1520.059406][ T2825] usb 2-1: config 0 descriptor?? [ 1520.130289][ T2825] i2c-tiny-usb 2-1:0.0: version 63.ce found at bus 002 address 080 [ 1520.176323][T19798] bridge679: port 1(syz_tun) entered blocking state [ 1520.233168][T19798] bridge679: port 1(syz_tun) entered disabled state [ 1520.256803][T19798] device syz_tun entered promiscuous mode [ 1520.313726][T19799] device syz_tun left promiscuous mode [ 1520.325955][T19799] bridge679: port 1(syz_tun) entered disabled state 16:42:02 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="120100030102120001000000002904008e09e2f32700747b365b44b2cfaef65e21b309f1e40211322033eca307b7f556553daa6128587cc57a487cebfbcf9c5aa1a5dc43708945d016fab4aeae5fcc20ba003d9b7cb5d0dc851b03000000000000005bebcd478791e055aedced2dd182ed94cac583321720b3cd54702e0a2deca206a6683185afd350ba8a2f48a6319b662946b9fb06b2fca857"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000001c0)=ANY=[@ANYBLOB="000b37000000939a56b5"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:02 executing program 3: socket$inet6_mptcp(0xa, 0x1, 0x106) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) r0 = creat(0x0, 0x0) close(r0) getsockopt$inet_dccp_int(0xffffffffffffffff, 0x21, 0x11, &(0x7f0000000140), 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) socket$pptp(0x18, 0x1, 0x2) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) chdir(&(0x7f0000000240)='./file0\x00') creat(&(0x7f0000000300)='./bus\x00', 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000200)=0x40, 0x4) r1 = socket$inet6(0xa, 0x400000000001, 0x0) close(r1) r2 = open(&(0x7f0000000080)='./bus\x00', 0x164142, 0x0) perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41be, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x4}, 0x82}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ftruncate(r2, 0x200005) sendfile(r1, r2, 0x0, 0x80001d00c0d0) 16:42:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x900]}}]}}]}, 0x8c}}, 0x0) 16:42:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x132, 0x0) 16:42:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18d, 0x0) [ 1520.397690][ T2825] (null): failure setting delay to 10us [ 1520.408825][ T2825] i2c-tiny-usb: probe of 2-1:0.0 failed with error -5 [ 1520.458960][ T2825] usb 2-1: USB disconnect, device number 80 [ 1520.542150][ T29] audit: type=1800 audit(1595522523.081:44): pid=19816 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15752 res=0 [ 1520.627049][T19798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18e, 0x0) 16:42:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x133, 0x0) [ 1520.781640][T19792] bridge679: port 1(syz_tun) entered blocking state [ 1520.803486][T19792] bridge679: port 1(syz_tun) entered disabled state [ 1520.851199][T19792] device syz_tun entered promiscuous mode 16:42:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x60}}, 0x0) 16:42:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa00]}}]}}]}, 0x8c}}, 0x0) [ 1521.008934][ T9564] usb 2-1: new high-speed USB device number 81 using dummy_hcd [ 1521.106922][ T29] audit: type=1800 audit(1595522523.641:45): pid=19828 uid=0 auid=0 ses=4 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="bus" dev="sda1" ino=15758 res=0 16:42:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18f, 0x0) 16:42:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb00]}}]}}]}, 0x8c}}, 0x0) 16:42:03 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) [ 1521.296416][T19855] device syz_tun left promiscuous mode [ 1521.305705][T19855] bridge679: port 1(syz_tun) entered disabled state [ 1521.318527][ T9564] usb 2-1: device descriptor read/64, error 18 [ 1521.384789][T19855] bridge680: port 1(syz_tun) entered blocking state [ 1521.415139][T19855] bridge680: port 1(syz_tun) entered disabled state [ 1521.431502][T19855] device syz_tun entered promiscuous mode [ 1521.445376][T19847] device syz_tun left promiscuous mode [ 1521.453262][T19847] bridge680: port 1(syz_tun) entered disabled state [ 1521.635946][T19867] __nla_validate_parse: 1 callbacks suppressed [ 1521.635961][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1521.738885][ T9564] usb 2-1: device descriptor read/64, error 18 [ 1522.019174][ T9564] usb 2-1: new high-speed USB device number 82 using dummy_hcd [ 1522.308861][ T9564] usb 2-1: device descriptor read/64, error 18 [ 1522.728657][ T9564] usb 2-1: device descriptor read/64, error 18 [ 1522.859060][ T9564] usb usb2-port1: attempt power cycle 16:42:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x190, 0x0) 16:42:06 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x134, 0x0) 16:42:06 executing program 3: perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x395c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000240)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$set_timeout(0xf, r0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 16:42:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0xc0}}, 0x0) 16:42:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc00]}}]}}]}, 0x8c}}, 0x0) 16:42:06 executing program 1: r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) socket$kcm(0x2b, 0x1, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="d7a2310aab8c83bf6ee1f7acca2f56c0e1f10fa44b266a2600dae222494ed307cb0efac1e96c48f13ee0e714b0aaa430b01079718d47bdd0c0f48005d9e1801de565185559c849cca4bb398a72c18830bf0f6fdbb5f507fdc5b4f805a531c7be1aec6f0d29f0b4e76233b1a4e787aa2c9b3356b1927e5e9fc8c41ddda315878ca48ab96e7ad127e82ba90dac7cd6b47acc2e8e86777b0568c8f742f48df048bd76042acdf0a02ab82ae9837146f613daed0026f40aa143b4c06c86b826ba3b36c7534b97b2722a806c982cdcff140c3ca2ad1e507747d39413a158be049b5f58151c58e5672747edec764785efcde75cc36547c63d14d39d92792d3bf23793645b965b7bb7710586bafd8cf9cfd20a3b48393df0295872853c4520d62624cfc9c605ecef9af13a82eee4f93a18107fd5c457b5ba1e60d7c602443a6727556863d088916ee22a96db052e47bf6b411e5aa8bdeb36e71b509c2f809f093f122162f08abc01c1bbd5f2bad3456190aedfcda926fa35b6e1551d0977e67d28b40cd32b77d0726ea0ed707132c1f3ce83d0f2dbe2a65e960ef3c3dda4d967b298c3cdabb9caef650e7054930ee9d7fa65e91ef432e24a166b59ddb9ae26a2b715d0d8bc6c73bb2cdc62ada5b59f692e4986fef3ff34edf23bbcaf5ef7fa7b800b2cecb8ce8ac8f83b7de9b81fd7cdfcd2f15e1d62e29c23205cc4c87be19314d0b1cc31337e33c23ec8a2cea2f9a475a8858aa9e6c94f6ac9f47ce45b3487ac7dda1fb7ab56eadb54839f02fa75ee2b2cbadd70e72b8ab6346b48fe6db953a178d3e15d3440d9552d9bd2b5f1dfca590a02522fc5097c856411355268f3b0fc703df5fcdac897c26bdabf7d262c693896d30253002e08282ce2d6cd9cf58faf64b5abdca4e7e4a1fed394fef08c9627cce5bce3a5e95eb92c71ad64f1389bd44fa0b657f338ff27e0db977e162e4b293ac982dc1b957fe56d0b36098c148e09c223030b633f0b3bca53bb116b520d2a61416c0c121d053a8b7b2b72c293427eb6d52b89ad6daebe1a24e8586ba477523486f81b46540244fea346e0fa1364bd44906863472fd23d4ed986ae4cec278928ab9fcd572889d506f2890f555a205eb0df4cddf47d7cc2954a60151137349cb9ba7cccd6fcce32afe997415ab87a898a85d0fac8cc92b2fd2157bf46f3a82089d59747a4fa7ded29ca2d4be32dd102ec6f5de98a40c1ed8aeacb32df62c28306ab862e39caf1ef34f017049dfc538e085f99083fefc9f962aed0bac7d70e9f2f397a02915e064479c5d5d83858b3eb8f30b5447513cc884f0776dcacb1a4ddf2a949734329201a777c0a171e1f6e5e4a9db90c991d573bbb60c6094feea43de890cd290599f5ed91e85c33f7e97ac136356ce4dd858ca627fbed5e33b562c54ea8b00e2f0b04bdb1dd028c31d3560f150131b1e536ba10b4533754cad20ec9a662849b4692463e962b9334d4efa43d5a00670b4013546637b3973faebe896ae5aed24c12e270b87f44a9580f8db83fc8a5724a579ff50ab099a1b61828b54c7be9a332dd65f0b30ec2ead3a0d90879d15606cac6d8bdbcb6cb99cf4587a27a87761844b2daaa8ae107cf2767670e405d2563328524a64573d4f3127a8b288048e5cf8133caa5fd64abad3d731a7886731197ae436bb333df4b7ac7b803b1bdede25f7a4ef199309a855adecf5dae151be8a5233bdaec8bf537f93044875804314cf0b93ba145831d912d62ffde9e09f3946c7111e93af4c025e64dbf8e1046a6f21912cd3b3eb817d460df97cf8ab16604ffa4472f33e598495c18bb7dfc91d898de4d46641b281ceb5cc46858dbd0edaa6de8da51cd1091523dfe87e119067ec60d7a29464de0e163255ad2f03c3f3f10387fb9c1a18add689d14fc86dfecc5c1c1b99f59e3f4aef6799cca7de5f9dce44deb62b0a23e8c957037c0c862302471235df24fadc3ae3fdaee2a65e65359d4540dc22f9c3fd5421ce05e9b04c8fad9f2392f5456562e0a164dcaf415b30518e0984dc57da31fbc6af4311c3b025b0b583ba8c158dcfd0c975ef489059e2c4bcbeaba10df231b65b73a4092e0b5c0a116dfee2dca217c0c3b962d98166064ca5530a9049ba831ee4bf5390d7ece436d96fecf172eb4b996fe1ea5727aa0775c378e2599c48ec08db00c913bac7d5bb07842ce6749ab61a2617a3829db472e92a4776a9d9fd689e2f4acb20d96c460bad47381d03e5ef8ed8534e701a34f3bebaaeaffb5ec74dbcec1591034b68be8f01f678bbe7e5368dff5cfe85296f4eef772a6ef5a6a9847e54b446ed8468c5c617f937da8ee396a1fca44266405bc318b7d637047b5e576467e89acb3cfcb022c2066ef32e71c847e9a2c6d17dbcc6e6d244ad8245e06efcfc12e768041909ca84bbdfd3e788c65098f0bcd39950d5861d61f14667d0fa897dcdce697048d15458f7ec4659bc02bea8c1ea14fd23ddb24d39b0395723df66f1eb62255185e46344c88fb4e02ff53df2cbf10b294f2dfda1bda69824a0dff345db62157306882d6d68680beca5e131b6c806a3f51c86501d3b41dbbf23ee25bd3a502912e0c941f4cdf19af20bd68b745f48b50178958cd2be55cbcc5ff84df3b45c2f8484a4254fd78253e6e03483bae58289be61d90e8956696bea3179cc4f8b04ce5e36f8dcd45b90b0b838783a4a9b49d4aa93436c94959e54ab97f8ba71d51253f6a83833e05a6aabd2797489ca1517ae9f30fdc3aabda2790bcc584229296b34d03a18d2f26c3a4bc180cfd696c8cac5b791e74ea93ae6da07c0521d5404fd33069b97e7bbfc86ec2292c4e83850642cdea5e62695251ae61a4700347cbebbaa518cd16ce5e02ef5aeba1480cbde9aa37081d7726cc994e78f121bcbed35ddc4bb4effd3816c49bc25f481a9693524027f55db34ec190965fe2e5c4cb55ad124af411697ce0c2e2e7dc6e4b1ef2003e18f292d7e94ff5e4b55852abb4ac7f02091e5af6efcbfafd8b707e9582fee0b83d98bfa67ae32311eacc2f91f9483f94d51842cd092a63cde06904b9fd3e31da282c12013145b057aae20c6a78505cc2330e0aee0b3cca2a24a9b26d11dc0553c88fa66f2d28055c9632036609f5b1863075db00fba23799a6e424a479f17be94942f29800d6161e0f5460f248adda65f2e8d57ff47e10575bd9e724ec1a66b4d8ed9b45fbdf301024a79f73cd0c32ba1298ec8a83d04284957e29ee9d7439029572873a3a1837274e61db700a3b3369ecc8a5c6c3e3cad8c605572a4bc9a09671580d51d3572a2a18d107e0f77379e944b50aa243cd86f531200ed051eaf6fce587d0363d18e4575425d2de69d41456567638c623714b44e6b5ac31d773bc3196fcfe3412c9347d489870b3f3381f37e8a51b967c0063e2dc49e04afd79b27ee59e7e43a1be481ec01f4b608da340c20835c0314d115e6077684ac3af6cdbacd9bc67d81af19987ef232d91a8569ffe9b13d2fb6ca54e43ca997a3f14621e4d6d4d06c3956138f53cbd80e99c2a3e60ccb8cfbfdebae121a196d7049bfc4b250e271f9fc94d635b10db658e423d3fa61f5c70da4ba189ee38bcf03c141e861bad217427365df8d2405b024b81342786063600b661febdf3405a5e45dd96e78ee20a3c905971506a55cb262c6a9b9dd1002bd788119cc6ec5445208a65fdb546d3a31774f4957be79aa123559b3ca49c15b39e9e943f073e43f56dde9b537e4c5f74ee5f93bdbfc43507716a04344f08e685fa364ad765f6dc91b306464578472c465869570d97c2c5c20daca0aa8cfd73f707fa2364a02ffb2f6a69528de158b59b0ca98143f514b8ca14fe6f2e6ee5cb33b357a315ee24f76eb9af8f890fdc965bb94cde90b7390ffa2b738853f7f465af1b0feef82f195f41777e27ce04678ddeba00058e118c04ad004f54f7be7e3419162adc93788804c349766a48910836c5cb9d0250fe20203b22fa31c6a5b791882270c96df69eb665ff7c3dfc1d71c8f8cf008d771ccc47a04da6f3b8fbda77b889300e6ac8ac443cf01246d14f76be9c71d26842adeb94f4b8ee9798b7c8dfc02d9a4436191165c48fc0cad53f3a0e9cedd9b7cb67569f1f667719cebc6a14053ab1425d9586c98c31bd34a5cbc160f3d7cd8e75027ec8e471aa7ac02ebdfc37e89c37dd03c9e2d3935f9696a77285442d441208bcf454cd0dd43d66e438cfee61301bcc87dcc964fbeb722c6004e1c968c620d89237bd6722ace8afc1f781b1f2364d42729382f04528ed3bd2dc92e4f2bdcd3617f038aba1042168910d9c4e10081264ee88f44e70b0bc2fa4983b9bf1301b761b68ab3254f2cd0a462d1c08c138435193c9ba9b7b375c4f131205974cb7d20163335c374e9ca67c5de92a97b8aebb6e99bd631fa4e8a33edd0a019658527e72c6d987a9cb325086786ed22f76bc74f230e5a78430cc0c1eb465ea54e763f83c095a6c681011f4f25b45700e534ed774bea7b0fd64430e015d9f755095942293c8eb52efb99c58d277cbec377ce86a546256c3e86fd7a82f07016013abdd31b2c59e6b06292f9b3b32bc2524e2c2841a46ffeac2aca827bcb243acbe4df5edda90bde33acf0020c134478adb00b39e86ce6fc8716e69f161f7ee3eda1b4a43e5043756909ce5d37a3846d499de16216e661220a314f39203c046a8a9f7914b0778a753084de0df2a146fcceff395460a9b12d665e2e47bdce6dc88d554a0c8fa8aa3c3e50f038b534479c120a63bb0021ac275d3b5766baae3ebc8e598be3cccfa9d6b646ff9e061bd112417c134e6f7faca9cd020367ae18fae349ecd790d72125121ca7e6193b2d545ee0cc4b0d1efdbc0c06be44d0d1164233e400fe0c6f4400647fea457fb09dbd458fe81a3ffeb400d274202006ea84835675e0ae52b1840f74a7bd6066f60f7e7c18eaeef144bc32b62fbc7f304da75415912fd998deb70e61f5139c677e427c648e76f90528361594a15f703a6ec83953b61a98e28a00497533a1be8291f1ef3252676522846aee70ae9ef337b7aecbd8a02def11edd63bae02d77525a763b90340ad9135dd2e4410b4ff4bf0d3f2ff63934b5146dd941587af911ca943dd4678e7b0ba2e23a8e0d94080dfd3e5e30d65db3de7471c7f2536d16d7d6defcb88039d9edaa222b55efecdc142b2885faf8ad1548dcaa015fa6fcf1c3ed40c00eabb6f6d610caa03bcced9c02dbb1a6c4dbdc3ac397b2352237f80f088aca6bfb8ebaf7eeca4e60b2a426ece64796d914dc6bb0510015c5c4c7b6f2745387e6171a65de1a7ed75bfde77b7a48e32523c5e23ba9f1a62c1ea52f93720cbbe55f20e64fac61d50d4c9221e4839548c7d4839c17dd7c92241b6eb34904b250d61db86fccb74a14e28bf7c77fc211c41831217f07d004a805ede41aed33188b6eae3712e26dc4620c64dd4d7c8cd69f0f0dbae84e82ffc7edee90c77bda4f15814187b9d139e8549a3c480ac9e862032b8b2b1242aac54e87e772e59d31ede07776a405703cc9ffe2d8da12f6820a6ad99f436129316a38b29ad2a8f73abcf3563df5c6e8a0ab8ee74514360bded53ec9269d97810a969f0b5444ffb1fca08e2ff52085fc83757399cdf7970aad857335ae56c47353b52b9648fd1d0896e5c7a953eb38f32ce438f710906098d728ef3516944cb9325727f1e9ad1fb2fadcdb95fb68b3ee0059c39507df659b77c01acd49825e265e8c28ca4e", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r1}, 0x15) syz_open_dev$char_usb(0xc, 0xb4, 0x400) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) socketpair(0x28, 0x1, 0x0, &(0x7f0000000000)) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x4, "e9b7ccfb"}, 0x0, 0x0, 0x0, 0x0}) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r2}, 0x38) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000500)={0x44, &(0x7f00000000c0)=ANY=[@ANYRESHEX, @ANYRESOCT=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 16:42:06 executing program 3: [ 1523.665065][T19880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00]}}]}}]}, 0x8c}}, 0x0) 16:42:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x191, 0x0) 16:42:06 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x135, 0x0) 16:42:06 executing program 3: [ 1523.856068][T19886] bridge681: port 1(syz_tun) entered blocking state [ 1523.876473][T19886] bridge681: port 1(syz_tun) entered disabled state [ 1523.910483][T19886] device syz_tun entered promiscuous mode 16:42:06 executing program 3: [ 1523.964959][T19889] device syz_tun left promiscuous mode [ 1523.989337][T19889] bridge681: port 1(syz_tun) entered disabled state 16:42:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x192, 0x0) 16:42:06 executing program 3: 16:42:06 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x136, 0x0) [ 1524.255305][T19886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1524.261521][ T9564] usb 2-1: new high-speed USB device number 83 using dummy_hcd 16:42:06 executing program 3: r0 = socket$key(0xf, 0x3, 0x2) ioctl$sock_SIOCETHTOOL(r0, 0x8940, &(0x7f0000000380)={'syz_tun\x00', 0x0}) 16:42:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x193, 0x0) [ 1524.418920][ T9564] usb 2-1: Using ep0 maxpacket: 16 [ 1524.468699][ T9564] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1524.628861][ T9564] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1524.640775][ T9564] usb 2-1: can't read configurations, error -61 [ 1524.798833][ T9564] usb 2-1: new high-speed USB device number 84 using dummy_hcd [ 1524.909981][ T9564] usb 2-1: Using ep0 maxpacket: 16 [ 1524.958596][ T9564] usb 2-1: too many configurations: 151, using maximum allowed: 8 [ 1525.078475][ T9564] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 1525.087590][ T9564] usb 2-1: can't read configurations, error -61 [ 1525.103315][ T9564] usb usb2-port1: unable to enumerate USB device 16:42:09 executing program 1: 16:42:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x2c0}}, 0x0) 16:42:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf00]}}]}}]}, 0x8c}}, 0x0) 16:42:09 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x137, 0x0) 16:42:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x194, 0x0) 16:42:09 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) socket$inet6(0xa, 0x0, 0x0) sendmsg$NBD_CMD_DISCONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r1 = socket(0x10, 0x0, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000040) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x20040006}) [ 1526.925149][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:09 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x138, 0x0) 16:42:09 executing program 1: 16:42:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x195, 0x0) 16:42:09 executing program 3: 16:42:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1100]}}]}}]}, 0x8c}}, 0x0) [ 1527.137363][T19944] bridge682: port 1(syz_tun) entered blocking state [ 1527.193136][T19944] bridge682: port 1(syz_tun) entered disabled state 16:42:09 executing program 1: 16:42:09 executing program 3: [ 1527.287833][T19944] device syz_tun entered promiscuous mode [ 1527.367513][T19945] device syz_tun left promiscuous mode [ 1527.398874][T19945] bridge682: port 1(syz_tun) entered disabled state [ 1527.605015][T19935] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:10 executing program 3: 16:42:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x196, 0x0) 16:42:10 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x139, 0x0) 16:42:10 executing program 1: 16:42:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x6c0}}, 0x0) 16:42:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1200]}}]}}]}, 0x8c}}, 0x0) 16:42:10 executing program 3: 16:42:10 executing program 1: 16:42:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x197, 0x0) [ 1527.851449][T19976] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:10 executing program 3: 16:42:10 executing program 1: [ 1527.914874][T19982] bridge683: port 1(syz_tun) entered blocking state [ 1527.927515][T19982] bridge683: port 1(syz_tun) entered disabled state 16:42:10 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13a, 0x0) [ 1528.032812][T19982] device syz_tun entered promiscuous mode [ 1528.116656][T19976] device syz_tun left promiscuous mode [ 1528.123701][T19976] bridge683: port 1(syz_tun) entered disabled state 16:42:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x198, 0x0) 16:42:10 executing program 3: 16:42:10 executing program 1: 16:42:10 executing program 3: [ 1528.333607][T19982] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0xec0}}, 0x0) 16:42:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1206]}}]}}]}, 0x8c}}, 0x0) 16:42:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13b, 0x0) 16:42:11 executing program 1: 16:42:11 executing program 3: 16:42:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 16:42:11 executing program 3: 16:42:11 executing program 1: 16:42:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0) 16:42:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13c, 0x0) 16:42:11 executing program 3: [ 1528.838910][T20019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1300]}}]}}]}, 0x8c}}, 0x0) [ 1528.977408][T20023] bridge684: port 1(syz_tun) entered blocking state [ 1529.001819][T20023] bridge684: port 1(syz_tun) entered disabled state [ 1529.063241][T20023] device syz_tun entered promiscuous mode [ 1529.128508][T20024] device syz_tun left promiscuous mode [ 1529.140932][T20024] bridge684: port 1(syz_tun) entered disabled state [ 1529.353499][T20023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x33fe0}}, 0x0) 16:42:11 executing program 1: 16:42:11 executing program 3: 16:42:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 16:42:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13d, 0x0) 16:42:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00]}}]}}]}, 0x8c}}, 0x0) 16:42:12 executing program 3: [ 1529.536968][T20045] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:12 executing program 1: 16:42:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19c, 0x0) [ 1529.647976][T20052] bridge685: port 1(syz_tun) entered blocking state [ 1529.683837][T20052] bridge685: port 1(syz_tun) entered disabled state [ 1529.714696][T20052] device syz_tun entered promiscuous mode 16:42:12 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13e, 0x0) 16:42:12 executing program 3: 16:42:12 executing program 1: [ 1529.777989][T20056] device syz_tun left promiscuous mode [ 1529.793380][T20056] bridge685: port 1(syz_tun) entered disabled state [ 1530.024977][T20052] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20000260}}, 0x0) 16:42:12 executing program 3: 16:42:12 executing program 1: 16:42:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000]}}]}}]}, 0x8c}}, 0x0) 16:42:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 16:42:12 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x13f, 0x0) 16:42:12 executing program 3: 16:42:12 executing program 1: 16:42:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 16:42:12 executing program 3: 16:42:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5800]}}]}}]}, 0x8c}}, 0x0) 16:42:12 executing program 1: [ 1530.412462][T20085] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1530.515375][T20091] bridge686: port 1(syz_tun) entered blocking state [ 1530.552721][T20091] bridge686: port 1(syz_tun) entered disabled state [ 1530.600472][T20091] device syz_tun entered promiscuous mode [ 1530.653917][T20099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1530.670120][T20085] device syz_tun left promiscuous mode [ 1530.677263][T20085] bridge686: port 1(syz_tun) entered disabled state 16:42:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x7ffff000}}, 0x0) 16:42:13 executing program 1: 16:42:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x140, 0x0) 16:42:13 executing program 3: 16:42:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0x0) 16:42:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5865]}}]}}]}, 0x8c}}, 0x0) 16:42:13 executing program 3: 16:42:13 executing program 1: 16:42:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x141, 0x0) [ 1531.067945][T20115] bridge687: port 1(syz_tun) entered blocking state [ 1531.093150][T20115] bridge687: port 1(syz_tun) entered disabled state 16:42:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0) [ 1531.124222][T20115] device syz_tun entered promiscuous mode 16:42:13 executing program 3: 16:42:13 executing program 1: 16:42:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0xfffffdef}}, 0x0) 16:42:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6000]}}]}}]}, 0x8c}}, 0x0) 16:42:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x142, 0x0) 16:42:13 executing program 3: 16:42:14 executing program 1: 16:42:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 16:42:14 executing program 1: 16:42:14 executing program 3: [ 1531.670986][T20141] device syz_tun left promiscuous mode [ 1531.694806][T20141] bridge687: port 1(syz_tun) entered disabled state 16:42:14 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x143, 0x0) 16:42:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) 16:42:14 executing program 3: [ 1531.807651][T20141] bridge688: port 1(syz_tun) entered blocking state [ 1531.835450][T20141] bridge688: port 1(syz_tun) entered disabled state 16:42:14 executing program 1: [ 1531.903252][T20141] device syz_tun entered promiscuous mode [ 1532.039402][T20147] __nla_validate_parse: 3 callbacks suppressed [ 1532.039427][T20147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1532.159620][T20133] device syz_tun left promiscuous mode [ 1532.173329][T20133] bridge688: port 1(syz_tun) entered disabled state 16:42:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x2}, 0x0) 16:42:14 executing program 1: 16:42:14 executing program 3: 16:42:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6558]}}]}}]}, 0x8c}}, 0x0) 16:42:14 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x144, 0x0) 16:42:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0) 16:42:14 executing program 3: 16:42:15 executing program 1: [ 1532.529039][T20172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8100]}}]}}]}, 0x8c}}, 0x0) 16:42:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 16:42:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x145, 0x0) 16:42:15 executing program 3: [ 1532.685910][T20177] bridge689: port 1(syz_tun) entered blocking state [ 1532.709090][T20177] bridge689: port 1(syz_tun) entered disabled state [ 1532.736782][T20177] device syz_tun entered promiscuous mode [ 1532.757596][T20178] device syz_tun left promiscuous mode [ 1532.768892][T20178] bridge689: port 1(syz_tun) entered disabled state [ 1532.956872][T20177] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:15 executing program 3: 16:42:15 executing program 1: 16:42:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0) 16:42:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x146, 0x0) 16:42:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9e00]}}]}}]}, 0x8c}}, 0x0) 16:42:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x3}, 0x0) 16:42:15 executing program 1: 16:42:15 executing program 3: [ 1533.204883][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:15 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) 16:42:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x147, 0x0) 16:42:15 executing program 3: [ 1533.389506][T20209] bridge690: port 1(syz_tun) entered blocking state [ 1533.410805][T20209] bridge690: port 1(syz_tun) entered disabled state 16:42:16 executing program 1: [ 1533.497533][T20209] device syz_tun entered promiscuous mode [ 1533.547648][T20212] device syz_tun left promiscuous mode [ 1533.559335][T20212] bridge690: port 1(syz_tun) entered disabled state [ 1533.763391][T20209] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x4}, 0x0) 16:42:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a7, 0x0) [ 1533.804072][T20206] bridge690: port 1(syz_tun) entered blocking state [ 1533.813147][T20206] bridge690: port 1(syz_tun) entered disabled state [ 1533.821841][T20206] device syz_tun entered promiscuous mode 16:42:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf000]}}]}}]}, 0x8c}}, 0x0) 16:42:16 executing program 1: 16:42:16 executing program 3: 16:42:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x148, 0x0) 16:42:16 executing program 3: 16:42:16 executing program 1: 16:42:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}}]}, 0x8c}}, 0x0) 16:42:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x149, 0x0) 16:42:16 executing program 1: 16:42:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a8, 0x0) [ 1534.170134][T20243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1534.231938][T20250] device syz_tun left promiscuous mode [ 1534.260570][T20250] bridge690: port 1(syz_tun) entered disabled state [ 1534.362815][T20250] bridge691: port 1(syz_tun) entered blocking state [ 1534.373279][T20250] bridge691: port 1(syz_tun) entered disabled state [ 1534.412089][T20250] device syz_tun entered promiscuous mode [ 1534.452660][T20243] device syz_tun left promiscuous mode [ 1534.462274][T20243] bridge691: port 1(syz_tun) entered disabled state [ 1534.695702][T20262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x5}, 0x0) 16:42:17 executing program 3: 16:42:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14a, 0x0) 16:42:17 executing program 1: 16:42:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0) 16:42:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe}}]}}]}, 0x8c}}, 0x0) 16:42:17 executing program 3: 16:42:17 executing program 1: [ 1535.019281][T20275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:17 executing program 3: 16:42:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0) 16:42:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14b, 0x0) [ 1535.168859][T20277] bridge692: port 1(syz_tun) entered blocking state [ 1535.185537][T20277] bridge692: port 1(syz_tun) entered disabled state 16:42:17 executing program 1: [ 1535.241888][T20277] device syz_tun entered promiscuous mode [ 1535.323054][T20282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x6}, 0x0) 16:42:18 executing program 3: 16:42:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x2]}}]}}]}, 0x8c}}, 0x0) 16:42:18 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14c, 0x0) 16:42:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0xe) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) dup2(r2, r0) 16:42:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ab, 0x0) 16:42:18 executing program 3: semtimedop(0x0, &(0x7f00000001c0)=[{0x0, 0xff01}, {}], 0x2, 0x0) semctl$GETZCNT(0x0, 0x0, 0xf, 0x0) [ 1535.695188][T20302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x3]}}]}}]}, 0x8c}}, 0x0) 16:42:18 executing program 1: 16:42:18 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14d, 0x0) 16:42:18 executing program 3: [ 1535.874251][T20310] device syz_tun left promiscuous mode [ 1535.889527][T20310] bridge692: port 1(syz_tun) entered disabled state 16:42:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ac, 0x0) [ 1535.996410][T20310] bridge693: port 1(syz_tun) entered blocking state [ 1536.056153][T20310] bridge693: port 1(syz_tun) entered disabled state [ 1536.135688][T20310] device syz_tun entered promiscuous mode 16:42:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x7}, 0x0) 16:42:18 executing program 1: 16:42:18 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14e, 0x0) 16:42:18 executing program 3: 16:42:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ad, 0x0) 16:42:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x4]}}]}}]}, 0x8c}}, 0x0) 16:42:18 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') preadv(r1, &(0x7f0000000780)=[{&(0x7f00000033c0)=""/102400, 0x19000}], 0x1, 0x0) perf_event_open(&(0x7f0000000240)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x80000000}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = dup(0xffffffffffffffff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0xa, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/if_inet6\x00') sendfile(0xffffffffffffffff, r4, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x8200) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, &(0x7f00000002c0)=ANY=[@ANYRES64=r3], 0x10) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffffff, 0xc0086420, &(0x7f0000000240)={0x0}) ioctl$DRM_IOCTL_UNLOCK(r4, 0x4008642b, &(0x7f0000000000)={r5, 0x3}) ioctl$DRM_IOCTL_RM_CTX(r2, 0xc0086421, &(0x7f0000000040)={r5, 0x7}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) ioctl$EVIOCGID(0xffffffffffffffff, 0x80084502, &(0x7f0000000080)=""/35) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, 0x0) writev(r0, &(0x7f00000001c0)=[{&(0x7f00000000c0)='-', 0x1}], 0x1) 16:42:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x0) 16:42:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x81000000, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "4b694be8c1b98adb8d6e88205f33cd8c58231293e0cebdea3eb92130feb761b93cba1d917f0b6bff5cda111631215c3695417f3b1fc134d2eabce5952ec16be421353fc463cf517a42ba1d1dea78912c68559bf32e5921a8d6f849e146f3d814ff8ea1488a6c5a8dca4c0bb5a5805df15e9637560ba748bca5f0a23beb426e188924f144c4124e317061e6d08d4998a61bc3270019fc6bb78aff172d1b311bddced44d1409b3c282ba59171d1fa9ae2ec63aea543f4d399b4f6c235ed315e4326a247700b29a532e83690eb3911d73f8f03f4111b83ea19d6f93a48ec0d2401fa63b9b94bac962fd8c80001e3b8b703f74fb34873d03a3860b4f2780392ebb02a3620921a973cb5ca02d3003d8fd673ca25db503a78853ea976859858a6a4a5e9e144819661db3b0551e11340dc6b755b4cdf7b4df0b948109bb9a9d7b1ff585bb43ec74077085105752776f5d7a477743bb040e320765d33449d1df17dec0407e7fbc07a035b26ccd4f2f16aaeecff53c73dd4ac49f2f061f67889e04297daed05a6a2e2d4c58a0b99d1afc5d9c7add9b117d7786c8c4fc8909c67ad3605d1a9c6c4a97bb0162048146c373060f8538ddd074212cbfde1896512d46fa2724ac76fd1f5978c32f50c3b2c567e0dd88892c84856d3d964bcd05be0bf13a6f9c49eef61c31a54ceee5e6c8e2a4cb5ac294589f1efd387567c5906236a656f1a9836ba4da332e5137dd4398652dbcbbffe2afeffa3143726a8129a8c032b85150c13ac8f99f56cc4ed41f5ec56590e9d5c84510167f28d32db2a4e7450265a868d099b37d8ad6f6c381435769d2c573422cfb2e6ced643f0f8607df01805cfc9992e18fa4c6c8bce2f341bd6a3013e56a186491129dd65d1ff125ef7f2dcd0ca70cb059045d56309e8ce0307dbac0616013ef50968aef621f425c9f3348bdc9809c13dad6e047d74207b7a627b1f2658cc66f376078f0dca939fccb280a67df2485c67e19ff8e874da964a106d3c658198342ae542b01c07fd44066edb1a94ef611ad1dc94a808cc8bc2fec8f993ad315b80d15f6362d110479e5fdf5fed5e6379169a6b327b0faf8211ea880554f051f70bd55f8198067ed874a67f73943a0ed6a0626efaccb96a0edea375c514f2b4a41007bd9b1def76abe67c4ec8538d1087c04e0a4d0498bd1ba32a406818ed5e7dcccce3aba8d7a7ccfd06ad8a2008075e68f04501561309cafb337e2d97dc4383bef96924c4e1ba67a5b9b43f49a5e43092dacaa78bb890e751037238cf385625cd9a70ee468eab2a8477bcdf9dab5e71c57dcc49efa75727694d40e91c30440c45817e908e8adab775088863f8fb2a60b452c3f00ada34877882be2d3f837d460f8a4c9de9ebe8d6c11ed3f0bfd4306eadeaddd8277596139725b624a4e242c91232b954f12448951c6f56662f998edb22557adb237901585c0a871fc0d5b1e1462ddc7e0e68f138e724cee7b7d74b1966eddaf71ddafb8b13910ced717cc2a1aee8b942d431763a5acf62896c0ec7538371cac7ffecddd50864a68b7e0fb65611b22dedc46b051611d684b5d7338595380a601680cc558c0673698955d006225d689369388cbb2c558736a9a2bce867204e936e9199defc6d82001d3de70278919442cd34be83bb25c553a88345c56fc0f5631e5db2c6cf500b04e926c1de2e24bc3c929de0afb795596546b8d5c972153fcddb1c5cba0ed34bab89924facb0a9c58c9155ecd946e660758b0dfa04384b9fd011f0e3d4a6e9c8fa7ff6c5d57f63a7437cde4979bbdd8a6a32013cfc03f6cf90bdc27554b40f8eda758c8865e5dea86d09e8fe1c91251e9b2d9dc31e0e5937bdc56673339782f7920b4d397f7f345c308b1315d84f91827c178260dddd837b8d614ba0bd492913b8f6369d6a4824e2e53da910247c34e7c483d9d178ccf07cf4a8fd73fd170099dbe9a6292a816a979c082d0fa4ca2275e6fdc364b6a684bc536022929b99cfdb4c4bac6760f86eedd9b14e0835c578ac5a639a5e7ec2b6abe15755e1da36d5763d7c85e1c3822ca4911be5f58fb3c60d8524f13e20372e79bd92b5a7ab9afb13770d230c69787b7e6492ccd6c45fb8877af53f76803f9b746d1849f6c42a4a68a944c3542fc1d2cc7e2690ac1e592ea6a8882b5537aaed2ff133143560d3091e7376625549318575501f489d2cc9cc87e2d360b6e91a48a2a867d41d859523d33bcab10b192d8895d597a14f59f4a656f841df8da81d5a02245800a9296f7547b72109c529f0103cc07e859435d9a88f89e89fb5788cadafbe18b6ba688076cbf795699bc2cefaccfaf311eeace44bdf7193c0e132917f459ea9d3289ab86b2f63686a8606559f4e0f3791a8dce6693264b85a73bae47a39b5d99e2bed4e2a2f27c86350b49084e489a5c25af7ec0d6a2c14a00b770b9c9ccb21e84b8186272f96eb04f7507d9fb1e2e61f70c4012221cd29ba0b6399b70eecf62cabd321e1c894b8dc31ef21c3ee3191d6dda1f9ffae012c9a88c3e0c745dacbd9576b7e54338fdf49f9736c5719c28f13b3ed063c6e653c5c2bd75e7153507c6bf2abf015681185130d6792efc533fe54bd647c05996e49c4b53354cd58a7c68b75e633cd90d6ef17b4fd0bc49d8ef2918a6506f9ef79b86df5d920bfa0ea92f3ea48356883050660f5ab47250aa99706d35b8daf11f98558779a1bf6a882516655862febdddacedd406076edafd0a1cfab782c3ad746f5c9486389c11caf4ad85ee2060a22389b45c4cbefd75f675ee9c2981225fea301a9ec1da50d798d8729bf71f885e943c23dda9ce1a33894f8318d05a40c1e2d5a4fbb9de539f3120588ab0a93ec6e7d69911af3c27790b03b0e62615bce3c3c3f075b04a5cda5358783a10477603d1a970e6e1af0956861c0c1591b317be968710d7a2091d604bc7826bf5ed829b36b8838c5a442dcd5e61d4320426477805d410ba33d03075cdd8de528e7aed4aeee31ade48716213b8f487299df14da6628f2444f5fda3bb5d0a327f25d6e256d65ec1da7275e960fc0233020b404cd5b5665cd5a0ff3e9dd727db48c687f60eadcaa80719522b1cc403390b05a3c86d41fba4c856dba891207e14af91afd63e1f840caf33873b6919b34df1e289a95841ac850be41698f95782e1952531ede1d940c9d6cab0861f87caf65d6a3bdd7f78d14b3706c0c2741d27810cc3560d37f8697e056112d23392ab3be659173c64116d7ed5c0f7e0c2d7a5e56fba09b7ae604af8fcbeb898a575b07e28b8d11d18c41ca927579a78d609a4a0c52ef325112d46d686de7c053c8fadbe8fac07109e6ed25939c5f6b51b9dc12b92652343d1c493972fac4f0e138fea46b9712d75ce5db78ca61d54e5bfc0758afee0833486a3562ebb7bba6f3fe44e467150899dc8aa9c207e4f5a8a1f68c2c25dc10c97cded0796324ecffb92ddbc73b19087e18df24a16fc3d6528b6992dba986f417cd5dc3276f398122581814996bbff004dcddaa66369413f824a1248f1f2743912d9a9a8bbe0c057664293c7ef174eff220c7a2fc842788a1b0f459e2f4fc068f8ba2b65a5513f759bbf7e3a22398f870482a655fd053dfd249c2740302906b9ba5feec6c9ca94be6dd738c6420ef0dc68a2df7ae8bad60e90317de84c7548402fb255e7f953f572cd02258cbc711f6eb508e7d1429064311c375de8386f38eacef77507e40876ed70c11f4ea752a721060694b5084879092a626c07245700e7304777ce9e6d5526ab6bdbcd8a1bb1f842ca0db42dd1c5991bba0666ba3b5fd224d3812d287bc27d27e9803cf5c68309859ca1fdc2c9037e44c96bbc0e012c7dd2cf700c295e6e9f79e0aa20565789bde8df6400776cf03cce828bb3c9bc92e257242b9b80d6de2ba07e4d454afd33c10ec83f057d5cdffff43d6a6e10b69e440ecfd72336e294a3a6e0127ea935f288d63ab5d02dfb2ce806bb3e93e9b3e865c62406b204318d79673d50753113b3af12fb0c74d2ade02cb7c4591a5b673fdebe41e3a850b36a5d2e17fb7445b6b125c0a784a01f0014b8e6eb2aa79980c82da5ae7166d6a3a33665aee298ce9186754fe065f3dca40056b0476604bd615b5fd066518cb1c60112af9f12eb2fdd281e00f46320f6f508cefdb40f7c92b80fd7096f10e33a0c4ecbd5aa67c4f66643707092a6da66ed717899c5aaaccf5aeac6db492f392d6e191192d3b4b2757f2ea24b3087fcb346b3545e3a55351f37dbbd438c3593bcf3275f7bb2d0d1251a452faa01c04c19d030694a08400fa30c09ca8efcd0d638cb2bdb92d1fade20a03e80d1011aed207347bd59400dcd1719776f5eb26d2cc3c60e52698705d44ee9b43633a0ca6a1c45710fc479864267a64cc589bba3c7549305476f4a8c4931a96761eb3870acebc83d866c74b52bc3051faadfec0d2af15e75af7864264ce02807ccaf4b036f6b14a0c7d38def12c1d44b40d43da62ebd70636d2de80ea813ae3dc302afe13a4688d591432c885e61771e58d155dc5c74ec67d6d02241ccedb227c5dff04052749e3e6a0232939f332e511267e69a8ae3dddbe239b81351fe767cf1cd6fff3881a6774473fedbd90976675fe9c2fe256a086d5ebf3a08e050d0301d8750406364828c421a81198b0d85ec6a032b2ee8c8dc4e5853ca4536d626168e6730fa929f3b4a70a4fd8d08df4c1e104f420d434c8e12c19d03616425a0d65f4ec3b2e499b402dcd4f43bcf90e1cb0b5a5f3b4b40fb70118d11bfd03f9b675b8ec8c121243392fa84dab99cffd0ee7531c35ba68e806be4667ff35f60b68ef5e595bc3b261e467c6bb6f80f00c98ecdf1b6fe07a1f88d08042402212575845e3ce0b179dc9e9d1a3187036910538cfb05e55831edb1e604a93fa1cd15129cde0056f5fb5d88a44dc2fac9da4cb5e0cc73505617f517d5a319e5ca6131baa3a0f2ccd9772fe3348b299fbcd0b359d54c581ffbb0ff82b827e486ea0bb6329567544ce3f51a73d66a13cfb69b9960a7398c98347b70b34d62ed81460ff251f55dfda90595d63a54e71dfd771491c0edf1d897692700b94ddc4458af03880eee6940d63fc08a00e270fcf239809b005e1aec84566ed7c0147d8fa5c661e9d610760c1bac551b7164ba1ace2162dd4966f5585e9ef9ed500e24cc7eb8d93d3d50bf764cb07b1ad63dc424744c0a79d725eda752c280013470af04718a47f8b4ffc16ebb201a4d120751828a666ac7723b0e19e0a8050ce1e50d65bdd0351378b57834769244fa2b3853785e6b65d334bd7cca0e80e759d3381db2e847a9035482901876c0c22c96dea93008f78c367dfb78dd99fb97e7925062743748d07ef01dd7fc39594239d514fc546ce44b82d48b67bc30a957e18149a78d549ca44dc025862acdeba81aae1d509480217a3d43635d439733e973b11c8d9f314f768b0db2bb61d7d0ebce78fdc0db1f32b979ef6dd82c3ffca9c9f85fa2ab04d28950cc1de66a2de7bbf064022effa830d3e6d64014a13b03743169cab7855f04f789f4d7cd2553f03e3537c0b32259879826"}}}}}, 0xfca) 16:42:19 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x14f, 0x0) 16:42:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ae, 0x0) 16:42:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x5]}}]}}]}, 0x8c}}, 0x0) [ 1536.602342][T20345] device syz_tun left promiscuous mode [ 1536.608171][T20345] bridge693: port 1(syz_tun) entered disabled state [ 1536.721205][T20345] bridge694: port 1(syz_tun) entered blocking state [ 1536.748700][T20345] bridge694: port 1(syz_tun) entered disabled state [ 1536.774389][T20345] device syz_tun entered promiscuous mode 16:42:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x8}, 0x0) 16:42:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x6]}}]}}]}, 0x8c}}, 0x0) 16:42:19 executing program 1: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, 0x0, 0x0) syz_usb_connect$printer(0x0, 0x36, 0x0, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, 0x0) 16:42:19 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x150, 0x0) 16:42:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1af, 0x0) 16:42:19 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x81000000, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) [ 1537.193890][T20376] __nla_validate_parse: 3 callbacks suppressed [ 1537.193915][T20376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:19 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x151, 0x0) [ 1537.298829][T20388] device syz_tun left promiscuous mode [ 1537.307740][T20388] bridge694: port 1(syz_tun) entered disabled state 16:42:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) 16:42:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x8]}}]}}]}, 0x8c}}, 0x0) [ 1537.417491][T20388] bridge695: port 1(syz_tun) entered blocking state [ 1537.447086][T20388] bridge695: port 1(syz_tun) entered disabled state [ 1537.488130][T20388] device syz_tun entered promiscuous mode 16:42:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x152, 0x0) 16:42:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) [ 1537.592893][T20393] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1537.637296][T20376] device syz_tun left promiscuous mode [ 1537.659557][T20376] bridge695: port 1(syz_tun) entered disabled state 16:42:20 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x81000000, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) 16:42:20 executing program 1: r0 = openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bluetooth/6lowpan_enable\x00', 0x2, 0x0) writev(r0, &(0x7f0000000140)=[{0x0, 0x2}, {&(0x7f00000001c0)='>', 0x1}], 0x2) 16:42:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x153, 0x0) 16:42:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x9}, 0x0) 16:42:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x9]}}]}}]}, 0x8c}}, 0x0) 16:42:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b2, 0x0) 16:42:20 executing program 1: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a7c3142638283ddbe252a"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') syz_open_dev$char_usb(0xc, 0xb4, 0x0) [ 1538.014910][T20421] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x154, 0x0) [ 1538.162672][T20428] bridge696: port 1(syz_tun) entered blocking state [ 1538.207995][T20428] bridge696: port 1(syz_tun) entered disabled state [ 1538.265415][T20428] device syz_tun entered promiscuous mode 16:42:20 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b3, 0x0) [ 1538.363785][T20430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1538.389269][T20421] device syz_tun left promiscuous mode [ 1538.397749][T20421] bridge696: port 1(syz_tun) entered disabled state 16:42:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xa]}}]}}]}, 0x8c}}, 0x0) 16:42:21 executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x88002, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x420000015001}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', {0x7}}) write$tun(r0, &(0x7f0000000100)={@void, @val={0x0, 0x0, 0x14}, @mpls={[], @ipv4=@gre={{0x6, 0x4, 0x0, 0x0, 0xfc0, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @local, {[@lsrr={0x83, 0x3}]}}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x6558}, {}, {}, {0x8, 0x88be, 0x81000000, {{}, 0x5700}}, {0x2c}, {0x8, 0x6558, 0x0, "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"}}}}}, 0xfca) [ 1538.548744][ T8282] usb 2-1: new high-speed USB device number 85 using dummy_hcd 16:42:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xa}, 0x0) 16:42:21 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x155, 0x0) 16:42:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) 16:42:21 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0) [ 1538.774074][T20459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:21 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x156, 0x0) 16:42:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xb]}}]}}]}, 0x8c}}, 0x0) [ 1538.848723][ T8282] usb 2-1: Using ep0 maxpacket: 8 [ 1538.891619][T20466] bridge697: port 1(syz_tun) entered blocking state [ 1538.913814][T20466] bridge697: port 1(syz_tun) entered disabled state [ 1538.958056][T20466] device syz_tun entered promiscuous mode [ 1538.970581][ T8282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1539.012194][ T8282] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1539.042541][ T8282] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024 [ 1539.125253][ T8282] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 16:42:21 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x157, 0x0) [ 1539.185922][ T8282] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1539.223609][ T8282] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1539.247199][ T8282] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1539.290223][T20438] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.311866][T20438] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.346523][T20470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1539.349877][ T8282] hub 2-1:1.0: bad descriptor, ignoring hub [ 1539.381562][ T8282] hub: probe of 2-1:1.0 failed with error -5 [ 1539.577107][T20438] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.588361][T20438] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1539.820420][ T8282] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 85 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1539.892653][ T8282] usb 2-1: USB disconnect, device number 85 [ 1539.923017][ T8282] usblp0: removed 16:42:22 executing program 1: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0x84, &(0x7f00000002c0)="f7f249b9740c9e02007f00000000000032a5b60a00008024c30e478947d190ac00000000000000000000000097ba4ecb40a2ee2e32a3b88aaf3c06f4970e85a63c9a4ba7aca50d8b9aad9c9ba4c998db2f7155d302a7be122bb1609f8b0164eb12c07af2122d0151c268d53797570572846683ae4487b1349f21133d0aecc4fdf8d4210d"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:42:22 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x80000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000100)=[{&(0x7f0000000500)="0f34", 0x2}], 0x1, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) process_vm_writev(0x0, &(0x7f0000000080)=[{0x0}, {0x0}, {&(0x7f0000000000)=""/5, 0x5}], 0x3, 0x0, 0x0, 0x0) tkill(r0, 0x40) write$sndseq(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @ext={0xf7, &(0x7f00000002c0)="f7f249b9740c9e02007f00000000000032a5b60a00008024c30e478947d190ac00000000000000000000000097ba4ecb40a2ee2e32a3b88aaf3c06f4970e85a63c9a4ba7aca50d8b9aad9c9ba4c998db2f7155d302a7be122bb1609f8b0164eb12c07af2122d0151c268d53797570572846683ae4487b1349f21133d0aecc4fdf8d4210d48d8d60a81237cde8a657f3690e390c504b09c9a931a2b3c4721af0dc3e008e6dbf88104d92c76cdfbe1677e47d9780df590aaef72d168237f84710cef82987fa6958a37c2e3d82be9ce3bd51f152841cfb3c45a6d1a2b99f7f7487beaab063d8ffc56abdd9107f3bfa8fbdbeb4fb77b3ad8a0"}}], 0x1c) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) 16:42:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b6, 0x0) 16:42:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xc]}}]}}]}, 0x8c}}, 0x0) 16:42:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x10}, 0x0) 16:42:22 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x158, 0x0) [ 1540.539240][T20516] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b7, 0x0) 16:42:23 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x159, 0x0) 16:42:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xe]}}]}}]}, 0x8c}}, 0x0) [ 1540.668777][T20531] device syz_tun left promiscuous mode [ 1540.696179][T20531] bridge697: port 1(syz_tun) entered disabled state 16:42:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b8, 0x0) [ 1540.775784][T20531] bridge698: port 1(syz_tun) entered blocking state [ 1540.793010][T20531] bridge698: port 1(syz_tun) entered disabled state [ 1540.821140][T20531] device syz_tun entered promiscuous mode [ 1540.914454][T20535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xf]}}]}}]}, 0x8c}}, 0x0) 16:42:23 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b9, 0x0) [ 1540.961185][T20516] device syz_tun left promiscuous mode [ 1540.989399][T20516] bridge698: port 1(syz_tun) entered disabled state 16:42:26 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000f40)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a"], 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io(r2, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r2) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000200)=ANY=[], 0x0) 16:42:26 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15a, 0x0) 16:42:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x25}, 0x0) 16:42:26 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ba, 0x0) 16:42:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x10]}}]}}]}, 0x8c}}, 0x0) 16:42:26 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f00000003c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000000)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r2, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0x6000000, 0x0, 0x0, @mcast2}, {0xa, 0x0, 0x0, @dev={0xfe, 0x80, [], 0x2f}}, r3}}, 0x48) [ 1543.609799][T20565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:26 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bb, 0x0) 16:42:26 executing program 3: r0 = open(&(0x7f0000000000)='./bus\x00', 0x103042, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f00000002c0)={0xfffffffffffffffa}) [ 1543.749156][T20575] bridge699: port 1(syz_tun) entered blocking state [ 1543.773949][T20575] bridge699: port 1(syz_tun) entered disabled state 16:42:26 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15b, 0x0) 16:42:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x11]}}]}}]}, 0x8c}}, 0x0) [ 1543.818583][T20575] device syz_tun entered promiscuous mode [ 1543.875080][T20575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:26 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bc, 0x0) 16:42:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x3c}, 0x0) [ 1544.078846][ T2825] usb 2-1: new high-speed USB device number 86 using dummy_hcd [ 1544.218197][T20599] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1544.262739][T20599] device syz_tun left promiscuous mode [ 1544.271096][T20599] bridge699: port 1(syz_tun) entered disabled state [ 1544.325551][T20599] bridge700: port 1(syz_tun) entered blocking state [ 1544.339841][ T2825] usb 2-1: Using ep0 maxpacket: 8 [ 1544.351997][T20599] bridge700: port 1(syz_tun) entered disabled state [ 1544.366572][T20599] device syz_tun entered promiscuous mode [ 1544.405524][T20604] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1544.479002][ T2825] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1544.491868][ T2825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1544.508633][ T2825] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 26 [ 1544.521076][ T2825] usb 2-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1544.540530][ T2825] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1544.553116][ T2825] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1544.581223][T20582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.596947][T20582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.609680][ T2825] hub 2-1:1.0: bad descriptor, ignoring hub [ 1544.636202][ T2825] hub: probe of 2-1:1.0 failed with error -5 [ 1544.819305][T20577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1544.827165][T20577] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1545.074456][ T2825] usblp 2-1:1.0: usblp0: USB Bidirectional printer dev 86 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1545.708980][T20577] usb 2-1: reset high-speed USB device number 86 using dummy_hcd [ 1545.958653][T20577] usb 2-1: Using ep0 maxpacket: 8 [ 1546.071109][T20582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1546.087117][T20582] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1546.168672][ C0] usblp0: nonzero read bulk status received: -71 [ 1546.334269][ T2825] usb 2-1: USB disconnect, device number 86 [ 1546.375727][ T2825] usblp0: removed [ 1547.328621][ T2825] usb 2-1: new high-speed USB device number 87 using dummy_hcd [ 1547.579763][ T2825] usb 2-1: Using ep0 maxpacket: 8 16:42:30 executing program 3: syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(0xffffffffffffffff, 0x10e, 0x8, &(0x7f0000000480), 0x4) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a7c"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x24008081) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(r0) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000280)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYRESOCT], 0x0) 16:42:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15c, 0x0) 16:42:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x12]}}]}}]}, 0x8c}}, 0x0) 16:42:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bd, 0x0) 16:42:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x47}, 0x0) 16:42:30 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x36) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1547.719349][ T2825] usb 2-1: unable to read config index 0 descriptor/start: -71 [ 1547.728058][ T2825] usb 2-1: can't read configurations, error -71 [ 1547.916488][T20644] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x13]}}]}}]}, 0x8c}}, 0x0) 16:42:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 16:42:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15d, 0x0) [ 1548.073390][T20651] device syz_tun left promiscuous mode [ 1548.080285][T20651] bridge700: port 1(syz_tun) entered disabled state [ 1548.088693][ T2796] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1548.149265][T20651] bridge701: port 1(syz_tun) entered blocking state [ 1548.184089][T20651] bridge701: port 1(syz_tun) entered disabled state [ 1548.226481][T20651] device syz_tun entered promiscuous mode 16:42:30 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0) [ 1548.301097][T20651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.322676][T20644] device syz_tun left promiscuous mode [ 1548.331978][T20644] bridge701: port 1(syz_tun) entered disabled state 16:42:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15e, 0x0) [ 1548.358541][ T2796] usb 4-1: Using ep0 maxpacket: 8 16:42:31 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x63}, 0x0) [ 1548.480026][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1548.534050][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1548.587143][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024 [ 1548.609758][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1548.634982][ T2796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1548.711299][T20677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.730714][ T2796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1548.797346][ T2796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1548.797483][T20678] bridge702: port 1(syz_tun) entered blocking state [ 1548.845140][T20678] bridge702: port 1(syz_tun) entered disabled state [ 1548.861183][T20643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1548.861539][T20678] device syz_tun entered promiscuous mode [ 1548.893642][T20683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1548.895861][T20643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1548.972275][ T2796] hub 4-1:1.0: bad descriptor, ignoring hub [ 1548.998808][ T2796] hub: probe of 4-1:1.0 failed with error -5 [ 1549.174977][T20643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1549.185006][T20643] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1549.425623][ T2796] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 21 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1550.059089][T20643] usb 4-1: reset high-speed USB device number 21 using dummy_hcd [ 1550.318537][T20643] usb 4-1: Using ep0 maxpacket: 8 [ 1550.421859][T20694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1550.433120][T20694] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1550.518817][ C1] usblp0: nonzero read bulk status received: -71 [ 1550.688386][ T9564] usb 4-1: USB disconnect, device number 21 [ 1550.713474][ T9564] usblp0: removed [ 1551.478476][ T2796] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1551.731247][ T2796] usb 4-1: Using ep0 maxpacket: 8 [ 1551.898778][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1551.913130][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1551.929810][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024 [ 1551.949849][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1551.962976][ T2796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1551.977885][ T2796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1551.987775][ T2796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 16:42:34 executing program 3: perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000100)={0x84, 0x0, 0x0, 0x0, &(0x7f00000004c0)={0x20, 0x0, 0x4}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a40700000000010902240001010000000904000012070103000905010200ffe00000090582021a7c3142638283ddbe252ac6"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_genetlink_get_family_id$fou(0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_disconnect(0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_STATUS64(0xffffffffffffffff, 0x80984120, &(0x7f0000000280)) syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000940)=ANY=[@ANYRESOCT, @ANYRES16], 0x0) 16:42:34 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x58]}}]}}]}, 0x8c}}, 0x0) 16:42:34 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0) 16:42:34 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x15f, 0x0) 16:42:34 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x118}, 0x0) 16:42:34 executing program 1: perf_event_open(&(0x7f0000000280)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = getpid() sched_setscheduler(r0, 0x5, &(0x7f0000000380)) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x4001ff) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) r2 = socket(0x0, 0x0, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x36) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) [ 1552.048876][ T2796] usb 4-1: can't set config #1, error -71 [ 1552.127115][ T2796] usb 4-1: USB disconnect, device number 22 [ 1552.240721][T20722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:34 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x160, 0x0) 16:42:34 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x60]}}]}}]}, 0x8c}}, 0x0) [ 1552.362137][T20733] device syz_tun left promiscuous mode [ 1552.376338][T20733] bridge702: port 1(syz_tun) entered disabled state 16:42:34 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0) [ 1552.467410][T20733] bridge703: port 1(syz_tun) entered blocking state 16:42:35 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x161, 0x0) [ 1552.520964][T20733] bridge703: port 1(syz_tun) entered disabled state [ 1552.553360][T20733] device syz_tun entered promiscuous mode [ 1552.611661][T20739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:35 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x9e]}}]}}]}, 0x8c}}, 0x0) [ 1552.669744][ T2796] usb 4-1: new high-speed USB device number 23 using dummy_hcd 16:42:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x306}, 0x0) [ 1552.880449][T20756] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1552.948498][ T2796] usb 4-1: Using ep0 maxpacket: 8 [ 1552.962883][T20759] device syz_tun left promiscuous mode [ 1552.977638][T20759] bridge703: port 1(syz_tun) entered disabled state [ 1553.024689][T20759] bridge704: port 1(syz_tun) entered blocking state [ 1553.041383][T20759] bridge704: port 1(syz_tun) entered disabled state [ 1553.056987][T20759] device syz_tun entered promiscuous mode [ 1553.098134][T20759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1553.121597][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1553.155808][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1553.170449][ T2796] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024 [ 1553.187208][ T2796] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1553.199827][ T2796] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1553.221305][ T2796] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1553.234240][ T2796] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1553.274279][T20735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1553.294517][T20735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1553.319774][ T2796] hub 4-1:1.0: bad descriptor, ignoring hub [ 1553.326220][ T2796] hub: probe of 4-1:1.0 failed with error -5 [ 1553.525400][T20735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1553.537674][T20735] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1553.782641][ T2796] usblp 4-1:1.0: usblp0: USB Bidirectional printer dev 23 if 0 alt 0 proto 3 vid 0x0525 pid 0xA4A8 [ 1554.148790][ C1] usblp0: nonzero read bulk status received: -71 [ 1554.247910][T20735] udc-core: couldn't find an available UDC or it's busy [ 1554.255397][T20735] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 1554.310930][T21754] usb 4-1: USB disconnect, device number 23 [ 1554.334655][T21754] usblp0: removed [ 1555.038500][T21754] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 1555.289933][T21754] usb 4-1: Using ep0 maxpacket: 8 [ 1555.409202][T21754] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 1792, setting to 1024 [ 1555.422572][T21754] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 1024 [ 1555.435730][T21754] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 1050, setting to 1024 [ 1555.453802][T21754] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 1555.465810][T21754] usb 4-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 1555.486781][T21754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1555.498919][T21754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1555.543877][T20774] raw-gadget gadget: fail, usb_ep_enable returned -22 [ 1555.566723][T20774] raw-gadget gadget: fail, usb_ep_enable returned -22 16:42:38 executing program 3: r0 = syz_usb_connect$printer(0x0, 0x36, &(0x7f0000000500)=ANY=[@ANYBLOB="12010000090000082505a8a407000000000109022400"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000740)={0x84, 0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) 16:42:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x30a}, 0x0) 16:42:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 16:42:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xf0]}}]}}]}, 0x8c}}, 0x0) 16:42:38 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x162, 0x0) 16:42:38 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f00000002c0)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1b\x00GZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xeak\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y\x00'/235, &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) ptrace$setopts(0x4206, r1, 0x0, 0x2) [ 1555.598750][T21754] usb 4-1: can't set config #1, error -71 [ 1555.622159][T21754] usb 4-1: USB disconnect, device number 24 [ 1555.792298][T20800] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1555.928789][T20806] device syz_tun left promiscuous mode [ 1555.935865][T20806] bridge704: port 1(syz_tun) entered disabled state 16:42:38 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x163, 0x0) 16:42:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c3, 0x0) 16:42:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x300]}}]}}]}, 0x8c}}, 0x0) [ 1556.076480][T20806] bridge705: port 1(syz_tun) entered blocking state [ 1556.114330][T20806] bridge705: port 1(syz_tun) entered disabled state [ 1556.147062][T20806] device syz_tun entered promiscuous mode [ 1556.205693][T20814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.228686][T21754] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 1556.243493][T20800] device syz_tun left promiscuous mode 16:42:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c4, 0x0) [ 1556.269593][T20800] bridge705: port 1(syz_tun) entered disabled state 16:42:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x500]}}]}}]}, 0x8c}}, 0x0) 16:42:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x324}, 0x0) [ 1556.518589][T21754] usb 4-1: Using ep0 maxpacket: 8 [ 1556.541128][T20836] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.580307][T20836] bridge706: port 1(syz_tun) entered blocking state [ 1556.590096][T20836] bridge706: port 1(syz_tun) entered disabled state [ 1556.604962][T20836] device syz_tun entered promiscuous mode [ 1556.648527][T21754] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1556.667392][T21754] usb 4-1: config 0 has no interfaces? [ 1556.667942][T20840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1556.674637][T21754] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.07 [ 1556.695963][T21754] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1556.725777][T21754] usb 4-1: config 0 descriptor?? 16:42:41 executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bbr\x00', 0x4) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) bind(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x983a}, 0x1c) socket$nl_netfilter(0x10, 0x3, 0xc) 16:42:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c5, 0x0) 16:42:41 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x164, 0x0) 16:42:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x600]}}]}}]}, 0x8c}}, 0x0) 16:42:41 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x336}, 0x0) [ 1558.745622][ T2796] usb 4-1: USB disconnect, device number 25 [ 1558.929679][T20859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1559.126105][T20866] device syz_tun left promiscuous mode [ 1559.144079][T20866] bridge706: port 1(syz_tun) entered disabled state 16:42:41 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f00000002c0)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1b\x00GZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xeak\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y\x00'/235, &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) ptrace$setopts(0x4206, r1, 0x0, 0x2) 16:42:41 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c6, 0x0) 16:42:41 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x165, 0x0) 16:42:41 executing program 3: syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x2, 0x107080) 16:42:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x612]}}]}}]}, 0x8c}}, 0x0) [ 1559.214115][T20866] bridge707: port 1(syz_tun) entered blocking state [ 1559.262313][T20866] bridge707: port 1(syz_tun) entered disabled state [ 1559.360195][T20866] device syz_tun entered promiscuous mode 16:42:42 executing program 3: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x97}], 0x1, 0x0, 0x0, 0x7301}, 0x0) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 16:42:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c7, 0x0) [ 1559.482963][T20867] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1559.518021][T20859] device syz_tun left promiscuous mode 16:42:42 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x166, 0x0) [ 1559.540898][T20859] bridge707: port 1(syz_tun) entered disabled state 16:42:42 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f00000002c0)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1b\x00GZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xeak\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y\x00'/235, &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) ptrace$setopts(0x4206, r1, 0x0, 0x2) [ 1559.589132][T20881] ptrace attach of ""[20877] was attempted by "/root/syz-executor.1"[20881] 16:42:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x339}, 0x0) 16:42:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x900]}}]}}]}, 0x8c}}, 0x0) 16:42:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c8, 0x0) 16:42:42 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x70, 0x0, &(0x7f0000000180)) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080), 0x14) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000100), 0x8) socketpair$unix(0x1, 0x1, 0x0, 0x0) dup(0xffffffffffffffff) r1 = gettid() r2 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r1) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(0xffffffffffffffff) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e24, @private=0xa010101}], 0x10) close(r2) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840)=[&(0x7f00000002c0)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\x85\xf0;\xea\x8a\xd5b\xb0\xe7=\xf41\xf5\xb4\xb9\aPk\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1b\x00GZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y', 0x0], &(0x7f0000000140)=[&(0x7f0000000480)='\xa11\xc2\x1fQ\x88\xebH\xe7\xcf/\x83\xb3+\xc5\xa0\xa6\xbf\x85\xf0;\xeak\x94csn\x8bu\bHD\x06\f\xccU\x19\xaa\xe0\xed\x85\xb1%\xd8\x82\xaeW\x8764\x93\xb6`\x90\xb1\x1d\xd6\x91\x9a\xf5I:=\xd9\x98\t\x03\x13\xa4f\x13\xeb\x11\xd5\x17J]\x8b\xc18v\xfc\xa9\xcb|\xd4\x1a\x91\x81c\xeb\r|\xdbo\xa8?\xa8\x192\t\x10\x1bhGZ\xc0\xe7\xc3{b\xc0Z\xe5&\r\n\x858\x94V\x9f\xbah\x8f\x91\xa4\x8a\x90\xa7\x10\x85kYh\xb6\x0f\t0-\x9f@\xc2\xbbR.>\xc5;\xceJ\x14QJ0CrCP\x1e\xea\x8b\xc3z\xb8\x7f+\x94LV&\x8e\xce\xecA\xd6\x12#\xdb\x90\xf9\x9d\x03T\x89[G\xa8\xa4\xa9\xa7r\xd8x(\x9dv9\x16\x1dH=\x82?>-\x84R\x11\x94\x17\x01\x03\xc4\xa3\xb3?\xecyq\x86Y\x00'/235, &(0x7f00000003c0)='[\xa3\xb60\xf8cmd5su\x00']) ptrace$setopts(0x4206, r1, 0x0, 0x2) 16:42:42 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x167, 0x0) [ 1560.002421][T20902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.062943][T20904] bridge708: port 1(syz_tun) entered blocking state [ 1560.080509][T20904] bridge708: port 1(syz_tun) entered disabled state [ 1560.116787][T20904] device syz_tun entered promiscuous mode [ 1560.203087][T20904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:42 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xa00]}}]}}]}, 0x8c}}, 0x0) 16:42:42 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c9, 0x0) 16:42:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x3bf}, 0x0) 16:42:43 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_ROUTE(r0, &(0x7f0000000000)={0x4, 0x0, 0xfa00, {r1}}, 0x10) ioctl$DRM_IOCTL_MODE_RMFB(0xffffffffffffffff, 0xc00464af, 0x0) 16:42:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x168, 0x0) 16:42:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xb00]}}]}}]}, 0x8c}}, 0x0) 16:42:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ca, 0x0) [ 1560.711219][T20928] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1560.912070][T20932] device syz_tun left promiscuous mode 16:42:43 executing program 3: prctl$PR_SET_PTRACER(0x59616d61, 0xffffffffffffffff) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000200)="6653070000053c27bc3376003639405cb4aef12f0000001500ae47a825d86800278dcff47d010000805acf4f8f36460234432479aed75d492b415bfd983f79e65199615607a4ebe404180bab762ccdfe6ad0676f8f9fc0ebf8b0b16d6f2c59957ab364884b3c5d05692e664ebf68e6faa53367f05f4ad6142134b62f11e931e7d62ead037cd2157df6b2bcb47fb534555624edfe92175aaa1c4ecc7aeeb72e0d050feace34b52d9e5f755563698c7e24ab61f0866f15da7f48373ef2655e3c477f0000be5d2dd15b6210d53eed19bca008388e736e518b98d91c22def1125d7b1e821039a95ad8b91ceaf3e0b5556a98591971e0735329ac2710f6be2d61bd32e6", 0x101}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x3d) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) [ 1560.961343][T20932] bridge708: port 1(syz_tun) entered disabled state 16:42:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x169, 0x0) [ 1561.044265][T20932] bridge709: port 1(syz_tun) entered blocking state 16:42:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) [ 1561.087299][T20932] bridge709: port 1(syz_tun) entered disabled state 16:42:43 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000001c0)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r1 = accept$alg(r0, 0x0, 0x0) recvmsg(r1, &(0x7f0000000000)={0x0, 0xb, &(0x7f0000000080)=[{&(0x7f00000002c0)=""/4089, 0x34000}], 0x1, 0x0, 0x2c}, 0x0) [ 1561.147272][T20932] device syz_tun entered promiscuous mode [ 1561.219250][T20932] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:43 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16a, 0x0) 16:42:43 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x3c0}, 0x0) 16:42:43 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0) 16:42:43 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xc00]}}]}}]}, 0x8c}}, 0x0) 16:42:44 executing program 1: r0 = openat2(0xffffffffffffff9c, &(0x7f0000001440)='./file0\x00', &(0x7f0000001480)={0x1017c1}, 0x18) write$nbd(r0, &(0x7f00000001c0)=ANY=[], 0xfffffdef) unlink(&(0x7f0000000000)='./file0\x00') openat2(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', &(0x7f0000000100)={0x806c1}, 0x18) truncate(&(0x7f0000000200)='./file1\x00', 0x0) rmdir(&(0x7f00000000c0)='./file0\x00') 16:42:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cd, 0x0) [ 1561.562139][T20968] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:44 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16b, 0x0) 16:42:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xe00]}}]}}]}, 0x8c}}, 0x0) [ 1561.698582][T20977] device syz_tun left promiscuous mode [ 1561.743038][T20977] bridge709: port 1(syz_tun) entered disabled state [ 1561.815154][T20977] bridge710: port 1(syz_tun) entered blocking state [ 1561.824903][T20977] bridge710: port 1(syz_tun) entered disabled state [ 1561.842735][T20977] device syz_tun entered promiscuous mode [ 1561.881329][T20981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:46 executing program 3: clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socket$inet6_sctp(0xa, 0x0, 0x84) 16:42:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ce, 0x0) 16:42:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xa00}, 0x0) 16:42:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xf00]}}]}}]}, 0x8c}}, 0x0) 16:42:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16c, 0x0) 16:42:46 executing program 1: r0 = io_uring_setup(0xa4, &(0x7f0000000080)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff], 0x4152) mmap$IORING_OFF_SQ_RING(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) io_uring_setup(0x4000, 0x0) io_uring_register$IORING_REGISTER_FILES(0xffffffffffffffff, 0x2, 0x0, 0x0) epoll_create1(0x0) io_uring_register$IORING_UNREGISTER_FILES(r0, 0x3, 0x0, 0x0) [ 1564.191597][T21000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1564.285196][T21014] device syz_tun left promiscuous mode [ 1564.311297][T21014] bridge710: port 1(syz_tun) entered disabled state 16:42:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x1100]}}]}}]}, 0x8c}}, 0x0) 16:42:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cf, 0x0) [ 1564.405199][T21014] bridge711: port 1(syz_tun) entered blocking state [ 1564.433002][T21014] bridge711: port 1(syz_tun) entered disabled state [ 1564.445296][T21014] device syz_tun entered promiscuous mode 16:42:47 executing program 3: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_MAGIC(r0, 0x80046402, &(0x7f0000000040)) 16:42:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16d, 0x0) [ 1564.509205][T21019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xc00e}, 0x0) 16:42:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x1200]}}]}}]}, 0x8c}}, 0x0) 16:42:47 executing program 3: prlimit64(0x0, 0xe, &(0x7f0000000280)={0x9, 0x8d}, 0x0) r0 = getpid() sched_setattr(r0, &(0x7f0000000040)={0x38, 0x1, 0x0, 0x0, 0x5}, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) r2 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) write$P9_RREADLINK(r2, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r2, r2, &(0x7f0000000240), 0x7fff) write$P9_RREADLINK(r1, &(0x7f0000000300)=ANY=[], 0x65) sendfile(r1, r1, &(0x7f0000000240), 0x7fff) 16:42:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) 16:42:47 executing program 1: r0 = syz_open_dev$dri(&(0x7f0000000000)='/dev/dri/card#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_MODE_LIST_LESSEES(r0, 0xc01064c7, &(0x7f0000000080)={0x0, 0x0, 0x0}) 16:42:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16e, 0x0) [ 1564.926003][T21043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1565.039503][T21051] device syz_tun left promiscuous mode [ 1565.047102][T21051] bridge711: port 1(syz_tun) entered disabled state 16:42:47 executing program 1: dup2(0xffffffffffffffff, 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x0, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = gettid() r3 = creat(&(0x7f0000000280)='./file0\x00', 0xf1) prctl$PR_SET_PTRACER(0x59616d61, r2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r3) clone(0x2000100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000840), 0x0) ptrace$setopts(0x4206, r2, 0x0, 0x0) 16:42:47 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d1, 0x0) 16:42:47 executing program 3: r0 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x30, r0, 0x119, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0xffffffff, 0x0, 0x0, 0xfffffffd}}}}, 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = dup(r2) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r4, 0x0, 0x100000001) [ 1565.122185][T21051] bridge712: port 1(syz_tun) entered blocking state [ 1565.150164][T21051] bridge712: port 1(syz_tun) entered disabled state [ 1565.204934][T21051] device syz_tun entered promiscuous mode 16:42:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x16f, 0x0) [ 1565.297566][T21056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x1206]}}]}}]}, 0x8c}}, 0x0) 16:42:48 executing program 1: 16:42:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x7ffffff2}, 0x0) 16:42:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x2) 16:42:48 executing program 3: 16:42:48 executing program 1: [ 1565.732688][T21088] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:48 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x170, 0x0) 16:42:48 executing program 3: [ 1565.865045][T21095] device syz_tun left promiscuous mode [ 1565.883112][T21095] bridge712: port 1(syz_tun) entered disabled state 16:42:48 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x1300]}}]}}]}, 0x8c}}, 0x0) 16:42:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3) [ 1566.000951][T21095] bridge713: port 1(syz_tun) entered blocking state 16:42:48 executing program 1: io_uring_setup(0x0, 0x0) r0 = io_uring_setup(0xd59, &(0x7f0000000040)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) io_uring_enter(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) [ 1566.049256][T21095] bridge713: port 1(syz_tun) entered disabled state 16:42:48 executing program 3: r0 = eventfd2(0x0, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x7, 0x0) [ 1566.094502][T21095] device syz_tun entered promiscuous mode [ 1566.190412][T21099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:48 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x171, 0x0) 16:42:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x7ffffff8}, 0x0) 16:42:49 executing program 1: 16:42:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x3f00]}}]}}]}, 0x8c}}, 0x0) 16:42:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4) 16:42:49 executing program 3: [ 1566.540408][T21120] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1566.722472][T21127] device syz_tun left promiscuous mode [ 1566.734534][T21127] bridge713: port 1(syz_tun) entered disabled state 16:42:49 executing program 3: 16:42:49 executing program 1: 16:42:49 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x172, 0x0) 16:42:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x5) [ 1566.864909][T21127] bridge714: port 1(syz_tun) entered blocking state [ 1566.888470][T21127] bridge714: port 1(syz_tun) entered disabled state 16:42:49 executing program 3: [ 1566.936132][T21127] device syz_tun entered promiscuous mode 16:42:49 executing program 1: [ 1567.082331][T21127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6) 16:42:49 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x173, 0x0) 16:42:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x4000]}}]}}]}, 0x8c}}, 0x0) 16:42:49 executing program 3: 16:42:49 executing program 1: 16:42:49 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x7ffffff9}, 0x0) 16:42:49 executing program 3: 16:42:49 executing program 1: [ 1567.477752][T21158] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x5800]}}]}}]}, 0x8c}}, 0x0) 16:42:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x174, 0x0) 16:42:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7) 16:42:50 executing program 1: 16:42:50 executing program 3: [ 1567.604087][T21161] device syz_tun left promiscuous mode [ 1567.632128][T21161] bridge714: port 1(syz_tun) entered disabled state [ 1567.750835][T21161] bridge715: port 1(syz_tun) entered blocking state 16:42:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x10) [ 1567.818190][T21161] bridge715: port 1(syz_tun) entered disabled state 16:42:50 executing program 3: 16:42:50 executing program 1: [ 1567.896639][T21161] device syz_tun entered promiscuous mode 16:42:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x175, 0x0) [ 1567.996471][T21164] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x5865]}}]}}]}, 0x8c}}, 0x0) 16:42:50 executing program 3: 16:42:50 executing program 1: 16:42:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffffff1f}, 0x0) 16:42:50 executing program 3: 16:42:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x48) 16:42:50 executing program 1: [ 1568.407601][T21193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x176, 0x0) 16:42:51 executing program 3: [ 1568.548839][T21197] device syz_tun left promiscuous mode [ 1568.555331][T21197] bridge715: port 1(syz_tun) entered disabled state 16:42:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c) 16:42:51 executing program 1: 16:42:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x6000]}}]}}]}, 0x8c}}, 0x0) [ 1568.653896][T21197] bridge716: port 1(syz_tun) entered blocking state [ 1568.714890][T21197] bridge716: port 1(syz_tun) entered disabled state 16:42:51 executing program 3: [ 1568.796587][T21197] device syz_tun entered promiscuous mode 16:42:51 executing program 1: 16:42:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x177, 0x0) [ 1568.927146][T21197] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809578f080}, 0x0) 16:42:51 executing program 3: 16:42:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x6558]}}]}}]}, 0x8c}}, 0x0) 16:42:51 executing program 1: 16:42:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x68) 16:42:51 executing program 1: 16:42:51 executing program 3: 16:42:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x178, 0x0) [ 1569.423990][T21229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c) 16:42:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x8100]}}]}}]}, 0x8c}}, 0x0) 16:42:52 executing program 3: 16:42:52 executing program 1: [ 1569.593937][T21234] device syz_tun left promiscuous mode [ 1569.605157][T21234] bridge716: port 1(syz_tun) entered disabled state [ 1569.664360][T21234] bridge717: port 1(syz_tun) entered blocking state [ 1569.714464][T21234] bridge717: port 1(syz_tun) entered disabled state [ 1569.747470][T21234] device syz_tun entered promiscuous mode [ 1569.784502][T21234] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809578f168}, 0x0) 16:42:52 executing program 3: 16:42:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x74) 16:42:52 executing program 1: 16:42:52 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x179, 0x0) 16:42:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x9e00]}}]}}]}, 0x8c}}, 0x0) 16:42:52 executing program 3: 16:42:52 executing program 1: 16:42:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a) 16:42:52 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17a, 0x0) 16:42:52 executing program 1: [ 1570.145784][T21261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:52 executing program 3: [ 1570.268735][T21267] device syz_tun left promiscuous mode [ 1570.275176][T21267] bridge717: port 1(syz_tun) entered disabled state [ 1570.392281][T21267] bridge718: port 1(syz_tun) entered blocking state [ 1570.431176][T21267] bridge718: port 1(syz_tun) entered disabled state [ 1570.474080][T21267] device syz_tun entered promiscuous mode [ 1570.507476][T21267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1570.519187][T21261] device syz_tun left promiscuous mode [ 1570.530237][T21261] bridge718: port 1(syz_tun) entered disabled state 16:42:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809578f420}, 0x0) 16:42:53 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xf000]}}]}}]}, 0x8c}}, 0x0) 16:42:53 executing program 3: 16:42:53 executing program 1: 16:42:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x300) 16:42:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17b, 0x0) 16:42:53 executing program 3: 16:42:53 executing program 1: 16:42:53 executing program 3: 16:42:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x500) [ 1570.869489][T21294] bridge719: port 1(syz_tun) entered blocking state [ 1570.893982][T21294] bridge719: port 1(syz_tun) entered disabled state 16:42:53 executing program 1: 16:42:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17c, 0x0) [ 1570.920763][T21294] device syz_tun entered promiscuous mode 16:42:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809a601508}, 0x0) 16:42:53 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0xffff]}}]}}]}, 0x8c}}, 0x0) 16:42:53 executing program 3: 16:42:53 executing program 1: 16:42:53 executing program 3: 16:42:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x600) 16:42:53 executing program 1: 16:42:53 executing program 3: [ 1571.384937][T21317] device syz_tun left promiscuous mode [ 1571.391371][T21317] bridge719: port 1(syz_tun) entered disabled state 16:42:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17d, 0x0) 16:42:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe}}]}}]}, 0x8c}}, 0x0) [ 1571.480868][T21317] bridge720: port 1(syz_tun) entered blocking state 16:42:54 executing program 1: 16:42:54 executing program 3: [ 1571.526441][T21317] bridge720: port 1(syz_tun) entered disabled state [ 1571.582565][T21317] device syz_tun entered promiscuous mode [ 1571.642207][T21322] __nla_validate_parse: 3 callbacks suppressed [ 1571.642237][T21322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1571.689969][T21311] device syz_tun left promiscuous mode [ 1571.697507][T21311] bridge720: port 1(syz_tun) entered disabled state 16:42:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x700) 16:42:54 executing program 3: 16:42:54 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809a601a78}, 0x0) 16:42:54 executing program 1: 16:42:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17e, 0x0) 16:42:54 executing program 3: 16:42:54 executing program 1: 16:42:54 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 16:42:54 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3f00) [ 1572.066660][T21346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:54 executing program 3: [ 1572.191820][T21349] bridge721: port 1(syz_tun) entered blocking state [ 1572.204103][T21349] bridge721: port 1(syz_tun) entered disabled state 16:42:54 executing program 1: 16:42:54 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x17f, 0x0) [ 1572.242441][T21349] device syz_tun entered promiscuous mode 16:42:54 executing program 3: [ 1572.320037][T21349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:54 executing program 1: 16:42:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809a601b60}, 0x0) 16:42:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4800) 16:42:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 16:42:55 executing program 3: 16:42:55 executing program 1: 16:42:55 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x180, 0x0) 16:42:55 executing program 3: 16:42:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c00) [ 1572.722912][T21376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 16:42:55 executing program 1: [ 1572.902288][T21381] device syz_tun left promiscuous mode [ 1572.912951][T21381] bridge721: port 1(syz_tun) entered disabled state 16:42:55 executing program 3: 16:42:55 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x181, 0x0) [ 1572.987094][T21381] bridge722: port 1(syz_tun) entered blocking state [ 1573.022148][T21381] bridge722: port 1(syz_tun) entered disabled state [ 1573.074462][T21381] device syz_tun entered promiscuous mode [ 1573.136136][T21381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1573.175859][T21376] device syz_tun left promiscuous mode [ 1573.202321][T21376] bridge722: port 1(syz_tun) entered disabled state 16:42:55 executing program 1: 16:42:55 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6800) 16:42:55 executing program 3: 16:42:55 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) 16:42:55 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809a601d30}, 0x0) 16:42:55 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x182, 0x0) 16:42:55 executing program 3: 16:42:55 executing program 1: 16:42:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c00) 16:42:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x6]}}]}}]}, 0x8c}}, 0x0) [ 1573.619980][T21412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:56 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x183, 0x0) [ 1573.682501][T21413] bridge723: port 1(syz_tun) entered blocking state [ 1573.696497][T21413] bridge723: port 1(syz_tun) entered disabled state 16:42:56 executing program 3: 16:42:56 executing program 1: [ 1573.761327][T21413] device syz_tun entered promiscuous mode 16:42:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7400) [ 1573.871766][T21426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:56 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809a601e18}, 0x0) 16:42:56 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 16:42:56 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r0, 0x0, 0x12, 0x0, &(0x7f0000000380)="263abd030e98ff4dc870bd6688a8640888a8", 0x0, 0x10002, 0x0, 0x0, 0x61}, 0x28) 16:42:56 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x184, 0x0) 16:42:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:56 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a00) 16:42:56 executing program 1: syz_emit_ethernet(0x1d9, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6d0afee001a311ff00000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) [ 1574.161209][T21441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1574.270929][T21446] device syz_tun left promiscuous mode [ 1574.279609][T21446] bridge723: port 1(syz_tun) entered disabled state 16:42:56 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x185, 0x0) 16:42:56 executing program 1: syz_emit_ethernet(0x1d9, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6d0afee001a311ff00000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 16:42:56 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1574.355660][T21446] bridge724: port 1(syz_tun) entered blocking state [ 1574.390970][T21446] bridge724: port 1(syz_tun) entered disabled state [ 1574.430693][T21446] device syz_tun entered promiscuous mode 16:42:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x100000) 16:42:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x9]}}]}}]}, 0x8c}}, 0x0) [ 1574.473716][T21446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff88809ea2a868}, 0x0) 16:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:57 executing program 1: syz_emit_ethernet(0x1d9, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6d0afee001a311ff00000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 16:42:57 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x186, 0x0) 16:42:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ff7f) 16:42:57 executing program 1: syz_emit_ethernet(0x1d9, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6d0afee001a311ff00000000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 16:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1574.820696][T21480] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:57 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xa]}}]}}]}, 0x8c}}, 0x0) 16:42:57 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x187, 0x0) [ 1574.966303][T21484] device syz_tun left promiscuous mode [ 1575.000187][T21484] bridge724: port 1(syz_tun) entered disabled state 16:42:57 executing program 1: syz_emit_ethernet(0x1d9, 0x0, 0x0) 16:42:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ffff) [ 1575.107998][T21484] bridge725: port 1(syz_tun) entered blocking state 16:42:57 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1575.158694][T21484] bridge725: port 1(syz_tun) entered disabled state [ 1575.222616][T21484] device syz_tun entered promiscuous mode 16:42:57 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x1000000) 16:42:57 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x188, 0x0) 16:42:57 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a24ab2f8}, 0x0) 16:42:57 executing program 1: syz_emit_ethernet(0x1d9, 0x0, 0x0) 16:42:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xb]}}]}}]}, 0x8c}}, 0x0) 16:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:58 executing program 1: syz_emit_ethernet(0x1d9, 0x0, 0x0) 16:42:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x2000000) 16:42:58 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:58 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x189, 0x0) [ 1575.706925][T21524] device syz_tun left promiscuous mode [ 1575.730929][T21524] bridge725: port 1(syz_tun) entered disabled state 16:42:58 executing program 1: syz_emit_ethernet(0x1d9, &(0x7f0000000300)=ANY=[], 0x0) [ 1575.853605][T21524] bridge726: port 1(syz_tun) entered blocking state [ 1575.892999][T21524] bridge726: port 1(syz_tun) entered disabled state 16:42:58 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3000000) [ 1575.968158][T21524] device syz_tun entered promiscuous mode 16:42:58 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18a, 0x0) [ 1576.067209][T21524] device syz_tun left promiscuous mode [ 1576.083558][T21524] bridge726: port 1(syz_tun) entered disabled state 16:42:58 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a24ab868}, 0x0) 16:42:58 executing program 3: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:58 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xc]}}]}}]}, 0x8c}}, 0x0) 16:42:58 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x5) setsockopt$inet_msfilter(r1, 0x0, 0x8, &(0x7f0000000140)=ANY=[@ANYBLOB='{'], 0x1) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000040)={0x0, @local, @local}, &(0x7f0000000080)=0xc) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newtfilter={0x4c, 0x2c, 0xe27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8, 0x1, 'bpf\x00'}, {0x20, 0x2, [@TCA_BPF_FLAGS={0x8, 0x8, 0x1}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6}]}}]}}]}, 0x4c}}, 0x0) 16:42:58 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:42:58 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4000000) 16:42:58 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:58 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18b, 0x0) [ 1576.419772][T21563] bridge727: port 1(syz_tun) entered blocking state [ 1576.442095][T21567] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1576.446269][T21563] bridge727: port 1(syz_tun) entered disabled state [ 1576.538153][T21563] device syz_tun entered promiscuous mode 16:42:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xe]}}]}}]}, 0x8c}}, 0x0) 16:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:42:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:42:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x5000000) [ 1576.672582][T21563] __nla_validate_parse: 4 callbacks suppressed [ 1576.672595][T21563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18c, 0x0) 16:42:59 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a24abb20}, 0x0) 16:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1576.873303][T21583] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. [ 1576.976727][T21589] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:42:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6000000) 16:42:59 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xf]}}]}}]}, 0x8c}}, 0x0) 16:42:59 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) [ 1577.063469][T21591] device syz_tun left promiscuous mode [ 1577.114174][T21591] bridge727: port 1(syz_tun) entered disabled state [ 1577.215629][T21591] bridge728: port 1(syz_tun) entered blocking state 16:42:59 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1577.256188][T21591] bridge728: port 1(syz_tun) entered disabled state 16:42:59 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18d, 0x0) [ 1577.310069][T21603] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:42:59 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7000000) [ 1577.367419][T21591] device syz_tun entered promiscuous mode 16:43:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:43:00 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18e, 0x0) [ 1577.547028][T21612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1577.687236][T21617] TCP: request_sock_TCPv6: Possible SYN flooding on port 20002. Sending cookies. Check SNMP counters. 16:43:00 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x10]}}]}}]}, 0x8c}}, 0x0) 16:43:00 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a24abec0}, 0x0) 16:43:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3f000000) 16:43:00 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1577.969503][T21627] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:00 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x18f, 0x0) 16:43:00 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:43:00 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x11]}}]}}]}, 0x8c}}, 0x0) [ 1578.163220][T21633] device syz_tun left promiscuous mode [ 1578.189042][T21633] bridge728: port 1(syz_tun) entered disabled state 16:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:00 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x48000000) [ 1578.292869][T21633] bridge729: port 1(syz_tun) entered blocking state [ 1578.375651][T21633] bridge729: port 1(syz_tun) entered disabled state 16:43:00 executing program 1: syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:43:00 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1578.416911][T21633] device syz_tun entered promiscuous mode [ 1578.463605][T21637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x190, 0x0) 16:43:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a27e76d8}, 0x0) 16:43:01 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x12]}}]}}]}, 0x8c}}, 0x0) 16:43:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c000000) 16:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:01 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) [ 1578.765625][T21662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x191, 0x0) 16:43:01 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) [ 1578.823918][T21673] device syz_tun left promiscuous mode [ 1578.832359][T21673] bridge729: port 1(syz_tun) entered disabled state 16:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x68000000) [ 1578.948550][T21673] bridge730: port 1(syz_tun) entered blocking state [ 1579.006323][T21673] bridge730: port 1(syz_tun) entered disabled state 16:43:01 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x192, 0x0) [ 1579.130780][T21673] device syz_tun entered promiscuous mode 16:43:01 executing program 1: syz_emit_ethernet(0x0, 0x0, 0x0) 16:43:01 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x13]}}]}}]}, 0x8c}}, 0x0) [ 1579.204447][T21673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:01 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2cbc3e0}, 0x0) 16:43:01 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:01 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c000000) 16:43:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x193, 0x0) 16:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:02 executing program 1: syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) 16:43:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x58]}}]}}]}, 0x8c}}, 0x0) 16:43:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x74000000) [ 1579.512969][T21703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1579.622734][T21708] device syz_tun left promiscuous mode [ 1579.648961][T21708] bridge730: port 1(syz_tun) entered disabled state 16:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x194, 0x0) 16:43:02 executing program 1: syz_emit_ethernet(0x56, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x20, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x0, 0x0]}]}}}}}}}}, 0x0) [ 1579.787083][T21708] bridge731: port 1(syz_tun) entered blocking state [ 1579.845967][T21708] bridge731: port 1(syz_tun) entered disabled state 16:43:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a000000) [ 1579.916017][T21708] device syz_tun entered promiscuous mode [ 1580.038053][T21708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:02 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2cbc698}, 0x0) 16:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x60]}}]}}]}, 0x8c}}, 0x0) 16:43:02 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x195, 0x0) 16:43:02 executing program 1: syz_emit_ethernet(0x4a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 16:43:02 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7fffef80) 16:43:02 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1580.324383][T21744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:02 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x9e]}}]}}]}, 0x8c}}, 0x0) 16:43:03 executing program 1: recvfrom$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000440)={0x2, 0x4e23, @broadcast}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860685cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b0a7511bf746bec66ba", 0xfe6a, 0x10, 0x0, 0x27) [ 1580.455871][T21748] device syz_tun left promiscuous mode [ 1580.482757][T21748] bridge731: port 1(syz_tun) entered disabled state 16:43:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x196, 0x0) [ 1580.581592][T21748] bridge732: port 1(syz_tun) entered blocking state 16:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1580.630154][T21748] bridge732: port 1(syz_tun) entered disabled state 16:43:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7ffff000) [ 1580.712328][T21748] device syz_tun entered promiscuous mode 16:43:03 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2cbc780}, 0x0) 16:43:03 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) listen(r0, 0x7fff) syz_emit_ethernet(0x4e, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x18, 0x6, 0x0, @remote={0xfe, 0x80, [0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@sack={0x3, 0x2}]}}}}}}}}, 0x0) 16:43:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x197, 0x0) 16:43:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xf0]}}]}}]}, 0x8c}}, 0x0) 16:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x80efff7f) 16:43:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r0) close(r1) 16:43:03 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1581.158695][T21787] device syz_tun left promiscuous mode [ 1581.196143][T21787] bridge732: port 1(syz_tun) entered disabled state 16:43:03 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x198, 0x0) 16:43:03 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x300]}}]}}]}, 0x8c}}, 0x0) 16:43:03 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xfffff000) [ 1581.286808][T21787] bridge733: port 1(syz_tun) entered blocking state [ 1581.309064][T21787] bridge733: port 1(syz_tun) entered disabled state 16:43:03 executing program 1: syz_emit_ethernet(0x4a, &(0x7f0000000280)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00\b\x00', 0x14, 0x6, 0x0, @remote={0xfe, 0x80, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10}}}}}}}, 0x0) [ 1581.338196][T21787] device syz_tun entered promiscuous mode 16:43:04 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2cbc868}, 0x0) 16:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a3000000000"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:04 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x199, 0x0) 16:43:04 executing program 1: unshare(0x4c060400) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}, 0x0, r2}) socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, 0x0, 0x0) 16:43:04 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x500]}}]}}]}, 0x8c}}, 0x0) [ 1581.729855][T21813] __nla_validate_parse: 3 callbacks suppressed [ 1581.729882][T21813] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 16:43:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xffffff7f) [ 1581.884275][T21819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a3000000000"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1581.924923][T21822] IPVS: ftp: loaded support on port[0] = 21 16:43:04 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x600]}}]}}]}, 0x8c}}, 0x0) [ 1582.017056][T21826] device syz_tun left promiscuous mode [ 1582.035007][T21826] bridge733: port 1(syz_tun) entered disabled state 16:43:04 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19a, 0x0) [ 1582.095714][T21832] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 16:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a3000000000"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1582.146369][T21826] bridge734: port 1(syz_tun) entered blocking state [ 1582.200116][T21826] bridge734: port 1(syz_tun) entered disabled state 16:43:04 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7ffffffff000) [ 1582.240925][T21826] device syz_tun entered promiscuous mode [ 1582.321854][T21843] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1582.346565][T21826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:04 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c000780"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1582.436746][T21819] device syz_tun left promiscuous mode [ 1582.454952][T21819] bridge734: port 1(syz_tun) entered disabled state [ 1582.572318][T21855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. 16:43:05 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2cbccf0}, 0x0) 16:43:05 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x612]}}]}}]}, 0x8c}}, 0x0) 16:43:05 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x10000000000000) [ 1582.657980][T21824] IPVS: ftp: loaded support on port[0] = 21 [ 1582.881735][T21882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1582.954328][ T9076] tipc: TX() has been purged, node left! [ 1582.955112][T21879] bridge735: port 1(syz_tun) entered blocking state [ 1583.008622][T21879] bridge735: port 1(syz_tun) entered disabled state [ 1583.030286][T21879] device syz_tun entered promiscuous mode [ 1583.064034][T21886] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:06 executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x6}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @ipv4={[], [], @multicast2}}, 0x1c) write$binfmt_misc(r0, 0x0, 0xeffd) 16:43:06 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c000780"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:06 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19b, 0x0) 16:43:06 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ff7f00000000) 16:43:06 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x900]}}]}}]}, 0x8c}}, 0x0) 16:43:06 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1040}, 0x0) [ 1584.543040][T21895] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1584.573911][T21892] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c000780"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:07 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ffff00000000) 16:43:07 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19c, 0x0) [ 1584.761237][T21902] device syz_tun left promiscuous mode [ 1584.781794][T21902] bridge735: port 1(syz_tun) entered disabled state 16:43:07 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x3d, 0x20000001, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) 16:43:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xa00]}}]}}]}, 0x8c}}, 0x0) 16:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c00"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1584.905790][T21902] bridge736: port 1(syz_tun) entered blocking state [ 1584.940805][T21902] bridge736: port 1(syz_tun) entered disabled state [ 1585.026416][T21902] device syz_tun entered promiscuous mode 16:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c00"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:07 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ffffff7f0000) 16:43:07 executing program 1: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0) close(r0) socket$kcm(0x2, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x8955, &(0x7f0000000040)=0x2000000000002) [ 1585.158105][T21892] device syz_tun left promiscuous mode [ 1585.180878][T21892] bridge736: port 1(syz_tun) entered disabled state 16:43:07 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19d, 0x0) 16:43:07 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xb00]}}]}}]}, 0x8c}}, 0x0) 16:43:07 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1128}, 0x0) 16:43:07 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c00"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:07 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_user\x00', 0x26e1, 0x0) openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000000)='cpuset.cpus\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x20) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0xc0c0583b, &(0x7f0000000000)) socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) recvmsg$kcm(0xffffffffffffffff, &(0x7f000001f840)={&(0x7f000001f080)=@xdp, 0x80, &(0x7f000001f6c0)=[{&(0x7f0000000400)=""/211, 0xd3}, {&(0x7f000001f280)=""/133, 0x85}, {0x0}, {&(0x7f000001f4c0)=""/89, 0x59}, {&(0x7f000001f540)=""/194, 0xc2}, {&(0x7f000001f640)=""/112, 0x70}], 0x6}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_devices(r0, &(0x7f0000000040)='devices.allow\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000001f900)={0x13, 0x0, 0x0, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, [], 0x0, 0xa, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f000001f8c0), 0x10}, 0x78) 16:43:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x100000000000000) 16:43:08 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19e, 0x0) 16:43:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xc00]}}]}}]}, 0x8c}}, 0x0) 16:43:08 executing program 1: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000580)="496c02b79fa08f193c72bd3221dffe72e5532510aeac08d579", 0x19}, {0x0}], 0x2}, 0x3be55eb6f651f2df) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x1, 0xc, 0x400, 0xc}, 0x40) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000001c0), &(0x7f00000000c0), 0x1081, r0}, 0x38) [ 1585.795514][T21954] bridge737: port 1(syz_tun) entered blocking state [ 1585.821633][T21954] bridge737: port 1(syz_tun) entered disabled state 16:43:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x200000000000000) [ 1585.887492][T21954] device syz_tun entered promiscuous mode 16:43:08 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x19f, 0x0) 16:43:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:08 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1210}, 0x0) 16:43:08 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xe00]}}]}}]}, 0x8c}}, 0x0) 16:43:08 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0xea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000380), 0x0, 0x0, 0x18}, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2e02020031000505d25a80648c63940d0224fc601000304002006000051a82c137153e670874038014000000d1bd", 0x33fe0}], 0x1}, 0x0) sendmsg$sock(r1, &(0x7f0000000240)={&(0x7f0000000180)=@rxrpc=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e21, @local}}, 0x80, &(0x7f0000000900)=[{0x0}, {&(0x7f0000000500)="5da97982af25421e05a39f2924fc61ff177368ee4f4e3541431d0c93cace7dd76407330513497b7ddd930c8d4f7998b50d3054c32de1ef85dc4afa2f488e96eb00f10ac022d5ac707f35c68eaa0e2307a378f5", 0x53}, {&(0x7f0000000600)="044606152e8aee2e3f7f41475c4bbeff0f412685ee2018189aa3c8d34b2620d6f3a622fc90df17609fd177fc5d527ba7ea3644e160a00fe7ce0d76f923723791abb434a864e3399ae1def6801dc6ebe2d0c5a71070e2af75b00d401f9988292a4f29e05a90c2a1511b63d88d25575ca92448ff27cb31a112e86895d032529f7f83b32639753141576af8ef192eab2ddcb28031ae969de5f661bba85ac6cdeb095f6b25853c713f3bda83f35deaf301107e", 0xb1}, {0x0}, {0x0}, {&(0x7f0000000800)="756ecb8c8278c594a24be9ef6ec938df7ac67c6daa6d41fa4484823d779662e627da9c04b4dcea20b38d18765f292ffc29700b7b8904eecb376524c545ada23170e5e650f440d666e11c3de1ea0eccebebd29fc9eda4809e7abb3af943a55ad858899b7fbef5400c9effd16b6a51cf03f8737e86a91c78d50073fad9846f2efa71086872cfe77fcbf10ffe4cd84a7c7aaa10f9e633e9af9efdb67e6607744f51c2ea3b88898e61", 0xa7}], 0x6, &(0x7f0000000980)=[@txtime={{0x18, 0x1, 0x3d, 0x1}}, @txtime={{0x18, 0x1, 0x3d, 0xffffffff}}, @txtime={{0x18, 0x1, 0x3d, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0xb50a}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @mark={{0x14}}, @txtime={{0x18}}], 0xa8}, 0x4000) 16:43:08 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:08 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x300000000000000) 16:43:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xf00]}}]}}]}, 0x8c}}, 0x0) 16:43:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb14, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400001a00056bd25a80648c69940d0124fc6010000a400a000048051282c137153e370948038000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) [ 1586.613742][T21985] device syz_tun left promiscuous mode [ 1586.621454][T21985] bridge737: port 1(syz_tun) entered disabled state 16:43:09 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a0, 0x0) [ 1586.733089][T21985] bridge738: port 1(syz_tun) entered blocking state 16:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x400000000000000) [ 1586.806554][T21998] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1586.817538][T21985] bridge738: port 1(syz_tun) entered disabled state [ 1586.852096][T21998] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1586.865779][T21985] device syz_tun entered promiscuous mode [ 1586.894358][T21998] __nla_validate_parse: 5 callbacks suppressed [ 1586.894369][T21998] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.1'. 16:43:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x500000000000000) [ 1586.949774][T21987] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1587.028697][T21982] device syz_tun left promiscuous mode [ 1587.034964][T21982] bridge738: port 1(syz_tun) entered disabled state 16:43:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x1100]}}]}}]}, 0x8c}}, 0x0) [ 1587.081171][T22011] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1587.124341][T22011] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1587.164219][T22011] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.1'. 16:43:09 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df13e0}, 0x0) 16:43:09 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:09 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbb14, 0x0, @perf_config_ext={0x0, 0x5}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xfffffffffffffed3, &(0x7f0000000080)=[{&(0x7f0000000040)="2ea400001a00056bd25a80648c69940d0124fc6010000a400a000048051282c137153e370948038000f01700d1bd", 0x33fe0}], 0x1}, 0x7a000000) 16:43:09 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a1, 0x0) 16:43:09 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x1200]}}]}}]}, 0x8c}}, 0x0) 16:43:09 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x600000000000000) [ 1587.392230][T22027] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 1587.432682][T22027] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1587.458768][T22029] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1587.493903][T22027] netlink: 23550 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1587.585786][T22033] bridge739: port 1(syz_tun) entered blocking state [ 1587.610048][T22033] bridge739: port 1(syz_tun) entered disabled state [ 1587.635988][T22033] device syz_tun entered promiscuous mode 16:43:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x700000000000000) 16:43:10 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a2, 0x0) [ 1587.711530][T22035] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:10 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x203, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) socketpair(0x1e, 0x80005, 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$kcm(0xa, 0x2, 0x11) setsockopt$sock_attach_bpf(r0, 0x88, 0x67, &(0x7f0000000040)=r0, 0x4) sendmsg$kcm(r0, &(0x7f0000000480)={&(0x7f0000000080)=@in6={0xa, 0x2, 0x0, @mcast2={0xff, 0x2, [0xe803, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0x41}, 0x80, &(0x7f0000000540)=[{&(0x7f0000000200)="e870a6b9258a3da4f9ddef7b075153ba03c9d741f0313c057eb481", 0x1b}, {&(0x7f00000002c0)}, {&(0x7f0000000140)}], 0x3, &(0x7f0000000180)}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x40202, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) [ 1587.754011][T22029] device syz_tun left promiscuous mode [ 1587.780963][T22029] bridge739: port 1(syz_tun) entered disabled state 16:43:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x1206]}}]}}]}, 0x8c}}, 0x0) 16:43:10 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df14c8}, 0x0) 16:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a69"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3f00000000000000) 16:43:10 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x1300]}}]}}]}, 0x8c}}, 0x0) [ 1588.150950][T22056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:10 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a3, 0x0) [ 1588.263314][T22063] bridge740: port 1(syz_tun) entered blocking state 16:43:10 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a69"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1588.307510][T22063] bridge740: port 1(syz_tun) entered disabled state 16:43:10 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4800000000000000) [ 1588.391303][T22063] device syz_tun entered promiscuous mode 16:43:11 executing program 1: [ 1588.476450][T22067] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x3f00]}}]}}]}, 0x8c}}, 0x0) [ 1588.533630][T22056] device syz_tun left promiscuous mode [ 1588.551843][T22056] bridge740: port 1(syz_tun) entered disabled state 16:43:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a4, 0x0) 16:43:11 executing program 1: 16:43:11 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df15b0}, 0x0) 16:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a69"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:11 executing program 1: 16:43:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c00000000000000) 16:43:11 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x4000]}}]}}]}, 0x8c}}, 0x0) 16:43:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a5, 0x0) [ 1588.988824][T22093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:11 executing program 1: 16:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) [ 1589.141926][T22099] bridge741: port 1(syz_tun) entered blocking state [ 1589.166039][T22099] bridge741: port 1(syz_tun) entered disabled state 16:43:11 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6800000000000000) 16:43:11 executing program 1: [ 1589.222056][T22099] device syz_tun entered promiscuous mode 16:43:11 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a6, 0x0) [ 1589.324264][T22099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:11 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1698}, 0x0) 16:43:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x5800]}}]}}]}, 0x8c}}, 0x0) 16:43:12 executing program 1: 16:43:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c00000000000000) 16:43:12 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a7, 0x0) 16:43:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500010007"], 0x1c}}, 0x0) 16:43:12 executing program 1: [ 1589.795376][T22128] device syz_tun left promiscuous mode [ 1589.836201][T22128] bridge741: port 1(syz_tun) entered disabled state 16:43:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) 16:43:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7400000000000000) [ 1589.946210][T22128] bridge742: port 1(syz_tun) entered blocking state 16:43:12 executing program 1: [ 1590.001024][T22128] bridge742: port 1(syz_tun) entered disabled state [ 1590.036293][T22128] device syz_tun entered promiscuous mode 16:43:12 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a8, 0x0) [ 1590.117774][T22139] device syz_tun left promiscuous mode [ 1590.131862][T22139] bridge742: port 1(syz_tun) entered disabled state 16:43:12 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x5865]}}]}}]}, 0x8c}}, 0x0) 16:43:12 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) 16:43:12 executing program 1: 16:43:12 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a00000000000000) 16:43:12 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1780}, 0x0) 16:43:13 executing program 1: 16:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, 0x0, 0x0) 16:43:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1a9, 0x0) 16:43:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x6000]}}]}}]}, 0x8c}}, 0x0) [ 1590.631275][T22169] bridge743: port 1(syz_tun) entered blocking state 16:43:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x80efff7f00000000) [ 1590.672693][T22169] bridge743: port 1(syz_tun) entered disabled state 16:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 16:43:13 executing program 1: [ 1590.731686][T22169] device syz_tun entered promiscuous mode 16:43:13 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1950}, 0x0) 16:43:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0) 16:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 16:43:13 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x6558]}}]}}]}, 0x8c}}, 0x0) 16:43:13 executing program 1: 16:43:13 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xffffff7f00000000) 16:43:13 executing program 1: 16:43:13 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 1591.246349][T22196] device syz_tun left promiscuous mode [ 1591.265994][T22196] bridge743: port 1(syz_tun) entered disabled state 16:43:13 executing program 1: [ 1591.375411][T22196] bridge744: port 1(syz_tun) entered blocking state 16:43:13 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ab, 0x0) [ 1591.416805][T22196] bridge744: port 1(syz_tun) entered disabled state [ 1591.441269][T22196] device syz_tun entered promiscuous mode 16:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}}, 0x0) 16:43:14 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r0}, 0x15) recvmmsg(r0, &(0x7f0000001480)=[{{&(0x7f0000001400)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000000280)=[{&(0x7f0000001640)=""/251, 0xfb}, {&(0x7f0000001740)=""/106, 0x6a}], 0x2}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000001340)) ioctl$F2FS_IOC_DEFRAGMENT(r3, 0xc010f508, &(0x7f0000000040)={0x6, 0x1}) r4 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, 0x0) write$UHID_INPUT2(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xf1) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000080)={r4, 0x6, 0x3, 0x8001}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f00000017c0)={{{@in6=@private2, @in6}}, {{@in6=@empty}, 0x0, @in=@multicast1}}, &(0x7f00000018c0)=0xe8) ioctl$VIDIOC_LOG_STATUS(r5, 0x5646, 0x0) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r6, 0xc0045005, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252}, 0x15) connect$rds(0xffffffffffffffff, &(0x7f0000001940)={0x2, 0x4e20, @remote}, 0x10) write$UHID_INPUT2(r6, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) openat$cgroup_type(r6, &(0x7f0000001900)='cgroup.type\x00', 0x2, 0x0) 16:43:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a2df1ec0}, 0x0) 16:43:14 executing program 1: 16:43:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x8100]}}]}}]}, 0x8c}}, 0x0) 16:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}}, 0x0) 16:43:14 executing program 1: 16:43:14 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ac, 0x0) [ 1591.813325][T22222] device syz_tun left promiscuous mode 16:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x1c}}, 0x0) 16:43:14 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)=ANY=[@ANYBLOB="0c000000eb003148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e642c49ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5ac45aea321c4cc09c114c"], 0xf1) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000040)) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) [ 1591.834611][T22222] bridge744: port 1(syz_tun) entered disabled state [ 1591.921075][T22222] bridge745: port 1(syz_tun) entered blocking state [ 1591.967394][T22222] bridge745: port 1(syz_tun) entered disabled state 16:43:14 executing program 1: [ 1592.065216][T22222] device syz_tun entered promiscuous mode 16:43:14 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ad, 0x0) 16:43:14 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x9e00]}}]}}]}, 0x8c}}, 0x0) 16:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) [ 1592.141083][T22229] __nla_validate_parse: 7 callbacks suppressed [ 1592.141093][T22229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:14 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a6a282f8}, 0x0) 16:43:14 executing program 1: 16:43:14 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) 16:43:14 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RMKDIR(r1, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) ioctl$TCGETS2(r1, 0x802c542a, &(0x7f0000000080)) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000040)={r7, 0x1, 0x6, @local}, 0x10) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r9, &(0x7f00000017c0), 0x1d2, 0x0) [ 1592.452765][T22248] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xf000]}}]}}]}, 0x8c}}, 0x0) 16:43:15 executing program 1: 16:43:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[], 0x1c}}, 0x0) 16:43:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ae, 0x0) [ 1592.622510][T22255] device syz_tun left promiscuous mode [ 1592.633000][T22255] bridge745: port 1(syz_tun) entered disabled state 16:43:15 executing program 1: [ 1592.716483][T22255] bridge746: port 1(syz_tun) entered blocking state [ 1592.735052][T22255] bridge746: port 1(syz_tun) entered disabled state [ 1592.763062][T22255] device syz_tun entered promiscuous mode [ 1592.799320][T22260] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:43:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 16:43:15 executing program 1: [ 1592.921665][T22264] bridge6: port 1(syz_tun) entered blocking state [ 1592.941427][T22264] bridge6: port 1(syz_tun) entered disabled state [ 1592.954299][T22264] device syz_tun entered promiscuous mode [ 1593.019068][T22267] device syz_tun left promiscuous mode [ 1593.026254][T22267] bridge6: port 1(syz_tun) entered disabled state 16:43:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1af, 0x0) [ 1593.177212][T22257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:15 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a9245080}, 0x0) 16:43:15 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0xffff]}}]}}]}, 0x8c}}, 0x0) 16:43:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0) 16:43:15 executing program 1: 16:43:15 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b0, 0x0) 16:43:15 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB], 0x1c}}, 0x0) [ 1593.412006][T22290] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:16 executing program 1: [ 1593.496498][T22295] device syz_tun left promiscuous mode [ 1593.512058][T22295] bridge746: port 1(syz_tun) entered disabled state 16:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fb"], 0x1c}}, 0x0) [ 1593.566067][T22295] bridge747: port 1(syz_tun) entered blocking state [ 1593.616252][T22295] bridge747: port 1(syz_tun) entered disabled state 16:43:16 executing program 1: 16:43:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b1, 0x0) [ 1593.692817][T22295] device syz_tun entered promiscuous mode [ 1593.722131][T22307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 16:43:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe}}]}}]}, 0x8c}}, 0x0) [ 1593.773090][T22295] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fb"], 0x1c}}, 0x0) 16:43:16 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0xffff8880a9245250}, 0x0) 16:43:16 executing program 1: 16:43:16 executing program 1: [ 1593.961134][T22314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1594.036295][T22318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b2, 0x0) 16:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fb"], 0x1c}}, 0x0) [ 1594.119951][T22323] device syz_tun left promiscuous mode [ 1594.126170][T22323] bridge747: port 1(syz_tun) entered disabled state 16:43:16 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 16:43:16 executing program 1: 16:43:16 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) fsetxattr$security_capability(r3, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r5}, 0x18, 0x0) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000040)={{{@in=@rand_addr=0x64010102, @in=@multicast1, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x80, 0x20, 0x0, 0x0, r5}, {0x401, 0x5c, 0x2, 0x4, 0x4, 0x100, 0x8, 0x80}, {0xffff, 0xfd3, 0x20, 0x80000001}, 0x3f, 0x6e6bbf, 0x1, 0x0, 0x0, 0x1}, {{@in6=@dev={0xfe, 0x80, [], 0x39}, 0x4d2, 0xfe}, 0x2, @in=@multicast2, 0x34ff, 0x3, 0x3, 0x1, 0x1, 0x80000001, 0x10001}}, 0xe8) r6 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r6, 0x80845663, &(0x7f0000001340)) r7 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r7, 0xc0045005, 0x0) write$UHID_INPUT2(r7, &(0x7f0000000480)=ANY=[@ANYBLOB="0c000000eb003148213b353ab3accfe36221e1585b2b6300b42645bd8ba533580b41fc93fe10057fdebbdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f31b7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea331c4cc09c114cf68c36e882f9973969e33c98656d1ee61ba4be6a26041207950bc8bc32a8e1dd581bcc43ee1d6ca18f000000000964bda95e3a321bb9fd2ce7a9dc02ea90aa1538659c4b5277e56ec95c262970fc4525b83ace4cd6f00a4a4ed15efacce07cf6491ef2d7a8aa2fec4e95d1f16a98fe96be8c541469792112685e84d6"], 0xf1) sendmsg$TIPC_CMD_SET_LINK_PRI(r0, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000003c0)={0x68, 0x0, 0x800, 0x70bd2d, 0x25dfdbfd, {{}, {}, {0x4c, 0x18, {0x4, @media='ib\x00'}}}, ["", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x888}, 0x4000) ioctl$SOUND_PCM_READ_CHANNELS(r7, 0x80045006, &(0x7f0000000140)) setsockopt$inet6_MCAST_MSFILTER(r6, 0x29, 0x30, &(0x7f0000000280)={0xfb7, {{0xa, 0x4e22, 0xb00d, @ipv4={[], [], @empty}, 0x9}}, 0x0, 0x1, [{{0xa, 0x4e23, 0x7, @ipv4={[], [], @empty}, 0x800}}]}, 0x110) [ 1594.222154][T22323] bridge748: port 1(syz_tun) entered blocking state [ 1594.232969][T22328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1594.254501][T22323] bridge748: port 1(syz_tun) entered disabled state [ 1594.326663][T22323] device syz_tun entered promiscuous mode 16:43:16 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b3, 0x0) 16:43:16 executing program 1: 16:43:16 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000"], 0x1c}}, 0x0) 16:43:17 executing program 1: 16:43:17 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x2}, 0x0) 16:43:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 16:43:17 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, 0x1412, 0x400, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8, 0x4f, 0x3}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000800}, 0x40) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000"], 0x1c}}, 0x0) 16:43:17 executing program 1: [ 1594.897172][T22358] device syz_tun left promiscuous mode [ 1594.919135][T22358] bridge748: port 1(syz_tun) entered disabled state 16:43:17 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 16:43:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000"], 0x1c}}, 0x0) 16:43:17 executing program 1: [ 1595.012800][T22358] bridge749: port 1(syz_tun) entered blocking state 16:43:17 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b4, 0x0) [ 1595.081232][T22358] bridge749: port 1(syz_tun) entered disabled state 16:43:17 executing program 4: r0 = creat(&(0x7f0000000140)='./file0\x00', 0xfacd0bbc79b60131) r1 = perf_event_open(&(0x7f0000001340)={0x4, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x0, 0x0, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r3}, 0x15) r4 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) getsockopt$inet6_tcp_int(r1, 0x6, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) sendto$isdn(r4, &(0x7f0000001640)={0x401, 0x1, "fdb5cd9d0912d8475350698c1cd2334bd44906027cbac8b29d01b8b1824d60cda8412b398ebc8d7d70e1acbbf721cecfbafc232ddcbb940e6e65b22733e96cfb3968a61a170e76277a49203595786d2fe3746f2586ddbb11f0f5b9a7e49ab67e2c0933b0aa9745f4066b56ab32dc3122516f28b51ed586fcd67089a2e7248b6706016f1b1e40e478f031142e00531b383ff2aa4efae009162ec94f35898463a57c755def7e55e1941148f5c06f1b82e9f2b92f1d47ef939498666d03ded7c86906dd74d9573c5bafde0dac1214968780b3f2cd5eb7144e4f22333169e03e8ddc527770825b"}, 0xed, 0x44, 0x0, 0x0) ioctl$VT_RESIZEX(r4, 0x560a, &(0x7f0000000180)={0x9, 0x6, 0x2, 0x8, 0x7, 0x101}) getpeername$unix(r3, &(0x7f0000000040)=@abs, &(0x7f00000000c0)=0x6e) 16:43:17 executing program 1: [ 1595.158167][T22358] device syz_tun entered promiscuous mode 16:43:17 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500"], 0x1c}}, 0x0) [ 1595.218915][T22350] device syz_tun left promiscuous mode [ 1595.226394][T22350] bridge749: port 1(syz_tun) entered disabled state 16:43:18 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x3}, 0x0) 16:43:18 executing program 1: 16:43:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500"], 0x1c}}, 0x0) 16:43:18 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b5, 0x0) 16:43:18 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000001340)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$int_out(r1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r1, 0x89f7, &(0x7f00000000c0)={'syztnl1\x00', &(0x7f0000000040)={'syztnl2\x00', r7, 0x2f, 0x3f, 0x8, 0x7, 0x31, @private2={0xfc, 0x2, [], 0x1}, @remote, 0x8000, 0x78c8, 0x0, 0x1}}) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r0, 0x89f5, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'ip6gre0\x00', r9, 0x2f, 0xb1, 0x1f, 0x25, 0x42, @rand_addr=' \x01\x00', @ipv4={[], [], @private=0xa010102}, 0x8, 0x20, 0x1e0000, 0xb9dc}}) 16:43:18 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) 16:43:18 executing program 1: 16:43:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff04000000000500"], 0x1c}}, 0x0) 16:43:18 executing program 1: 16:43:18 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b6, 0x0) [ 1595.945396][T22391] bridge6: port 1(syz_tun) entered blocking state [ 1595.980310][T22391] bridge6: port 1(syz_tun) entered disabled state 16:43:18 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff040000000005000100"], 0x1c}}, 0x0) 16:43:18 executing program 1: [ 1596.066985][T22391] device syz_tun entered promiscuous mode [ 1596.214380][T22394] device syz_tun left promiscuous mode [ 1596.223832][T22394] bridge6: port 1(syz_tun) entered disabled state [ 1596.452702][T22400] bridge750: port 1(syz_tun) entered blocking state [ 1596.464695][T22400] bridge750: port 1(syz_tun) entered disabled state [ 1596.479621][T22400] device syz_tun entered promiscuous mode [ 1596.494131][T22401] device syz_tun left promiscuous mode [ 1596.504137][T22401] bridge750: port 1(syz_tun) entered disabled state [ 1596.703038][T22391] bridge6: port 1(syz_tun) entered blocking state [ 1596.711860][T22391] bridge6: port 1(syz_tun) entered disabled state [ 1596.725514][T22391] device syz_tun entered promiscuous mode [ 1596.751137][T22404] device syz_tun left promiscuous mode [ 1596.763112][T22404] bridge6: port 1(syz_tun) entered disabled state [ 1596.921079][T22392] bridge750: port 1(syz_tun) entered blocking state [ 1596.928435][T22392] bridge750: port 1(syz_tun) entered disabled state [ 1596.936042][T22392] device syz_tun entered promiscuous mode [ 1596.945727][T22421] device syz_tun left promiscuous mode [ 1596.954661][T22421] bridge750: port 1(syz_tun) entered disabled state 16:43:19 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x4}, 0x0) 16:43:19 executing program 1: 16:43:19 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b7, 0x0) 16:43:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff040000000005000100"], 0x1c}}, 0x0) 16:43:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x6]}}]}}]}, 0x8c}}, 0x0) 16:43:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x800, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001340)) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x0, 0x8}, 0x8) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:19 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="500000000206050000000000ffffff9e0000000005000400000000000900020073797a30000000000500010006000000050005000a0000000c00078008000640000000000c000300686173683a6970"], 0x50}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c0000000306010200000000fbffff040000000005000100"], 0x1c}}, 0x0) 16:43:19 executing program 1: 16:43:19 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x40000000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x101000, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="d7a2310aab8c83bf6ee1f7acca2f56c0e1f10fa44b266a2600dae222494ed307cb0efac1e96c48f13ee0e714b0aaa430b01079718d47bdd0c0f48005d9e1801de565185559c849cca4bb398a72c18830bf0f6fdbb5f507fdc5b4f805a531c7be1aec6f0d29f0b4e76233b1a4e787aa2c9b3356b1927e5e9fc8c41ddda315878ca48ab96e7ad127e82ba90dac7cd6b47acc2e8e86777b0568c8f742f48df048bd76042acdf0a02ab82ae9837146f613daed0026f40aa143b4c06c86b826ba3b36c7534b97b2722a806c982cdcff140c3ca2ad1e507747d39413a158be049b5f58151c58e5672747edec764785efcde75cc36547c63d14d39d92792d3bf23793645b965b7bb7710586bafd8cf9cfd20a3b48393df0295872853c4520d62624cfc9c605ecef9af13a82eee4f93a18107fd5c457b5ba1e60d7c602443a6727556863d088916ee22a96db052e47bf6b411e5aa8bdeb36e71b509c2f809f093f122162f08abc01c1bbd5f2bad3456190aedfcda926fa35b6e1551d0977e67d28b40cd32b77d0726ea0ed707132c1f3ce83d0f2dbe2a65e960ef3c3dda4d967b298c3cdabb9caef650e7054930ee9d7fa65e91ef432e24a166b59ddb9ae26a2b715d0d8bc6c73bb2cdc62ada5b59f692e4986fef3ff34edf23bbcaf5ef7fa7b800b2cecb8ce8ac8f83b7de9b81fd7cdfcd2f15e1d62e29c23205cc4c87be19314d0b1cc31337e33c23ec8a2cea2f9a475a8858aa9e6c94f6ac9f47ce45b3487ac7dda1fb7ab56eadb54839f02fa75ee2b2cbadd70e72b8ab6346b48fe6db953a178d3e15d3440d9552d9bd2b5f1dfca590a02522fc5097c856411355268f3b0fc703df5fcdac897c26bdabf7d262c693896d30253002e08282ce2d6cd9cf58faf64b5abdca4e7e4a1fed394fef08c9627cce5bce3a5e95eb92c71ad64f1389bd44fa0b657f338ff27e0db977e162e4b293ac982dc1b957fe56d0b36098c148e09c223030b633f0b3bca53bb116b520d2a61416c0c121d053a8b7b2b72c293427eb6d52b89ad6daebe1a24e8586ba477523486f81b46540244fea346e0fa1364bd44906863472fd23d4ed986ae4cec278928ab9fcd572889d506f2890f555a205eb0df4cddf47d7cc2954a60151137349cb9ba7cccd6fcce32afe997415ab87a898a85d0fac8cc92b2fd2157bf46f3a82089d59747a4fa7ded29ca2d4be32dd102ec6f5de98a40c1ed8aeacb32df62c28306ab862e39caf1ef34f017049dfc538e085f99083fefc9f962aed0bac7d70e9f2f397a02915e064479c5d5d83858b3eb8f30b5447513cc884f0776dcacb1a4ddf2a949734329201a777c0a171e1f6e5e4a9db90c991d573bbb60c6094feea43de890cd290599f5ed91e85c33f7e97ac136356ce4dd858ca627fbed5e33b562c54ea8b00e2f0b04bdb1dd028c31d3560f150131b1e536ba10b4533754cad20ec9a662849b4692463e962b9334d4efa43d5a00670b4013546637b3973faebe896ae5aed24c12e270b87f44a9580f8db83fc8a5724a579ff50ab099a1b61828b54c7be9a332dd65f0b30ec2ead3a0d90879d15606cac6d8bdbcb6cb99cf4587a27a87761844b2daaa8ae107cf2767670e405d2563328524a64573d4f3127a8b288048e5cf8133caa5fd64abad3d731a7886731197ae436bb333df4b7ac7b803b1bdede25f7a4ef199309a855adecf5dae151be8a5233bdaec8bf537f93044875804314cf0b93ba145831d912d62ffde9e09f3946c7111e93af4c025e64dbf8e1046a6f21912cd3b3eb817d460df97cf8ab16604ffa4472f33e598495c18bb7dfc91d898de4d46641b281ceb5cc46858dbd0edaa6de8da51cd1091523dfe87e119067ec60d7a29464de0e163255ad2f03c3f3f10387fb9c1a18add689d14fc86dfecc5c1c1b99f59e3f4aef6799cca7de5f9dce44deb62b0a23e8c957037c0c862302471235df24fadc3ae3fdaee2a65e65359d4540dc22f9c3fd5421ce05e9b04c8fad9f2392f5456562e0a164dcaf415b30518e0984dc57da31fbc6af4311c3b025b0b583ba8c158dcfd0c975ef489059e2c4bcbeaba10df231b65b73a4092e0b5c0a116dfee2dca217c0c3b962d98166064ca5530a9049ba831ee4bf5390d7ece436d96fecf172eb4b996fe1ea5727aa0775c378e2599c48ec08db00c913bac7d5bb07842ce6749ab61a2617a3829db472e92a4776a9d9fd689e2f4acb20d96c460bad47381d03e5ef8ed8534e701a34f3bebaaeaffb5ec74dbcec1591034b68be8f01f678bbe7e5368dff5cfe85296f4eef772a6ef5a6a9847e54b446ed8468c5c617f937da8ee396a1fca44266405bc318b7d637047b5e576467e89acb3cfcb022c2066ef32e71c847e9a2c6d17dbcc6e6d244ad8245e06efcfc12e768041909ca84bbdfd3e788c65098f0bcd39950d5861d61f14667d0fa897dcdce697048d15458f7ec4659bc02bea8c1ea14fd23ddb24d39b0395723df66f1eb62255185e46344c88fb4e02ff53df2cbf10b294f2dfda1bda69824a0dff345db62157306882d6d68680beca5e131b6c806a3f51c86501d3b41dbbf23ee25bd3a502912e0c941f4cdf19af20bd68b745f48b50178958cd2be55cbcc5ff84df3b45c2f8484a4254fd78253e6e03483bae58289be61d90e8956696bea3179cc4f8b04ce5e36f8dcd45b90b0b838783a4a9b49d4aa93436c94959e54ab97f8ba71d51253f6a83833e05a6aabd2797489ca1517ae9f30fdc3aabda2790bcc584229296b34d03a18d2f26c3a4bc180cfd696c8cac5b791e74ea93ae6da07c0521d5404fd33069b97e7bbfc86ec2292c4e83850642cdea5e62695251ae61a4700347cbebbaa518cd16ce5e02ef5aeba1480cbde9aa37081d7726cc994e78f121bcbed35ddc4bb4effd3816c49bc25f481a9693524027f55db34ec190965fe2e5c4cb55ad124af411697ce0c2e2e7dc6e4b1ef2003e18f292d7e94ff5e4b55852abb4ac7f02091e5af6efcbfafd8b707e9582fee0b83d98bfa67ae32311eacc2f91f9483f94d51842cd092a63cde06904b9fd3e31da282c12013145b057aae20c6a78505cc2330e0aee0b3cca2a24a9b26d11dc0553c88fa66f2d28055c9632036609f5b1863075db00fba23799a6e424a479f17be94942f29800d6161e0f5460f248adda65f2e8d57ff47e10575bd9e724ec1a66b4d8ed9b45fbdf301024a79f73cd0c32ba1298ec8a83d04284957e29ee9d7439029572873a3a1837274e61db700a3b3369ecc8a5c6c3e3cad8c605572a4bc9a09671580d51d3572a2a18d107e0f77379e944b50aa243cd86f531200ed051eaf6fce587d0363d18e4575425d2de69d41456567638c623714b44e6b5ac31d773bc3196fcfe3412c9347d489870b3f3381f37e8a51b967c0063e2dc49e04afd79b27ee59e7e43a1be481ec01f4b608da340c20835c0314d115e6077684ac3af6cdbacd9bc67d81af19987ef232d91a8569ffe9b13d2fb6ca54e43ca997a3f14621e4d6d4d06c3956138f53cbd80e99c2a3e60ccb8cfbfdebae121a196d7049bfc4b250e271f9fc94d635b10db658e423d3fa61f5c70da4ba189ee38bcf03c141e861bad217427365df8d2405b024b81342786063600b661febdf3405a5e45dd96e78ee20a3c905971506a55cb262c6a9b9dd1002bd788119cc6ec5445208a65fdb546d3a31774f4957be79aa123559b3ca49c15b39e9e943f073e43f56dde9b537e4c5f74ee5f93bdbfc43507716a04344f08e685fa364ad765f6dc91b306464578472c465869570d97c2c5c20daca0aa8cfd73f707fa2364a02ffb2f6a69528de158b59b0ca98143f514b8ca14fe6f2e6ee5cb33b357a315ee24f76eb9af8f890fdc965bb94cde90b7390ffa2b738853f7f465af1b0feef82f195f41777e27ce04678ddeba00058e118c04ad004f54f7be7e3419162adc93788804c349766a48910836c5cb9d0250fe20203b22fa31c6a5b791882270c96df69eb665ff7c3dfc1d71c8f8cf008d771ccc47a04da6f3b8fbda77b889300e6ac8ac443cf01246d14f76be9c71d26842adeb94f4b8ee9798b7c8dfc02d9a4436191165c48fc0cad53f3a0e9cedd9b7cb67569f1f667719cebc6a14053ab1425d9586c98c31bd34a5cbc160f3d7cd8e75027ec8e471aa7ac02ebdfc37e89c37dd03c9e2d3935f9696a77285442d441208bcf454cd0dd43d66e438cfee61301bcc87dcc964fbeb722c6004e1c968c620d89237bd6722ace8afc1f781b1f2364d42729382f04528ed3bd2dc92e4f2bdcd3617f038aba1042168910d9c4e10081264ee88f44e70b0bc2fa4983b9bf1301b761b68ab3254f2cd0a462d1c08c138435193c9ba9b7b375c4f131205974cb7d20163335c374e9ca67c5de92a97b8aebb6e99bd631fa4e8a33edd0a019658527e72c6d987a9cb325086786ed22f76bc74f230e5a78430cc0c1eb465ea54e763f83c095a6c681011f4f25b45700e534ed774bea7b0fd64430e015d9f755095942293c8eb52efb99c58d277cbec377ce86a546256c3e86fd7a82f07016013abdd31b2c59e6b06292f9b3b32bc2524e2c2841a46ffeac2aca827bcb243acbe4df5edda90bde33acf0020c134478adb00b39e86ce6fc8716e69f161f7ee3eda1b4a43e5043756909ce5d37a3846d499de16216e661220a314f39203c046a8a9f7914b0778a753084de0df2a146fcceff395460a9b12d665e2e47bdce6dc88d554a0c8fa8aa3c3e50f038b534479c120a63bb0021ac275d3b5766baae3ebc8e598be3cccfa9d6b646ff9e061bd112417c134e6f7faca9cd020367ae18fae349ecd790d72125121ca7e6193b2d545ee0cc4b0d1efdbc0c06be44d0d1164233e400fe0c6f4400647fea457fb09dbd458fe81a3ffeb400d274202006ea84835675e0ae52b1840f74a7bd6066f60f7e7c18eaeef144bc32b62fbc7f304da75415912fd998deb70e61f5139c677e427c648e76f90528361594a15f703a6ec83953b61a98e28a00497533a1be8291f1ef3252676522846aee70ae9ef337b7aecbd8a02def11edd63bae02d77525a763b90340ad9135dd2e4410b4ff4bf0d3f2ff63934b5146dd941587af911ca943dd4678e7b0ba2e23a8e0d94080dfd3e5e30d65db3de7471c7f2536d16d7d6defcb88039d9edaa222b55efecdc142b2885faf8ad1548dcaa015fa6fcf1c3ed40c00eabb6f6d610caa03bcced9c02dbb1a6c4dbdc3ac397b2352237f80f088aca6bfb8ebaf7eeca4e60b2a426ece64796d914dc6bb0510015c5c4c7b6f2745387e6171a65de1a7ed75bfde77b7a48e32523c5e23ba9f1a62c1ea52f93720cbbe55f20e64fac61d50d4c9221e4839548c7d4839c17dd7c92241b6eb34904b250d61db86fccb74a14e28bf7c77fc211c41831217f07d004a805ede41aed33188b6eae3712e26dc4620c64dd4d7c8cd69f0f0dbae84e82ffc7edee90c77bda4f15814187b9d139e8549a3c480ac9e862032b8b2b1242aac54e87e772e59d31ede07776a405703cc9ffe2d8da12f6820a6ad99f436129316a38b29ad2a8f73abcf3563df5c6e8a0ab8ee74514360bded53ec9269d97810a969f0b5444ffb1fca08e2ff52085fc83757399cdf7970aad857335ae56c47353b52b9648fd1d0896e5c7a953eb38f32ce438f710906098d728ef3516944cb9325727f1e9ad1fb2fadcdb95fb68b3ee0059c39507df659b77c01acd49825e265e8c28ca4e", &(0x7f00000014c0)="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", 0xfffff252, r2}, 0x15) io_uring_register$IORING_REGISTER_EVENTFD(r1, 0x4, &(0x7f0000000080)=r2, 0x1) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:19 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) [ 1597.375280][T22444] __nla_validate_parse: 10 callbacks suppressed [ 1597.375301][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b8, 0x0) 16:43:20 executing program 3: [ 1597.564220][T22451] bridge750: port 1(syz_tun) entered blocking state [ 1597.590764][T22451] bridge750: port 1(syz_tun) entered disabled state [ 1597.626562][T22451] device syz_tun entered promiscuous mode [ 1597.687041][T22452] device syz_tun left promiscuous mode [ 1597.693607][T22452] bridge750: port 1(syz_tun) entered disabled state [ 1597.907835][T22444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1597.942932][T22444] bridge750: port 1(syz_tun) entered blocking state 16:43:20 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x5}, 0x0) 16:43:20 executing program 3: 16:43:20 executing program 1: 16:43:20 executing program 4: r0 = accept4$inet6(0xffffffffffffffff, &(0x7f00000028c0)={0xa, 0x0, 0x0, @empty}, &(0x7f0000002900)=0x1c, 0x80000) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000002940)="1475f9ca88a1ef057b233771bc3ebe86", 0x10) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1b9, 0x0) 16:43:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x9]}}]}}]}, 0x8c}}, 0x0) [ 1597.962780][T22444] bridge750: port 1(syz_tun) entered disabled state [ 1597.987411][T22444] device syz_tun entered promiscuous mode 16:43:20 executing program 3: 16:43:20 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup(0xffffffffffffffff) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}) [ 1598.192760][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:20 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) mount$fuse(0x20000000, &(0x7f00000004c0)='./file0\x00', 0x0, 0x7a04, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = dup(r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_load_balance\x00', 0x2, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f00000001c0)='0', 0x1}, {&(0x7f0000000140)='2', 0x1}], 0x2) 16:43:20 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ba, 0x0) 16:43:20 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x5e, 0x7f, 0xff, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x7, 0x4}, r0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r3}, 0x15) getsockname$unix(r3, &(0x7f0000000140)=@abs, &(0x7f00000001c0)=0x6e) ioctl$sock_ipv6_tunnel_SIOCADD6RD(0xffffffffffffffff, 0x89f9, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000040)={'ip6tnl0\x00', 0x0, 0x2f, 0x20, 0xcf, 0x401, 0x20, @ipv4={[], [], @initdev={0xac, 0x1e, 0x0, 0x0}}, @private1, 0x20, 0x7800, 0x101, 0x7}}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000100)={@private0={0xfc, 0x0, [], 0x1}, 0x13, r4}) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1598.345046][T22484] device syz_tun left promiscuous mode [ 1598.355446][T22484] bridge750: port 1(syz_tun) entered disabled state 16:43:20 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xa]}}]}}]}, 0x8c}}, 0x0) [ 1598.434419][T22484] bridge751: port 1(syz_tun) entered blocking state [ 1598.465018][T22484] bridge751: port 1(syz_tun) entered disabled state [ 1598.525594][T22484] device syz_tun entered promiscuous mode [ 1598.556176][T22486] device syz_tun left promiscuous mode [ 1598.593871][T22486] bridge751: port 1(syz_tun) entered disabled state [ 1598.839267][T22486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:21 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bb, 0x0) 16:43:21 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, @perf_bp={0x0}}, 0x0, 0x0, r0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = socket$unix(0x1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) setsockopt$bt_BT_SECURITY(r3, 0x112, 0x4, &(0x7f0000000040)={0x2, 0xbc}, 0x2) 16:43:21 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) perf_event_open(&(0x7f00000006c0)={0x1, 0x6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x12, 0x43400) 16:43:21 executing program 3: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') r3 = syz_open_procfs(0x0, &(0x7f00000001c0)='clear_refs\x00') pwritev(r3, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) pwritev(r2, &(0x7f0000000180)=[{&(0x7f0000000080)='4', 0x1}], 0x1, 0x0) 16:43:21 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x6}, 0x0) 16:43:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xb]}}]}}]}, 0x8c}}, 0x0) 16:43:21 executing program 1: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f076d079b000c48299667b70536342623b309d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b4c", 0x4b}], 0x1) [ 1599.192619][T22526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:21 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) mremap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x1000, 0x0, &(0x7f0000001000/0x1000)=nil) 16:43:21 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bc, 0x0) 16:43:21 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xc]}}]}}]}, 0x8c}}, 0x0) [ 1599.357039][T22530] bridge752: port 1(syz_tun) entered blocking state [ 1599.367337][T22530] bridge752: port 1(syz_tun) entered disabled state [ 1599.406265][T22530] device syz_tun entered promiscuous mode 16:43:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) write$P9_RMKDIR(r1, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) recvmmsg(r1, &(0x7f0000000680)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0, 0xfffffd3f}}, {{&(0x7f0000000040)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/122, 0x7a}, {&(0x7f0000000140)=""/79, 0x4f}, {&(0x7f00000001c0)=""/92, 0x5c}, {&(0x7f0000000240)=""/223, 0xdf}, {&(0x7f0000000340)=""/135, 0x87}, {&(0x7f0000000400)=""/255, 0xff}], 0x6, &(0x7f0000000700)=""/206, 0xca}, 0x1}], 0x4000000000002fb, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_SET_NODE_ADDR(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x24, r3, 0xc15, 0x0, 0x0, {{}, {}, {0x8}}}, 0x24}}, 0x0) sendmsg$TIPC_CMD_GET_MAX_PORTS(r1, &(0x7f0000000640)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40090}, 0x8011) preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) [ 1599.456523][T22531] device syz_tun left promiscuous mode [ 1599.468871][T22531] bridge752: port 1(syz_tun) entered disabled state 16:43:22 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = timerfd_create(0x0, 0x0) timerfd_settime(r0, 0x3, &(0x7f0000000000)={{0x77359400}, {0x0, 0x1c9c380}}, 0x0) clock_adjtime(0x0, &(0x7f0000000040)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}) 16:43:22 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bd, 0x0) 16:43:22 executing program 3: gettid() r0 = creat(&(0x7f0000000280)='./file0\x00', 0x1) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0xa420a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x9}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) close(r0) r2 = creat(&(0x7f0000000280)='./file0\x00', 0x152) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) fchmod(r1, 0x1c6) write$binfmt_script(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="23025c6f0d80ff0300820094084300"], 0x3e) close(r2) fsetxattr$system_posix_acl(0xffffffffffffffff, 0x0, &(0x7f00000001c0)={{}, {}, [], {}, [], {0x10, 0x2}, {0x20, 0x2}}, 0x24, 0x0) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) vmsplice(0xffffffffffffffff, &(0x7f0000001540)=[{0x0}, {&(0x7f0000000000)="10cafe3d694e4c7aa7aa4b32d086e14fcdc597d1578ef023d3b41f3d00ef023bc310e5fb690a4e48f8b0f2222812", 0x2e}, {&(0x7f00000003c0)}, {0x0}, {&(0x7f0000001440)="ebbdab528fe01523f405e175e91fd77a67033ed6bb48a56085bbdc91242294fa961f4d3f68c0f9fa1d3c933ce2a47e9ae6e10f99f8ccae0c8b12867c1232b5773e34fb273dd98050add92d4b7af85e4a1eee5fa18baab1a84b14596c52e4d9004d7c03f0379cd74c2e49883fc3eac5b682aab48a2345fc4e8558b774b655df4ea409bb874a6b7e7dd8a6ab4ca2188e01bdfe3aa159b1c0ff5d7b804f5ecc783a5f4b92d28af12d8483b95bf0f1c45172be76786998b20af0567c9465e6096c5f37d57ea9bade20a305b76183f7271ce154e20a304a2573f74d1b64ab04da", 0xde}, {&(0x7f0000000100)="a41f4810652c0de65ae3c974e8c18b10170d34969523b465f29e", 0x1a}], 0x6, 0x0) execve(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0x200006) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r3) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) [ 1599.713824][T22530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xe]}}]}}]}, 0x8c}}, 0x0) 16:43:22 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r1}, 0x15) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) write$UHID_INPUT2(r2, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000000c0), &(0x7f0000000140)=0xc) ioctl$PIO_SCRNMAP(r1, 0x4b41, &(0x7f0000000040)) [ 1599.812816][T22526] bridge752: port 1(syz_tun) entered blocking state [ 1599.840240][T22526] bridge752: port 1(syz_tun) entered disabled state [ 1599.887349][T22526] device syz_tun entered promiscuous mode 16:43:22 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x7}, 0x0) 16:43:22 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$BATADV_CMD_GET_MESH(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000390400000000000000103f9b0000", @ANYRES32=r6, @ANYBLOB="03000000000000002000128008000100736974001400028008000100", @ANYRES32=r5], 0x48}}, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x20, &(0x7f0000000080)={@loopback, @empty, r5}, 0xc) 16:43:22 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) linkat(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x200) 16:43:22 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1be, 0x0) 16:43:22 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xf]}}]}}]}, 0x8c}}, 0x0) [ 1600.122457][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.163268][T22571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1600.453861][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:23 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100)='devlink\x00') sendmsg$DEVLINK_CMD_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14, r1, 0xc91add0bf88807dd, 0x0, 0x0, {0x5}}, 0x14}, 0x1, 0x60}, 0x0) 16:43:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x10]}}]}}]}, 0x8c}}, 0x0) 16:43:23 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1bf, 0x0) [ 1600.641685][T22581] device syz_tun left promiscuous mode [ 1600.652703][T22581] bridge752: port 1(syz_tun) entered disabled state 16:43:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmctl$SHM_LOCK(0x0, 0xe) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f0000000b00)=0x4) 16:43:23 executing program 3: kexec_load(0x6, 0x1, &(0x7f0000000440)=[{0x0}], 0x1) [ 1600.745597][T22581] bridge753: port 1(syz_tun) entered blocking state [ 1600.793020][T22581] bridge753: port 1(syz_tun) entered disabled state [ 1600.819312][T22581] device syz_tun entered promiscuous mode [ 1600.852716][T22589] device syz_tun left promiscuous mode [ 1600.866422][T22589] bridge753: port 1(syz_tun) entered disabled state 16:43:23 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c0, 0x0) 16:43:23 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = open(&(0x7f0000000280)='./file0\x00', 0x3fc, 0x0) flock(r0, 0x1) [ 1601.115134][T22584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:23 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x8}, 0x0) 16:43:23 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgctl$MSG_STAT_ANY(0x0, 0xd, &(0x7f00000000c0)=""/216) 16:43:23 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x11]}}]}}]}, 0x8c}}, 0x0) 16:43:23 executing program 1: syz_open_dev$tty1(0xc, 0x4, 0x1) mkdir(0x0, 0x0) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000000180)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x0) socket(0x0, 0x0, 0x1f) syz_open_dev$tty1(0xc, 0x4, 0x1) lsetxattr$security_ima(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)='security.ima\x00', 0x0, 0x0, 0x0) utime(&(0x7f0000000140)='./file1\x00', &(0x7f0000000200)={0x0, 0x7fffffff}) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0xa00, &(0x7f00000002c0)={&(0x7f0000000000)={0x98, 0x0, 0x1, 0x409, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x98}}, 0x0) sendto(r0, &(0x7f0000000400), 0x0, 0x0, &(0x7f00000004c0)=@alg={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x80) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) 16:43:23 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c1, 0x0) 16:43:24 executing program 3: r0 = syz_open_dev$loop(&(0x7f0000000880)='/dev/loop#\x00', 0x0, 0x182) r1 = memfd_create(&(0x7f0000000180)='\x14\xccmPn\x9be\x13\x1d\xe5\x1c\x95\x14tc\x93\xe6\xd1\xa47\xf9\vc8tU\x90\x13\xf3\xfc9\x9bP\xe5\x12\x85\x9c\x86\x87\xe3\x88\xdb\xb5\xd5\xe0q\xfb\r?\x1c\xf5$Q\xdbKo\xe0\x0f\xf1W\xc9w\x10\xa9\xdeW^\x9e\x8eV\xcf8\x00\x02\xb6a\f\xe1\x8a\xeaw\xfe\x8b\xc2\nh}\xc3|p\'\xf0\x8eM-?\xccG_\x16\xa4\x1bQn\xd0\x06\xc7FIR\xd3\x88\f/@*\xe6\x8a\x13)H\xd5\xe7\xa4\xaf\xc5\xe6\xb2p$\xb9\xce\x98\xedY\x8a\xb2t\xaan|\x8a\xa9\x9dC*\xc5\r\x8e\xbb\x1e\xf6:i\xa5r`\xa4ij\x1b\x9a\xfe\x94\x95\xec26!\xe82', 0x2) pwritev(r1, &(0x7f0000000340)=[{&(0x7f0000000140)='!', 0x1}], 0x1, 0x81805) sendfile(r0, r0, 0x0, 0x24000000) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$LOOP_SET_FD(r0, 0x4c00, r1) 16:43:24 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x12]}}]}}]}, 0x8c}}, 0x0) [ 1601.644603][T22632] bridge754: port 1(syz_tun) entered blocking state [ 1601.672309][T22632] bridge754: port 1(syz_tun) entered disabled state 16:43:24 executing program 1: r0 = perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000580)=[{&(0x7f0000000100)=""/64, 0x40}, {0x0}, {0x0}], 0x3, 0x80000000) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) flock(r0, 0x5) ioctl$KVM_RUN(r3, 0xae80, 0x0) [ 1601.731219][T22632] device syz_tun entered promiscuous mode [ 1601.770127][T22637] device syz_tun left promiscuous mode [ 1601.776092][T22637] bridge754: port 1(syz_tun) entered disabled state 16:43:24 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c2, 0x0) 16:43:24 executing program 3: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xb, r0, &(0x7f0000000080)=""/28, 0x1c) 16:43:24 executing program 1: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x14, 0x1e, 0xa01}, 0x14}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 16:43:24 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x13]}}]}}]}, 0x8c}}, 0x0) 16:43:24 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x9}, 0x0) 16:43:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgrcv(r2, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x3, 0x2000) msgrcv(r2, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgctl$IPC_RMID(r2, 0x0) [ 1602.596896][T22677] __nla_validate_parse: 2 callbacks suppressed [ 1602.596916][T22677] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x58]}}]}}]}, 0x8c}}, 0x0) 16:43:25 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c3, 0x0) [ 1602.728374][T22680] bridge755: port 1(syz_tun) entered blocking state [ 1602.742252][T22680] bridge755: port 1(syz_tun) entered disabled state [ 1602.774041][T22680] device syz_tun entered promiscuous mode [ 1602.805435][T22684] device syz_tun left promiscuous mode [ 1602.824327][T22684] bridge755: port 1(syz_tun) entered disabled state 16:43:25 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c4, 0x0) [ 1603.075164][T22680] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = msgget$private(0x0, 0x0) msgsnd(r2, &(0x7f0000000040)={0x3}, 0x8, 0x0) msgsnd(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="95"], 0x1, 0x0) msgrcv(r2, &(0x7f0000000300)={0x0, ""/210}, 0xda, 0x3, 0x2000) msgrcv(r2, &(0x7f0000000080)={0x0, ""/35}, 0x2b, 0x0, 0x0) msgctl$IPC_SET(r2, 0x1, &(0x7f0000000580)={{0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}) msgctl$IPC_RMID(r2, 0x0) 16:43:25 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x60]}}]}}]}, 0x8c}}, 0x0) 16:43:25 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0xa}, 0x0) 16:43:25 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x742000) 16:43:25 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000040)='gretap0\x00') 16:43:26 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c5, 0x0) [ 1603.490052][T22710] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1603.553010][T22717] bridge756: port 1(syz_tun) entered blocking state [ 1603.563648][T22717] bridge756: port 1(syz_tun) entered disabled state [ 1603.577849][T22717] device syz_tun entered promiscuous mode [ 1603.628566][T22710] device syz_tun left promiscuous mode [ 1603.646220][T22710] bridge756: port 1(syz_tun) entered disabled state 16:43:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000), 0x8) 16:43:26 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) sendmsg(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)="24000000190003041dfffd946f6105000a00000a1f0000030067080003001e0004000000280000001100ffffba16a0aaab06af1f0000000012000000000000eff24d8238cfa47e23f7efbf54", 0x4c}], 0x1}, 0x0) [ 1603.870616][T22717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:26 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x9e]}}]}}]}, 0x8c}}, 0x0) 16:43:26 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c6, 0x0) 16:43:26 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0xc}, 0x0) [ 1603.996884][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1604.060363][T22737] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:43:26 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000000), 0x8) 16:43:27 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c7, 0x0) 16:43:27 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r0}, 0x15) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) r2 = socket(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080)='mptcp_pm\x00') sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x851}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r3, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r4 = openat$nvme_fabrics(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nvme-fabrics\x00', 0x200001, 0x0) setsockopt$packet_int(r4, 0x107, 0x13, &(0x7f00000013c0), 0x4) r5 = dup(0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) ioctl$DRM_IOCTL_RES_CTX(r5, 0xc0106426, &(0x7f0000000300)={0x1, &(0x7f00000002c0)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={r6, 0x5, &(0x7f0000000340)=[0x5, 0x8, 0x7, 0x1000, 0x9], &(0x7f0000000380)=[0x2, 0xe771], 0xb6, 0x5, 0x800, &(0x7f0000000480)=[0x5, 0x0, 0x4, 0x4, 0x400], &(0x7f0000000400)=[0x800, 0x17]}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000140)={r6, 0x2, &(0x7f0000000040)=[0x5f, 0x0], &(0x7f0000000080)=[0x9, 0x80000001, 0x8, 0x7f, 0x1], 0x0, 0x3, 0x7a80, &(0x7f00000000c0)=[0x9, 0x6, 0xfffffff7], &(0x7f0000000100)=[0x3, 0x0, 0x0]}) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:27 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c8, 0x0) [ 1604.813555][T22752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:27 executing program 3: r0 = open(&(0x7f0000000140)='./bus\x00', 0x141042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40286608, &(0x7f0000000200)) [ 1604.912442][T22756] bridge757: port 1(syz_tun) entered blocking state [ 1604.934727][T22756] bridge757: port 1(syz_tun) entered disabled state [ 1605.021540][T22756] device syz_tun entered promiscuous mode [ 1605.097181][T22757] device syz_tun left promiscuous mode [ 1605.113440][T22757] bridge757: port 1(syz_tun) entered disabled state 16:43:27 executing program 3: r0 = add_key$keyring(&(0x7f0000000200)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$read(0xf, r0, &(0x7f0000000080)=""/28, 0x1c) 16:43:27 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1c9, 0x0) 16:43:27 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) removexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=ANY=[@ANYBLOB='o]x*macvlan1\x00']) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) get_robust_list(0x0, &(0x7f0000000140)=&(0x7f00000000c0), &(0x7f0000000340)=0x18) write$P9_RGETLOCK(0xffffffffffffffff, 0x0, 0x25) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x3, 0x101002) ioctl$KVM_GET_XCRS(0xffffffffffffffff, 0x8188aea6, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000780)={@in={{0x2, 0x0, @local}}, 0x0, 0x9, 0x6}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200187ec, &(0x7f0000000000)={0x2, 0x4e23, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) recvmsg(r0, &(0x7f0000000240)={0x0, 0xfffffffffffffd83, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0x5801}], 0x1, 0x0, 0xf080}, 0x100) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)={0x0, 'macvlan1\x00', {0x1}, 0x40}) r1 = creat(0x0, 0x0) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[@ANYRES64=r1], 0x1000001bd) [ 1605.300406][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1605.350672][T22777] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1605.452117][T22749] bridge757: port 1(syz_tun) entered blocking state [ 1605.475962][T22749] bridge757: port 1(syz_tun) entered disabled state [ 1605.531254][T22749] device syz_tun entered promiscuous mode [ 1605.575689][T22769] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 16:43:28 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') setresuid(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb), &(0x7f0000cab000)=0xc) setresgid(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x20000000) perf_event_open(&(0x7f0000000000)={0x5, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:28 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xf0]}}]}}]}, 0x8c}}, 0x0) 16:43:28 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x97ffffff, &(0x7f0000000040)=[{&(0x7f00000000c0)="2e00000025000511d25a802a8c63940d0424fc6004000e000a0011000200008037153e370a000c8000000000d1bd", 0x2e}], 0x1}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1f2, 0x0) 16:43:28 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ca, 0x0) 16:43:28 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0xe}, 0x0) 16:43:28 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x300]}}]}}]}, 0x8c}}, 0x0) [ 1605.883053][T22806] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 16:43:28 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cb, 0x0) [ 1606.053698][T22807] device syz_tun left promiscuous mode [ 1606.081066][T22807] bridge757: port 1(syz_tun) entered disabled state [ 1606.165225][T22807] bridge758: port 1(syz_tun) entered blocking state [ 1606.204639][T22807] bridge758: port 1(syz_tun) entered disabled state [ 1606.261726][T22807] device syz_tun entered promiscuous mode [ 1606.305819][T22815] device syz_tun left promiscuous mode [ 1606.320372][T22815] bridge758: port 1(syz_tun) entered disabled state 16:43:28 executing program 3: r0 = open(&(0x7f0000000080)='./bus\x00', 0x400143142, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x1800007, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000000)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6000) io_setup(0x1ff, &(0x7f0000000200)=0x0) r3 = creat(&(0x7f00000001c0)='./bus\x00', 0x0) ftruncate(r3, 0x8200) sendmmsg(0xffffffffffffffff, &(0x7f0000005840)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}], 0x1, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = dup(r4) ioctl$PERF_EVENT_IOC_ENABLE(r5, 0x8912, 0x400200) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x40000}]) 16:43:29 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cc, 0x0) 16:43:29 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0x10, 0x3, 0x0) dup2(r0, r1) [ 1606.814692][T22799] bridge758: port 1(syz_tun) entered blocking state [ 1606.829791][T22799] bridge758: port 1(syz_tun) entered disabled state [ 1606.904636][T22799] device syz_tun entered promiscuous mode 16:43:29 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) [ 1607.036509][T22810] netlink: 'syz-executor.4': attribute type 12 has an invalid length. 16:43:29 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0xf}, 0x0) 16:43:29 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cd, 0x0) 16:43:29 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x500]}}]}}]}, 0x8c}}, 0x0) 16:43:30 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000000080)={0x1, 0x70, 0x8, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0xe320, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext={0xffffffff, 0xf2a3}, 0x410, 0x2, 0x0, 0x2, 0x0, 0x6}, r0, 0x9, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x22780, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) 16:43:30 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) timer_create(0x0, &(0x7f0000000300)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000080)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x9}}, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r1, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) kexec_load(0x0, 0x10, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, 0x3e0000}], 0x0) r2 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) [ 1607.503230][T22880] device syz_tun left promiscuous mode [ 1607.514475][T22880] bridge758: port 1(syz_tun) entered disabled state 16:43:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1ce, 0x0) [ 1607.628871][T22880] bridge759: port 1(syz_tun) entered blocking state [ 1607.670681][T22880] bridge759: port 1(syz_tun) entered disabled state [ 1607.720589][T22880] device syz_tun entered promiscuous mode 16:43:30 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r3}, 0x15) r4 = dup2(r3, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f00000001c0)) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r5 = syz_open_procfs(r2, &(0x7f0000000040)='net/vlan/vlan0\x00') r6 = socket$inet_sctp(0x2, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x1f, &(0x7f0000000080)={r8, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000000140)=0x90) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={r8, 0x40, &(0x7f0000000080)=[@in={0x2, 0x4e21, @loopback}, @in={0x2, 0x4e22, @loopback}, @in={0x2, 0x4e20, @broadcast}, @in={0x2, 0x4e22, @private=0xa010102}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000000140)={r9, 0xff}, &(0x7f0000000180)=0x8) [ 1607.779906][T22885] device syz_tun left promiscuous mode [ 1607.793868][T22885] bridge759: port 1(syz_tun) entered disabled state 16:43:30 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x600]}}]}}]}, 0x8c}}, 0x0) [ 1608.014480][T22880] __nla_validate_parse: 3 callbacks suppressed [ 1608.014504][T22880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:30 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x13, 0x0, &(0x7f0000000280)) 16:43:30 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1cf, 0x0) 16:43:30 executing program 4: sysinfo(&(0x7f0000000040)=""/4096) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x10001}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000001080)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6, 0x0, 0x4}}, 0x20}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000001640)={'vcan0\x00', r6}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000001740)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001700)={&(0x7f0000001680)=@bridge_delvlan={0x6c, 0x71, 0x10, 0x70bd2d, 0x25dfdbff, {0x7, 0x0, 0x0, r8}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x46, 0x2}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x13}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_CMD={0x8, 0x2, 0x11}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x50, 0x2}}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x64) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r9 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r9, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:30 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x10}, 0x0) 16:43:30 executing program 3: r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000040)="9f8194be5ace602f076d079b000c48299667b70536342623b309d82fefa01f9a2d83297f99b4e597f4e9fad324868e83f474d0c35449712f00c51c638e6aea4a8dee825286b31a260e9b4b2bb0b4179b0a4a", 0x52}], 0x1) 16:43:30 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = inotify_init1(0x0) fcntl$setown(r2, 0x8, 0xffffffffffffffff) fcntl$getownex(r2, 0x10, &(0x7f0000000100)={0x0, 0x0}) r4 = getpid() kcmp(r4, r3, 0x2, 0xffffffffffffffff, 0xffffffffffffffff) [ 1608.378206][T22916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. 16:43:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x612]}}]}}]}, 0x8c}}, 0x0) [ 1608.483650][T22918] bridge6: port 1(syz_tun) entered blocking state [ 1608.508737][T22918] bridge6: port 1(syz_tun) entered disabled state 16:43:31 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d0, 0x0) [ 1608.584832][T22918] device syz_tun entered promiscuous mode [ 1608.626949][T22924] device syz_tun left promiscuous mode [ 1608.627337][T22924] bridge6: port 1(syz_tun) entered disabled state 16:43:31 executing program 3: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r0, 0x40086602, 0x400007) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x400c00) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r2, 0x6628, 0x0) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) [ 1608.774959][T22934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:31 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket(0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, 0x0) setresuid(0x0, r3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:31 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x900]}}]}}]}, 0x8c}}, 0x0) [ 1608.985223][T22937] bridge760: port 1(syz_tun) entered blocking state [ 1609.014838][T22937] bridge760: port 1(syz_tun) entered disabled state [ 1609.046526][T22937] device syz_tun entered promiscuous mode 16:43:31 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d1, 0x0) 16:43:31 executing program 3: unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) [ 1609.092424][T22931] device syz_tun left promiscuous mode [ 1609.121167][T22931] bridge760: port 1(syz_tun) entered disabled state [ 1609.303729][T22961] IPVS: ftp: loaded support on port[0] = 21 16:43:32 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x2) 16:43:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001340)) ioctl$PPPIOCSMRRU(r0, 0x4004743b, &(0x7f0000000080)=0x8) socket$nl_rdma(0x10, 0x3, 0x14) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) r2 = gettid() ptrace$setopts(0x4206, r2, 0x0, 0x0) tkill(r2, 0x40) ptrace$setregs(0xd, r2, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r2, 0x0, 0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r3, 0x80845663, &(0x7f0000001340)) ioctl$TCSETS2(r3, 0x402c542b, &(0x7f0000000040)={0xb66, 0x3, 0x7, 0x4, 0x40, "e9c2d15246c27c0e6bfc2e4f8b172d8c68e8f7", 0x0, 0x283c}) [ 1609.997370][T22972] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1610.076777][T22937] bridge760: port 1(syz_tun) entered blocking state [ 1610.105702][T22964] IPVS: ftp: loaded support on port[0] = 21 [ 1610.121174][T22937] bridge760: port 1(syz_tun) entered disabled state 16:43:32 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x3c}, 0x0) 16:43:32 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r0 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ocfs2_control\x00', 0x80001, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000080)=0x9) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) preadv(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)=""/247, 0xf7}, {&(0x7f00000001c0)=""/29, 0x1d}, {&(0x7f0000000280)=""/207, 0xcf}], 0x3, 0x0) r3 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="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", 0xfffff252, r3}, 0x15) ioctl$SOUND_MIXER_WRITE_RECSRC(r3, 0xc0044dff, &(0x7f0000000380)=0x2) 16:43:32 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3) 16:43:32 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xa00]}}]}}]}, 0x8c}}, 0x0) 16:43:32 executing program 1: socket$inet6_tcp(0xa, 0x1, 0x0) clone(0x3000000a0160101, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setresuid(0x0, r1, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x3}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) pipe(&(0x7f0000000140)={0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f0000000640)="8a", 0x1}], 0x1, 0x0) pipe(&(0x7f0000000040)) 16:43:33 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:33 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4) 16:43:33 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001340)) ioctl$SOUND_MIXER_READ_RECSRC(r0, 0x80044dff, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1610.803454][T23016] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:33 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x5) [ 1610.936688][T23018] bridge761: port 1(syz_tun) entered blocking state [ 1610.963750][T23018] bridge761: port 1(syz_tun) entered disabled state [ 1611.013216][T23018] device syz_tun entered promiscuous mode [ 1611.047186][T23020] device syz_tun left promiscuous mode [ 1611.062118][T23020] bridge761: port 1(syz_tun) entered disabled state [ 1611.397216][T23018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1611.496481][T23016] bridge761: port 1(syz_tun) entered blocking state [ 1611.511592][T23016] bridge761: port 1(syz_tun) entered disabled state [ 1611.566151][T23016] device syz_tun entered promiscuous mode [ 1611.858851][T18784] tipc: TX() has been purged, node left! 16:43:35 executing program 3: unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) 16:43:35 executing program 1: r0 = socket$unix(0x1, 0x5, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket(0x200000100000011, 0x3, 0x0) getsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000), &(0x7f0000000040)=0x4) 16:43:35 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6) 16:43:35 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xb00]}}]}}]}, 0x8c}}, 0x0) 16:43:35 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.origin\x00', &(0x7f00000000c0)='y\x00', 0x2, 0x3) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) accept$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0xc) fsetxattr$security_capability(r2, &(0x7f0000000000)='security.capability\x00', &(0x7f0000000080)=@v3={0x3000000, [], r4}, 0x18, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8005084}, 0xc, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="94010000180001002cad7000fcdbdf251d010200080005000501020608000900", @ANYRES32=r1, @ANYBLOB="150003000000000004000000eb6bf5633e98d3b40400000015000300010000c000020000abe4c3fafe8fc0730500000008000e00", @ANYRES32=r4, @ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40000}, 0x8840) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000400)='/dev/dlm-control\x00', 0x2022, 0x0) r6 = syz_genetlink_get_family_id$gtp(&(0x7f0000000480)='gtp\x00') sendmsg$GTP_CMD_DELPDP(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x14, r6, 0x2, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0xc0001}, 0x20044004) r7 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r7, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:35 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x48}, 0x0) [ 1613.233846][T23074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:35 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7) 16:43:35 executing program 1: unshare(0x6c060000) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000100)={'lo\x00', {0x2, 0x0, @local}}) [ 1613.375111][T23081] device syz_tun left promiscuous mode [ 1613.400093][T23081] bridge761: port 1(syz_tun) entered disabled state [ 1613.469353][T23083] IPVS: ftp: loaded support on port[0] = 21 [ 1613.505938][T23081] bridge762: port 1(syz_tun) entered blocking state [ 1613.531706][T23081] bridge762: port 1(syz_tun) entered disabled state 16:43:36 executing program 4: perf_event_open(&(0x7f0000001340)={0x3, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bf, 0x144, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, @perf_bp={0x0, 0x8}, 0x8000, 0x0, 0x0, 0x0, 0x4000000}, 0x0, 0x1, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) [ 1613.590734][T23081] device syz_tun entered promiscuous mode [ 1613.655729][T23086] device syz_tun left promiscuous mode [ 1613.663949][T23086] bridge762: port 1(syz_tun) entered disabled state [ 1613.679016][T23093] IPVS: ftp: loaded support on port[0] = 21 16:43:36 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xc00]}}]}}]}, 0x8c}}, 0x0) 16:43:36 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x10) 16:43:36 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x20000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0x98d, 0x3e00000}, 0x2000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$unix(0x1, 0x0, 0x0) fcntl$dupfd(r0, 0x0, r0) flock(r0, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1614.386229][T23105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1614.444782][T23074] bridge762: port 1(syz_tun) entered blocking state [ 1614.461575][T23074] bridge762: port 1(syz_tun) entered disabled state [ 1614.480738][T23074] device syz_tun entered promiscuous mode [ 1615.368371][T18784] tipc: TX() has been purged, node left! 16:43:38 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') fcntl$setflags(r2, 0x2, 0x0) 16:43:38 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x48) 16:43:38 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:38 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x4c}, 0x0) 16:43:38 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xe00]}}]}}]}, 0x8c}}, 0x0) 16:43:38 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe(&(0x7f0000000100)) ioctl$KVM_GET_CLOCK(r1, 0x4068aea3, &(0x7f0000000100)) [ 1616.451841][T23170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:39 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000100)) 16:43:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') socket$bt_bnep(0x1f, 0x3, 0x4) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = gettid() ptrace$setopts(0x4206, r1, 0x0, 0x0) tkill(r1, 0x40) ptrace$setregs(0xd, r1, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r1, 0x0, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x4002, 0x0) perf_event_open(&(0x7f0000000040)={0x4, 0x70, 0x2f, 0x80, 0x5, 0x7c, 0x0, 0x26b, 0x8100, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9f, 0x1, @perf_config_ext={0xffffffff, 0x5}, 0x40, 0x2, 0x400, 0x4, 0x55f, 0x409963b3, 0x5}, r1, 0x8, r2, 0x0) ioctl$SNDRV_PCM_IOCTL_READN_FRAMES(r0, 0x80184153, &(0x7f0000000180)={0x0, &(0x7f0000000140)=[&(0x7f0000000100)="32baba041b57a3"]}) [ 1616.591189][T23185] device syz_tun left promiscuous mode [ 1616.598045][T23185] bridge762: port 1(syz_tun) entered disabled state 16:43:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xf00]}}]}}]}, 0x8c}}, 0x0) 16:43:39 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c) [ 1616.706731][T23185] bridge763: port 1(syz_tun) entered blocking state [ 1616.759480][T23185] bridge763: port 1(syz_tun) entered disabled state 16:43:39 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = dup(r1) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0xa) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000240)={@ipv4={[], [], @multicast2}, @ipv4={[0x0, 0x0, 0x8], [], @multicast1}, @initdev={0xfe, 0x88, [0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x7], 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24c20082, r3}) [ 1616.801880][T23185] device syz_tun entered promiscuous mode [ 1616.885586][T23188] device syz_tun left promiscuous mode [ 1616.898083][T23188] bridge763: port 1(syz_tun) entered disabled state 16:43:39 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$VT_RELDISP(r2, 0x5605) [ 1617.136387][T23188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:39 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x2, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040)='NLBL_UNLBL\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:39 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x68) 16:43:39 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x1100]}}]}}]}, 0x8c}}, 0x0) [ 1617.278552][T23170] bridge763: port 1(syz_tun) entered blocking state [ 1617.286177][T23170] bridge763: port 1(syz_tun) entered disabled state [ 1617.367127][T23170] device syz_tun entered promiscuous mode 16:43:40 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pidfd_open(0xffffffffffffffff, 0x0) 16:43:40 executing program 3: r0 = socket$inet6(0xa, 0x80003, 0x6b) sendmsg$sock(r0, &(0x7f0000000100)={&(0x7f0000000000)=@generic={0x2a, "7ed2e8756ec8859cc5d4dbbec9b011681a44f94578ae3123da7f639c397cf42d8b9eae2616bb1f07e561da4d8bbff5686902ba159edf33ef4f163f67040e2ac9456a23293e94d36d2f701e14f11053210c77644c0847c3d494f54b2917ec94b53614d479e54ec362e5e1f97146e932b6ef158f109d923a87633aa4be1176"}, 0x80, 0x0}, 0x0) 16:43:40 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x60}, 0x0) 16:43:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x3, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x2, @perf_config_ext={0x9, 0x2}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x400) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x0, 0x0) close(r1) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f00000005c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x111}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000040)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000000), r3, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r0, &(0x7f0000000080)={0x8, 0x120, 0xfa00, {0x4, {0xf69, 0x1, "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", 0xbd, 0x1, 0x90, 0x3, 0xff, 0x7f, 0x5}, r3}}, 0x128) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r4, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:40 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x1200]}}]}}]}, 0x8c}}, 0x0) 16:43:40 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c) 16:43:40 executing program 1: r0 = perf_event_open(&(0x7f00000000c0)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41bd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000004c0)=ANY=[@ANYBLOB="41f834e418c94a634db5b1ec2f95da9b2f858ee0d29ec9f9557e91e6672496a7cf3087a28a13a4b174a33f656e98b3589c50a4a37e59473088c648b24eaf594a08078c503afe01760c9505b95025c9001041ec9e092dfc0f67cbba1e985fde96dbd93aa089b182d2d24d97b1f562703d9e7dcd25127e4b993ed77337daffbcfc0a14b04e37bf2448b617cb03fc3e3afeddf40614213aacd1b4c41110372cc0751b92023a0e", @ANYRES16], 0x2) r1 = socket(0x11, 0x800000003, 0x8) bind(r1, &(0x7f0000000380)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180)='nl80211\x00') sendmsg$NL80211_CMD_START_SCHED_SCAN(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB='\x00'/14], 0x14}, 0x1, 0x0, 0x0, 0x4000804}, 0x4000000) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f0000000040)=0x76, 0x4) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0xeb}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r2, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba7860ac5cf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfed4, 0x20c49a, 0x0, 0x27) fchmod(0xffffffffffffffff, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) fchmod(r0, 0x14) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = fcntl$dupfd(r4, 0x0, r5) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000000980)=ANY=[@ANYBLOB="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"], 0x1) 16:43:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_XSAVE(r2, 0x9000aea4, &(0x7f00000005c0)) [ 1617.971885][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:40 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x73, 0x0, 0x0, 0x0, 0x80, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext={0x5, 0x6e83adf8}, 0x1004, 0x0, 0x180000, 0x8, 0x7, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) write$6lowpan_control(r0, &(0x7f0000000040)='disconnect aa:aa:aa:aa:aa:11 1', 0x1e) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:40 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x74) [ 1618.322114][T23251] device syz_tun left promiscuous mode [ 1618.334865][T23251] bridge763: port 1(syz_tun) entered disabled state [ 1618.402148][T23267] xt_CT: netfilter: NOTRACK target is deprecated, use CT instead or upgrade iptables 16:43:41 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x1206]}}]}}]}, 0x8c}}, 0x0) 16:43:41 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) write$binfmt_elf64(r0, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c4602200000000000000000060003003e000039a594249c98a62feb9cf20000000000000000703f000000000000bd5d74dafc20380003"], 0x3c) execveat(r0, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) [ 1618.583663][T23251] bridge764: port 1(syz_tun) entered blocking state [ 1618.648662][T23251] bridge764: port 1(syz_tun) entered disabled state 16:43:41 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0, 0xe}, 0x800, 0x0, 0x2}, r0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1618.756946][T23251] device syz_tun entered promiscuous mode [ 1618.844480][T23287] ERROR: Domain ' /sbin/init /usr/sbin/sshd /usr/sbin/sshd /bin/bash /root/syz-fuzzer /root/syz-executor.3 proc:/self/fd/3' not defined. [ 1618.880258][T23256] device syz_tun left promiscuous mode [ 1618.923516][T23256] bridge764: port 1(syz_tun) entered disabled state 16:43:41 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a) [ 1619.181198][T23286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1619.363434][T23282] bridge764: port 1(syz_tun) entered blocking state [ 1619.379081][T23282] bridge764: port 1(syz_tun) entered disabled state [ 1619.479451][T23282] device syz_tun entered promiscuous mode 16:43:42 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x68}, 0x0) 16:43:42 executing program 3: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000016000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) flock(r0, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f00000001c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000800, 0x20000000fb], 0x100000, 0x200400}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 16:43:42 executing program 4: r0 = gettid() ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x40) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x7, r0, 0x0, 0x0) perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffffff}, r0, 0x200, 0xffffffffffffffff, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:42 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x300) [ 1620.010588][T23316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1620.164631][T23320] device syz_tun left promiscuous mode [ 1620.171959][T23320] bridge764: port 1(syz_tun) entered disabled state [ 1620.307376][T23320] bridge765: port 1(syz_tun) entered blocking state [ 1620.334728][T23320] bridge765: port 1(syz_tun) entered disabled state [ 1620.383384][T23320] device syz_tun entered promiscuous mode [ 1620.452473][T23323] device syz_tun left promiscuous mode [ 1620.514085][T23323] bridge765: port 1(syz_tun) entered disabled state [ 1620.806760][T23329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5f) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x1300]}}]}}]}, 0x8c}}, 0x0) 16:43:44 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x500) 16:43:44 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x168, 0x168, 0x0, 0x168, 0x0, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, 0x0, {[{{@uncond=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6], 0x0, 0x128, 0x168, 0x0, {}, [@common=@inet=@ecn={{0x28, 'ecn\x00'}}, @common=@inet=@hashlimit1={{0x58, 'hashlimit\x00'}, {'rose0\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0x5, 0x1000}}}]}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "48c01c5140d722edd3fb24545886bbd1be494201b400"}}}, {{@ipv6={@local, @ipv4={[], [], @loopback}, [], [], 'netdevsim0\x00', 'ip6_vti0\x00'}, 0x0, 0xa8, 0xe8}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x0, 0x0, "45e9a767c4c3b3fc1b7ecd8b97815668abbdcdbca268c1aa0729232feb1e"}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x8000, 0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') preadv(r5, &(0x7f00000017c0), 0x3da, 0x0) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') socket(0x11, 0x800000003, 0x0) setsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f00000000c0)={0x0, @rand_addr=0x64010101, @loopback}, 0xc) r6 = dup(r3) ioctl$TIOCMBIC(0xffffffffffffffff, 0x5417, &(0x7f0000000040)=0x8) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) r7 = syz_open_dev$loop(&(0x7f0000000100)='/dev/loop#\x00', 0x100000000, 0xc083) ioctl$FIBMAP(r7, 0x1, &(0x7f0000000140)=0xfffffff7) prctl$PR_SET_NO_NEW_PRIVS(0x35, 0x1) 16:43:44 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x6c}, 0x0) 16:43:44 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070ed0b864256b1ceba6000000", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="38000000240007e7ffff0777e0d7d774fd40ac00", @ANYRES32=r4, @ANYBLOB="00000000ffffffff01000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB='H\x00\x00\x00,\x00\'\r\x00'/20, @ANYRES32=r4, @ANYBLOB="0000000000000000080000000a000100727376703600000018000200140002"], 0x48}}, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) socket$nl_generic(0x10, 0x3, 0x10) [ 1621.738067][T23342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x100000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r1}, 0x15) sendmsg$AUDIT_MAKE_EQUIV(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, 0x3f7, 0x800, 0x70bd2d, 0x25dfdbfe, {0x7, 0x7, './file0', './file0'}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4000044}, 0x20000000) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000040), 0x4) preadv(r0, &(0x7f0000000040), 0x0, 0xfffffffffffffffe) 16:43:44 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x600) 16:43:44 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x3f00]}}]}}]}, 0x8c}}, 0x0) [ 1621.877856][T23350] bridge766: port 1(syz_tun) entered blocking state [ 1621.908057][T23350] bridge766: port 1(syz_tun) entered disabled state [ 1621.991307][T23350] device syz_tun entered promiscuous mode 16:43:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x1, @private1, 0x2}, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e23, 0x40, @private2={0xfc, 0x2, [], 0x1}, 0x23b}, @in6={0xa, 0x4e21, 0x1, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x5}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e24, 0x0, @empty, 0x3}], 0x90) [ 1622.054951][T23353] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1622.129015][T23355] device syz_tun left promiscuous mode [ 1622.136522][T23355] bridge766: port 1(syz_tun) entered disabled state 16:43:44 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x700) 16:43:44 executing program 3: r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) name_to_handle_at(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800) [ 1622.327606][T23364] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. 16:43:44 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = timerfd_create(0x3, 0x800) ioctl$vim2m_VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000001c0)={0x101, 0x0, 0x3, {0x2, @vbi={0xb, 0x1, 0x6, 0x59565955, [0x0, 0x8], [0x81, 0x9], 0x13a}}, 0x5}) ioctl$EXT4_IOC_GROUP_EXTEND(r0, 0x40086607, &(0x7f0000000180)=0x100000000) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') statfs(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/218) r2 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r2, 0xc0045005, 0x0) write$UHID_INPUT2(r2, &(0x7f0000001640)=ANY=[@ANYBLOB="0c000000eb003148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25707e2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"], 0xf1) r3 = fcntl$dupfd(r0, 0x0, r2) getsockopt$inet_sctp6_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f00000002c0), &(0x7f0000000300)=0x4) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1622.373084][T23350] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:44 executing program 1: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) dup3(r3, r1, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000240)={[], 0x0, 0x7b601}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = dup(r5) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000700)={0x0, 0x0, @ioapic={0x16001, 0x0, 0xffffffff}}) ioctl$KVM_RUN(r4, 0xae80, 0x0) 16:43:45 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x4000]}}]}}]}, 0x8c}}, 0x0) 16:43:45 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3f00) [ 1622.531834][T23342] bridge766: port 1(syz_tun) entered blocking state [ 1622.554707][T23342] bridge766: port 1(syz_tun) entered disabled state [ 1622.600772][T23342] device syz_tun entered promiscuous mode 16:43:45 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x74}, 0x0) 16:43:45 executing program 4: r0 = perf_event_open(&(0x7f0000001340)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x13000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xff, 0x6}, 0x0, 0x0, 0x3, 0x0, 0xe9fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$FIONCLEX(r0, 0x5450) ioctl$vim2m_VIDIOC_STREAMON(0xffffffffffffffff, 0x40045612, &(0x7f0000000040)=0x2) 16:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = add_key$keyring(&(0x7f00000002c0)='keyring\x00', &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$revoke(0xb, r0) 16:43:45 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x5800]}}]}}]}, 0x8c}}, 0x0) [ 1622.808416][T23398] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. 16:43:45 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4800) 16:43:45 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x6a8}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) memfd_create(&(0x7f0000000640)='\x00\x00\x00\x7f\xc9\xe9\x0e\xff\x8b\xe8\xd0\xb8\x80\xc7\xf5\xe2Z\x03\x00\x00\x00z\x9b\xb0\xe8t%\xfc\vw\x82\xdb\xf1^\xe8\xf8\xc1-9Q\x00\x04\x00\x00\x8b[\xaa\x91\xef\x7f@\xd2z\xb3T\x9e\xefn7%E\x00(\x1e\xd1P\x0f\x9f\xca\xff\xcf\xc9c\x97\xb3\x81\xa04\x03\x1b\xf5\xce\xfa\xdc\xf6\xf2\'\x83\x82\"#K\x02eU\xae\xd4P\xc0iH\xf2g\xc9}\xf4I\xb0}\x9er#y\x0e\xcb\xa3\x80\xb5q\x1c\xef0\xbd\x87\xe8\x8e\x88\xe6^\xdc\f\x1e\xd0\x97\xce\xdc\x13\xce\x8a\xb3\b\xee\xd8I\xbck\xec\x80\xfa\xce\x86\x85\"\x1d\xa2\xc2\x1d\xf0\xc3\x9cm\xcf\x8a\x00\x00\x00\xe31\xe6\xc3\xa5\xb1\x1c\r8%\x06\xc3c\xe0\x7f\x88W\x18u\xdcbl\xe5(\x97c\x1a\xfd\xe0\xfa\xc0\x97\xc8\x95\x82u\x82e\xf3\xe7e\xf59\xf9S2\xd1\x98\x81\x8f\xbfwr\x97\xee\a\x8a \x1c%o\xed\x9e\x11\xd1', 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) dup2(r0, r0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000000e00)=ANY=[@ANYBLOB="7f454c4602200000000000000000060003003e000039a594249c98a62feb9cf20000000000000000703f000000000000bd5d74dafc20380003"], 0x3c) execveat(0xffffffffffffffff, &(0x7f0000000040)='\x00', 0x0, 0x0, 0x1000) r1 = dup(0xffffffffffffffff) write$P9_RGETATTR(r1, &(0x7f0000000400)={0xa0, 0x19, 0x1, {0x0, {}, 0xc}}, 0xf4) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='vegas\x00', 0x6) socket(0x10, 0x803, 0x0) r2 = shmget$private(0x0, 0x400000, 0x0, &(0x7f000000e000/0x400000)=nil) shmat(r2, &(0x7f0000000000/0x13000)=nil, 0x4000) shmctl$SHM_LOCK(r2, 0xb) 16:43:45 executing program 1: add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffc) [ 1623.071835][T23423] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:45 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') bind$l2tp6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x100, @loopback, 0x80000000, 0x3}, 0x20) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) [ 1623.265162][T23430] device syz_tun left promiscuous mode [ 1623.288059][T23430] bridge766: port 1(syz_tun) entered disabled state 16:43:45 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c00) 16:43:45 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0xfffffffffffffe98) [ 1623.362389][T23430] bridge767: port 1(syz_tun) entered blocking state 16:43:46 executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000100)={0x0, 0x8000}, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) fcntl$setpipe(r1, 0x407, 0x0) write$binfmt_misc(r1, &(0x7f0000000140)=ANY=[], 0x4240a2a0) bind$inet(r3, &(0x7f0000000180)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x33}}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) splice(r0, 0x0, r3, 0x0, 0x30009, 0x0) [ 1623.450059][T23430] bridge767: port 1(syz_tun) entered disabled state [ 1623.529477][T23430] device syz_tun entered promiscuous mode 16:43:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/binder/transaction_log\x00', 0x0, 0x0) accept4$vsock_stream(r0, &(0x7f0000000080)={0x28, 0x0, 0xffffffff, @host}, 0x10, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1623.577008][T23432] device syz_tun left promiscuous mode [ 1623.588773][T23432] bridge767: port 1(syz_tun) entered disabled state [ 1623.798654][T23430] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:46 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x7a}, 0x0) 16:43:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6800) 16:43:46 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_open_procfs(0x0, &(0x7f0000000200)='net/ipv6_route\x00') r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) io_setup(0xfffffffe, &(0x7f00000000c0)) 16:43:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x5865]}}]}}]}, 0x8c}}, 0x0) 16:43:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = socket$unix(0x1, 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) write$P9_RMKDIR(r2, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) write$FUSE_LSEEK(r2, &(0x7f0000000080)={0x18, 0x0, 0x8, {0x8}}, 0x18) 16:43:46 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000029000/0x18000)=nil, &(0x7f0000000240)=[@text32={0x20, &(0x7f00000000c0)="b9800000c00f3235010000000f309a090000006500660f3882af724d00002ed8ddc74424008fc4bd87c7442402c43a727fc7442406000000000f011424f30f090f013a360f06c4c18d72d68366baa100ed", 0x51}], 0x1, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000bf7000)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000004c0)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xc5e]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x44}}, 0x0) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x5, 0xfd6c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 16:43:46 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x6000]}}]}}]}, 0x8c}}, 0x0) [ 1624.202942][T23477] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:46 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6c00) 16:43:46 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r1, 0xc0045005, 0x0) write$UHID_INPUT2(r1, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xf1) write$qrtrtun(r1, &(0x7f0000000040)="11202c090cbd858e3a2e026c35c3a33bbceff4ad3f21f483225efe56030c234e3314715e74ea9aa2c732bccebe8794a43adb65bcec92f2d8ee450df4cfad0020eddcf019cef0ada0a10f94bb50e1684ce4d24ab77e8fa323141c57bdc78268158cade7c1817f8ea3e73451c3ba710f68e0ec575c5542b631", 0x78) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) mmap$qrtrtun(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x7, 0x10010, r0, 0x100000000) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r2, &(0x7f00000017c0), 0x1d2, 0x0) [ 1624.291801][T23482] bridge768: port 1(syz_tun) entered blocking state [ 1624.310368][T23482] bridge768: port 1(syz_tun) entered disabled state [ 1624.390174][T23482] device syz_tun entered promiscuous mode [ 1624.497784][T23477] device syz_tun left promiscuous mode [ 1624.511454][T23477] bridge768: port 1(syz_tun) entered disabled state 16:43:47 executing program 3: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x7f, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sysfs$1(0x1, &(0x7f0000000000)='\'\x00') 16:43:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7400) [ 1624.749777][T23482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:47 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000001340)) perf_event_open(&(0x7f0000000100)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_bp={0x0}, 0x2000, 0xe44b3b8, 0x0, 0x9}, 0x0, 0x0, r0, 0x3) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') socket$can_bcm(0x1d, 0x2, 0x2) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000040)) 16:43:47 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0xf0}, 0x0) 16:43:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x6558]}}]}}]}, 0x8c}}, 0x0) 16:43:47 executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = fcntl$dupfd(r1, 0x0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) set_robust_list(&(0x7f0000000440), 0x18) 16:43:47 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7a00) 16:43:47 executing program 1: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_mtu(r2, 0x29, 0x17, 0x0, &(0x7f0000000280)) 16:43:47 executing program 3: r0 = socket$nl_rdma(0x10, 0x3, 0x14) write$binfmt_script(r0, &(0x7f0000000140)={'#! ', './file0', [], 0xa, "a2b72adab7"}, 0x10) 16:43:47 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x8100]}}]}}]}, 0x8c}}, 0x0) [ 1625.265750][T23526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1625.389063][T23534] bridge769: port 1(syz_tun) entered blocking state [ 1625.401566][T23534] bridge769: port 1(syz_tun) entered disabled state 16:43:48 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = add_key$keyring(&(0x7f0000000500)='keyring\x00', &(0x7f00000019c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$KEYCTL_PKEY_DECRYPT(0x1a, &(0x7f0000000100)={r2}, &(0x7f0000000140)={'enc=', 'raw', ' hash=', {'cbcmac(des3_ede-asm)\x00'}}, 0x0, 0x0) 16:43:48 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x100000) [ 1625.440537][T23534] device syz_tun entered promiscuous mode [ 1625.506262][T23526] device syz_tun left promiscuous mode [ 1625.516240][T23526] bridge769: port 1(syz_tun) entered disabled state 16:43:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000040)={0x8, {{0x2, 0x4e21, @private=0xa010101}}, 0x1, 0x2, [{{0x2, 0x4e23, @multicast2}}, {{0x2, 0x4e21, @multicast1}}]}, 0x190) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) [ 1625.806907][T23534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) 16:43:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$NL80211_CMD_SET_KEY(0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000280)={0x79}) [ 1626.001547][T23526] bridge769: port 1(syz_tun) entered blocking state [ 1626.023787][T23526] bridge769: port 1(syz_tun) entered disabled state [ 1626.082097][T23526] device syz_tun entered promiscuous mode 16:43:48 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x23d}, 0x0) 16:43:48 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x9e00]}}]}}]}, 0x8c}}, 0x0) 16:43:48 executing program 3: socket$nl_generic(0x10, 0x3, 0x10) clone(0x100, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000002, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000000c0)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000000)="665f07000005eb301420387397d39d7f984462bc33760036f300000000007d86fff0478ac0c6b12328802605b7ea", 0x2e}], 0x4, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000080)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}}}, 0x78) tkill(r0, 0x3c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x20, r0, 0x0, 0x0) 16:43:48 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0xf0ff7f) 16:43:48 executing program 1: clone(0x20002004ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) exit_group(0x0) perf_event_open(&(0x7f0000000000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioprio_get$pid(0x3, 0x0) 16:43:48 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x11450, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], 0xf1) recvmmsg(r0, &(0x7f0000000040), 0xfffffffffffffd36, 0x40002120, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') write$P9_RCLUNK(r1, &(0x7f0000000040)={0x7, 0x79, 0x1}, 0x7) preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) [ 1626.512112][T23592] ptrace attach of "/root/syz-executor.3"[23590] was attempted by "/root/syz-executor.3"[23592] 16:43:49 executing program 3: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) keyctl$setperm(0xf, 0x0, 0x0) 16:43:49 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xf000]}}]}}]}, 0x8c}}, 0x0) 16:43:49 executing program 1: perf_event_open(&(0x7f0000000040)={0x6, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 1626.611551][T23593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:49 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x1000000) 16:43:49 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="d7a2310aab8c83bf6ee1f7acca2f56c0e1f10fa44b266a2600dae222494ed307cb0efac1e96c48f13ee0e714b0aaa430b01079718d47bdd0c0f48005d9e1801de565185559c849cca4bb398a72c18830bf0f6fdbb5f507fdc5b4f805a531c7be1aec6f0d29f0b4e76233b1a4e787aa2c9b3356b1927e5e9fc8c41ddda315878ca48ab96e7ad127e82ba90dac7cd6b47acc2e8e86777b0568c8f742f48df048bd76042acdf0a02ab82ae9837146f613daed0026f40aa143b4c06c86b826ba3b36c7534b97b2722a806c982cdcff140c3ca2ad1e507747d39413a158be049b5f58151c58e5672747edec764785efcde75cc36547c63d14d39d92792d3bf23793645b965b7bb7710586bafd8cf9cfd20a3b48393df0295872853c4520d62624cfc9c605ecef9af13a82eee4f93a18107fd5c457b5ba1e60d7c602443a6727556863d088916ee22a96db052e47bf6b411e5aa8bdeb36e71b509c2f809f093f122162f08abc01c1bbd5f2bad3456190aedfcda926fa35b6e1551d0977e67d28b40cd32b77d0726ea0ed707132c1f3ce83d0f2dbe2a65e960ef3c3dda4d967b298c3cdabb9caef650e7054930ee9d7fa65e91ef432e24a166b59ddb9ae26a2b715d0d8bc6c73bb2cdc62ada5b59f692e4986fef3ff34edf23bbcaf5ef7fa7b800b2cecb8ce8ac8f83b7de9b81fd7cdfcd2f15e1d62e29c23205cc4c87be19314d0b1cc31337e33c23ec8a2cea2f9a475a8858aa9e6c94f6ac9f47ce45b3487ac7dda1fb7ab56eadb54839f02fa75ee2b2cbadd70e72b8ab6346b48fe6db953a178d3e15d3440d9552d9bd2b5f1dfca590a02522fc5097c856411355268f3b0fc703df5fcdac897c26bdabf7d262c693896d30253002e08282ce2d6cd9cf58faf64b5abdca4e7e4a1fed394fef08c9627cce5bce3a5e95eb92c71ad64f1389bd44fa0b657f338ff27e0db977e162e4b293ac982dc1b957fe56d0b36098c148e09c223030b633f0b3bca53bb116b520d2a61416c0c121d053a8b7b2b72c293427eb6d52b89ad6daebe1a24e8586ba477523486f81b46540244fea346e0fa1364bd44906863472fd23d4ed986ae4cec278928ab9fcd572889d506f2890f555a205eb0df4cddf47d7cc2954a60151137349cb9ba7cccd6fcce32afe997415ab87a898a85d0fac8cc92b2fd2157bf46f3a82089d59747a4fa7ded29ca2d4be32dd102ec6f5de98a40c1ed8aeacb32df62c28306ab862e39caf1ef34f017049dfc538e085f99083fefc9f962aed0bac7d70e9f2f397a02915e064479c5d5d83858b3eb8f30b5447513cc884f0776dcacb1a4ddf2a949734329201a777c0a171e1f6e5e4a9db90c991d573bbb60c6094feea43de890cd290599f5ed91e85c33f7e97ac136356ce4dd858ca627fbed5e33b562c54ea8b00e2f0b04bdb1dd028c31d3560f150131b1e536ba10b4533754cad20ec9a662849b4692463e962b9334d4efa43d5a00670b4013546637b3973faebe896ae5aed24c12e270b87f44a9580f8db83fc8a5724a579ff50ab099a1b61828b54c7be9a332dd65f0b30ec2ead3a0d90879d15606cac6d8bdbcb6cb99cf4587a27a87761844b2daaa8ae107cf2767670e405d2563328524a64573d4f3127a8b288048e5cf8133caa5fd64abad3d731a7886731197ae436bb333df4b7ac7b803b1bdede25f7a4ef199309a855adecf5dae151be8a5233bdaec8bf537f93044875804314cf0b93ba145831d912d62ffde9e09f3946c7111e93af4c025e64dbf8e1046a6f21912cd3b3eb817d460df97cf8ab16604ffa4472f33e598495c18bb7dfc91d898de4d46641b281ceb5cc46858dbd0edaa6de8da51cd1091523dfe87e119067ec60d7a29464de0e163255ad2f03c3f3f10387fb9c1a18add689d14fc86dfecc5c1c1b99f59e3f4aef6799cca7de5f9dce44deb62b0a23e8c957037c0c862302471235df24fadc3ae3fdaee2a65e65359d4540dc22f9c3fd5421ce05e9b04c8fad9f2392f5456562e0a164dcaf415b30518e0984dc57da31fbc6af4311c3b025b0b583ba8c158dcfd0c975ef489059e2c4bcbeaba10df231b65b73a4092e0b5c0a116dfee2dca217c0c3b962d98166064ca5530a9049ba831ee4bf5390d7ece436d96fecf172eb4b996fe1ea5727aa0775c378e2599c48ec08db00c913bac7d5bb07842ce6749ab61a2617a3829db472e92a4776a9d9fd689e2f4acb20d96c460bad47381d03e5ef8ed8534e701a34f3bebaaeaffb5ec74dbcec1591034b68be8f01f678bbe7e5368dff5cfe85296f4eef772a6ef5a6a9847e54b446ed8468c5c617f937da8ee396a1fca44266405bc318b7d637047b5e576467e89acb3cfcb022c2066ef32e71c847e9a2c6d17dbcc6e6d244ad8245e06efcfc12e768041909ca84bbdfd3e788c65098f0bcd39950d5861d61f14667d0fa897dcdce697048d15458f7ec4659bc02bea8c1ea14fd23ddb24d39b0395723df66f1eb62255185e46344c88fb4e02ff53df2cbf10b294f2dfda1bda69824a0dff345db62157306882d6d68680beca5e131b6c806a3f51c86501d3b41dbbf23ee25bd3a502912e0c941f4cdf19af20bd68b745f48b50178958cd2be55cbcc5ff84df3b45c2f8484a4254fd78253e6e03483bae58289be61d90e8956696bea3179cc4f8b04ce5e36f8dcd45b90b0b838783a4a9b49d4aa93436c94959e54ab97f8ba71d51253f6a83833e05a6aabd2797489ca1517ae9f30fdc3aabda2790bcc584229296b34d03a18d2f26c3a4bc180cfd696c8cac5b791e74ea93ae6da07c0521d5404fd33069b97e7bbfc86ec2292c4e83850642cdea5e62695251ae61a4700347cbebbaa518cd16ce5e02ef5aeba1480cbde9aa37081d7726cc994e78f121bcbed35ddc4bb4effd3816c49bc25f481a9693524027f55db34ec190965fe2e5c4cb55ad124af411697ce0c2e2e7dc6e4b1ef2003e18f292d7e94ff5e4b55852abb4ac7f02091e5af6efcbfafd8b707e9582fee0b83d98bfa67ae32311eacc2f91f9483f94d51842cd092a63cde06904b9fd3e31da282c12013145b057aae20c6a78505cc2330e0aee0b3cca2a24a9b26d11dc0553c88fa66f2d28055c9632036609f5b1863075db00fba23799a6e424a479f17be94942f29800d6161e0f5460f248adda65f2e8d57ff47e10575bd9e724ec1a66b4d8ed9b45fbdf301024a79f73cd0c32ba1298ec8a83d04284957e29ee9d7439029572873a3a1837274e61db700a3b3369ecc8a5c6c3e3cad8c605572a4bc9a09671580d51d3572a2a18d107e0f77379e944b50aa243cd86f531200ed051eaf6fce587d0363d18e4575425d2de69d41456567638c623714b44e6b5ac31d773bc3196fcfe3412c9347d489870b3f3381f37e8a51b967c0063e2dc49e04afd79b27ee59e7e43a1be481ec01f4b608da340c20835c0314d115e6077684ac3af6cdbacd9bc67d81af19987ef232d91a8569ffe9b13d2fb6ca54e43ca997a3f14621e4d6d4d06c3956138f53cbd80e99c2a3e60ccb8cfbfdebae121a196d7049bfc4b250e271f9fc94d635b10db658e423d3fa61f5c70da4ba189ee38bcf03c141e861bad217427365df8d2405b024b81342786063600b661febdf3405a5e45dd96e78ee20a3c905971506a55cb262c6a9b9dd1002bd788119cc6ec5445208a65fdb546d3a31774f4957be79aa123559b3ca49c15b39e9e943f073e43f56dde9b537e4c5f74ee5f93bdbfc43507716a04344f08e685fa364ad765f6dc91b306464578472c465869570d97c2c5c20daca0aa8cfd73f707fa2364a02ffb2f6a69528de158b59b0ca98143f514b8ca14fe6f2e6ee5cb33b357a315ee24f76eb9af8f890fdc965bb94cde90b7390ffa2b738853f7f465af1b0feef82f195f41777e27ce04678ddeba00058e118c04ad004f54f7be7e3419162adc93788804c349766a48910836c5cb9d0250fe20203b22fa31c6a5b791882270c96df69eb665ff7c3dfc1d71c8f8cf008d771ccc47a04da6f3b8fbda77b889300e6ac8ac443cf01246d14f76be9c71d26842adeb94f4b8ee9798b7c8dfc02d9a4436191165c48fc0cad53f3a0e9cedd9b7cb67569f1f667719cebc6a14053ab1425d9586c98c31bd34a5cbc160f3d7cd8e75027ec8e471aa7ac02ebdfc37e89c37dd03c9e2d3935f9696a77285442d441208bcf454cd0dd43d66e438cfee61301bcc87dcc964fbeb722c6004e1c968c620d89237bd6722ace8afc1f781b1f2364d42729382f04528ed3bd2dc92e4f2bdcd3617f038aba1042168910d9c4e10081264ee88f44e70b0bc2fa4983b9bf1301b761b68ab3254f2cd0a462d1c08c138435193c9ba9b7b375c4f131205974cb7d20163335c374e9ca67c5de92a97b8aebb6e99bd631fa4e8a33edd0a019658527e72c6d987a9cb325086786ed22f76bc74f230e5a78430cc0c1eb465ea54e763f83c095a6c681011f4f25b45700e534ed774bea7b0fd64430e015d9f755095942293c8eb52efb99c58d277cbec377ce86a546256c3e86fd7a82f07016013abdd31b2c59e6b06292f9b3b32bc2524e2c2841a46ffeac2aca827bcb243acbe4df5edda90bde33acf0020c134478adb00b39e86ce6fc8716e69f161f7ee3eda1b4a43e5043756909ce5d37a3846d499de16216e661220a314f39203c046a8a9f7914b0778a753084de0df2a146fcceff395460a9b12d665e2e47bdce6dc88d554a0c8fa8aa3c3e50f038b534479c120a63bb0021ac275d3b5766baae3ebc8e598be3cccfa9d6b646ff9e061bd112417c134e6f7faca9cd020367ae18fae349ecd790d72125121ca7e6193b2d545ee0cc4b0d1efdbc0c06be44d0d1164233e400fe0c6f4400647fea457fb09dbd458fe81a3ffeb400d274202006ea84835675e0ae52b1840f74a7bd6066f60f7e7c18eaeef144bc32b62fbc7f304da75415912fd998deb70e61f5139c677e427c648e76f90528361594a15f703a6ec83953b61a98e28a00497533a1be8291f1ef3252676522846aee70ae9ef337b7aecbd8a02def11edd63bae02d77525a763b90340ad9135dd2e4410b4ff4bf0d3f2ff63934b5146dd941587af911ca943dd4678e7b0ba2e23a8e0d94080dfd3e5e30d65db3de7471c7f2536d16d7d6defcb88039d9edaa222b55efecdc142b2885faf8ad1548dcaa015fa6fcf1c3ed40c00eabb6f6d610caa03bcced9c02dbb1a6c4dbdc3ac397b2352237f80f088aca6bfb8ebaf7eeca4e60b2a426ece64796d914dc6bb0510015c5c4c7b6f2745387e6171a65de1a7ed75bfde77b7a48e32523c5e23ba9f1a62c1ea52f93720cbbe55f20e64fac61d50d4c9221e4839548c7d4839c17dd7c92241b6eb34904b250d61db86fccb74a14e28bf7c77fc211c41831217f07d004a805ede41aed33188b6eae3712e26dc4620c64dd4d7c8cd69f0f0dbae84e82ffc7edee90c77bda4f15814187b9d139e8549a3c480ac9e862032b8b2b1242aac54e87e772e59d31ede07776a405703cc9ffe2d8da12f6820a6ad99f436129316a38b29ad2a8f73abcf3563df5c6e8a0ab8ee74514360bded53ec9269d97810a969f0b5444ffb1fca08e2ff52085fc83757399cdf7970aad857335ae56c47353b52b9648fd1d0896e5c7a953eb38f32ce438f710906098d728ef3516944cb9325727f1e9ad1fb2fadcdb95fb68b3ee0059c39507df659b77c01acd49825e265e8c28ca4e", &(0x7f00000014c0)="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", 0xfffff252, r1}, 0x15) connect$qrtr(r1, &(0x7f0000000040)={0x2a, 0x2, 0x4001}, 0xc) [ 1626.779065][T23598] device syz_tun left promiscuous mode [ 1626.786013][T23598] bridge769: port 1(syz_tun) entered disabled state 16:43:49 executing program 1: r0 = socket$inet(0x2, 0x2, 0x0) sendto$inet(r0, 0x0, 0xe, 0x0, &(0x7f0000000140)={0x2, 0x4e20}, 0x10) [ 1626.910732][T23598] bridge770: port 1(syz_tun) entered blocking state [ 1626.938848][T23598] bridge770: port 1(syz_tun) entered disabled state [ 1626.991711][T23598] device syz_tun entered promiscuous mode [ 1627.081136][T23603] device syz_tun left promiscuous mode [ 1627.087647][T23603] bridge770: port 1(syz_tun) entered disabled state [ 1627.317153][T23598] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1627.367167][T23593] bridge770: port 1(syz_tun) entered blocking state [ 1627.378634][T23593] bridge770: port 1(syz_tun) entered disabled state [ 1627.400454][T23593] device syz_tun entered promiscuous mode 16:43:50 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x300}, 0x0) 16:43:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x2000000) 16:43:50 executing program 1: perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x80, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=@newlink={0x38, 0x10, 0x705, 0x0, 0x18000, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @sit={{0x8, 0x1, 'sit\x00'}, {0x4}}}, @IFLA_TARGET_NETNSID={0x8, 0x2e, 0x3}]}, 0x38}}, 0x0) 16:43:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x10020, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:50 executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r0, 0x0, 0x321, 0x200007ff, &(0x7f0000deaff0)={0x2, 0x0, @loopback}, 0x10) r1 = fcntl$dupfd(r0, 0x0, r0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 16:43:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0xffff]}}]}}]}, 0x8c}}, 0x0) 16:43:50 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe}}]}}]}, 0x8c}}, 0x0) [ 1627.759714][T23640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:50 executing program 1: r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x0, 0x0) fcntl$setpipe(r0, 0x8, 0x0) 16:43:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3000000) [ 1627.976065][T23644] device syz_tun left promiscuous mode [ 1628.012817][T23644] bridge770: port 1(syz_tun) entered disabled state 16:43:50 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f0000001880)=[{&(0x7f0000000180)=""/30, 0x1e}, {&(0x7f00000001c0)=""/10, 0xa}, {&(0x7f00000013c0)=""/27, 0x1b}, {&(0x7f0000001640)=""/122, 0x7a}, {&(0x7f00000016c0)=""/138, 0x8a}, {&(0x7f0000001780)=""/115, 0x73}, {&(0x7f0000000280)=""/4, 0x4}], 0x7, 0x2) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r1}, 0x15) r2 = socket$unix(0x1, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x0, r2) write$P9_RMKDIR(r3, &(0x7f0000000240)={0x14, 0x49, 0x22, {0x10, 0x0, 0x7}}, 0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000040)={0x0, @rand_addr, @private}, &(0x7f0000000080)=0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140)='l2tp\x00') sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001180)={0x5c, r6, 0x917, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP6_DADDR={0x14, 0x18, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @empty}]}, 0x5c}}, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000001900)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000001480)={&(0x7f0000001800)={0x5c, r6, 0x100, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_IP_DADDR={0x8, 0x19, @dev={0xac, 0x14, 0x14, 0x3e}}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x1}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x80000000}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @remote}, @L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x8}, @L2TP_ATTR_LNS_MODE={0x5, 0x14, 0x2f}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000140)={'tunl0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="ee", @ANYRES32=r4, @ANYBLOB="7800008000000080000000004923002400640000370790780003f700640101004408de000000ffff008206453781ba00"]}) [ 1628.114102][T23644] bridge771: port 1(syz_tun) entered blocking state [ 1628.152895][T23644] bridge771: port 1(syz_tun) entered disabled state 16:43:50 executing program 1: r0 = syz_open_dev$evdev(&(0x7f0000000040)='/dev/input/event#\x00', 0x3f, 0x0) preadv(r0, 0x0, 0x0, 0x0) [ 1628.216953][T23644] device syz_tun entered promiscuous mode 16:43:50 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4000000) [ 1628.293922][T23645] device syz_tun left promiscuous mode [ 1628.303649][T23645] bridge771: port 1(syz_tun) entered disabled state [ 1628.371594][T23658] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 1628.425311][T23664] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 1628.494166][T23667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1628.662103][T23640] bridge771: port 1(syz_tun) entered blocking state [ 1628.678868][T23640] bridge771: port 1(syz_tun) entered disabled state 16:43:51 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x500}, 0x0) 16:43:51 executing program 3: getrandom(&(0x7f0000000140)=""/4142, 0x102e, 0x0) set_tid_address(&(0x7f0000000040)) 16:43:51 executing program 1: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f00000002c0)=""/11, 0x1ae) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)) dup2(r1, r0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, 0x0) 16:43:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r1 = socket$nl_crypto(0x10, 0x3, 0x15) setsockopt$sock_timeval(r1, 0x1, 0x0, &(0x7f0000000040)={0x77359400}, 0x10) preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x2]}}]}}]}, 0x8c}}, 0x0) 16:43:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x5000000) [ 1628.707797][T23640] device syz_tun entered promiscuous mode 16:43:51 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001080)='/dev/autofs\x00', 0x0, 0x0) getrandom(&(0x7f0000000000)=""/4113, 0x1011, 0x0) ioctl$TIOCSERGETLSR(r0, 0x5459, 0x0) getsockopt$inet6_opts(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) syz_open_dev$vcsn(0x0, 0x0, 0x0) [ 1629.022145][T23689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:51 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x3]}}]}}]}, 0x8c}}, 0x0) 16:43:51 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x6000000) 16:43:51 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x0, 0x48042) write$cgroup_devices(r0, 0x0, 0x0) 16:43:51 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r6, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r3, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r6], 0x28}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getnetconf={0x24, 0x52, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r6}, @IGNORE_ROUTES_WITH_LINKDOWN={0x8, 0x6, 0x20}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4000090) 16:43:51 executing program 3: timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000000)) timer_settime(0x0, 0x0, &(0x7f0000000880)={{0x0, 0x1c9c380}, {0x0, 0x989680}}, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) setsockopt$sock_timeval(r0, 0x1, 0x15, &(0x7f0000000180)={0x0, r1/1000+30000}, 0x10) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @remote, 0x3}, 0x1c) timer_create(0x0, &(0x7f0000000000)={0x0, 0x14, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000200)=0x0) timer_settime(r2, 0x0, &(0x7f0000000180)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) r3 = dup(r0) sendmsg$MPTCP_PM_CMD_GET_ADDR(r3, &(0x7f0000000500)={&(0x7f0000000400), 0xc, &(0x7f00000004c0)={0x0}}, 0x0) [ 1629.361880][T23693] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1629.503274][T23711] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1629.561149][T23689] device syz_tun left promiscuous mode [ 1629.574402][T23689] bridge771: port 1(syz_tun) entered disabled state [ 1629.665079][T23689] bridge772: port 1(syz_tun) entered blocking state [ 1629.698873][T23689] bridge772: port 1(syz_tun) entered disabled state [ 1629.707704][T23689] device syz_tun entered promiscuous mode 16:43:52 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x600}, 0x0) 16:43:52 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x7000000) 16:43:52 executing program 1: open(0x0, 0x0, 0x0) openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) getrandom(&(0x7f0000000140)=""/4142, 0x102e, 0x0) ioctl$F2FS_IOC_GARBAGE_COLLECT_RANGE(0xffffffffffffffff, 0x4018f50b, 0x0) 16:43:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x4]}}]}}]}, 0x8c}}, 0x0) 16:43:52 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) getrandom(&(0x7f0000000140)=""/4142, 0x102e, 0x0) ioctl$EVIOCGMTSLOTS(r0, 0x8040450a, 0x0) [ 1629.737883][T23718] bridge6: port 1(syz_tun) entered blocking state [ 1629.747854][T23718] bridge6: port 1(syz_tun) entered disabled state [ 1629.767605][T23718] device syz_tun entered promiscuous mode 16:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r0, 0x0) read$char_raw(r0, 0x0, 0x0) [ 1629.913048][T23722] device syz_tun left promiscuous mode [ 1629.936392][T23722] bridge6: port 1(syz_tun) entered disabled state 16:43:52 executing program 3: syz_open_procfs(0x0, 0x0) accept$inet6(0xffffffffffffffff, 0x0, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) getrandom(&(0x7f0000001240)=""/4079, 0xfef, 0x0) ioctl$TIOCGSOFTCAR(0xffffffffffffffff, 0x5419, 0x0) 16:43:52 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x3f000000) 16:43:52 executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) getpeername$inet(r0, 0x0, &(0x7f0000000040)) [ 1630.204105][T23741] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:52 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x9c102, 0x0) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000080)={0x0, &(0x7f00000012c0)=""/100, &(0x7f00000002c0)="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", &(0x7f00000014c0)="56c980241018e30db5c018f3c8194715b4271c66e4ef9025df06524e7c4bfc9eb6524e8336d403d0bd12524b4f48dadd73def60104d6c21b7bc711f49ed39c44e5d4eee96e1469cf52ca2f75efa224aa806f2ac33a3a3a87d6d20e97aaa0242aa391c9e44186c90a845622695499dba09aad784a88e9e074d0f00add0c6ede7c7833fa22749c1965efe8c201dc567c9c00dabceef770aad429663dfb676d081236f19578b6011fd1c95402168426d61859a7e7345cfcb53bd95bfaa661e5bbe277a89e018430755e2f2f47e3ace64b85621e670f2ce201c9b3845c696433c84070b46b341725b08eed3845c29392579cd71acd5e65454f2ecb56d8b2ce960e2dec8dc0c4aed4fce8e88cc6f88ad6ff23757b363740faf24cf806249216e06dfa8691189827dba2736de6e0e4aec7d74781a19a8530aee3ebbac9e2ffffffffffffff000000000000", 0xfffff252, r0}, 0x15) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) 16:43:52 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x5]}}]}}]}, 0x8c}}, 0x0) [ 1630.351026][T23745] device syz_tun left promiscuous mode [ 1630.361135][T23745] bridge772: port 1(syz_tun) entered disabled state 16:43:53 executing program 3: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000001040)='/dev/autofs\x00', 0x0, 0x0) getrandom(&(0x7f0000000000)=""/4113, 0x1011, 0x0) ioctl$TIOCGLCKTRMIOS(r0, 0x5456, 0x0) [ 1630.494063][T23745] bridge773: port 1(syz_tun) entered blocking state [ 1630.522267][T23745] bridge773: port 1(syz_tun) entered disabled state [ 1630.577676][T23745] device syz_tun entered promiscuous mode [ 1630.656246][T23749] device syz_tun left promiscuous mode [ 1630.670254][T23749] bridge773: port 1(syz_tun) entered disabled state [ 1630.865533][T23745] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. [ 1630.908922][T23741] bridge773: port 1(syz_tun) entered blocking state [ 1630.917447][T23741] bridge773: port 1(syz_tun) entered disabled state [ 1630.941917][T23741] device syz_tun entered promiscuous mode 16:43:53 executing program 5: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = dup(r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'syz_tun\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000dc0)={0x0}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000010000104000000000000008000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0xfffffd67, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="2800000010000104000000000004000000000000", @ANYRES32=r4, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r7], 0x28}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=@newlink={0x20, 0x11, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x20}, 0x1, 0x700}, 0x0) 16:43:53 executing program 1: openat$full(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(0xffffffffffffffff) getrandom(&(0x7f0000000000)=""/4113, 0x1011, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f0000001140)=@known='com.apple.system.Security\x00', 0x0, 0x0, 0x0) 16:43:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x48000000) 16:43:53 executing program 3: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000040)=""/11, 0xb) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000100)) r1 = dup(r0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) 16:43:53 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x6]}}]}}]}, 0x8c}}, 0x0) 16:43:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') r0 = syz_open_dev$dri(&(0x7f0000000100)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r0, 0xc01864c6, &(0x7f0000000040)={&(0x7f0000000000)=[0x2], 0x1}) 16:43:53 executing program 4: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/l2cap\x00') ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) write$UHID_INPUT2(r0, &(0x7f0000001640)={0xc, {0xeb, "3148213b353ab3accfe36221e1585b2b633bb42645bd8ba533580b41fc93fe10057fde9bdb2894cdfa3807f49b25706b2c7d3aad81ae4af231cc4583ecd3a0abbc261f4fb7d6da659fb1e1c0b1ead5250f6d9c789dbbeebbe527d09c73ec9214e288310fc2c321f315f5db66ea918168422838565c2b39e0b6ed6f24f5803f0b7e61a9c4e80e71da58dc46604e0d3e81183bd33c2e6f999cb3be3e643849ac9674b8861a179368a0dca5131194a65ad85733aff0d80b67618e45756e88bd65233c263e2fb7b78e809b4228ca948e0959150b4c36dd5a82eb17f5ae6380e807d56dc45aea321c4cc09c114c"}}, 0xf1) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x3}, 0x10) r1 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r1, &(0x7f00000017c0), 0x1d2, 0x0) prctl$PR_GET_CHILD_SUBREAPER(0x25) 16:43:53 executing program 1: r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x40, 0x0) dup2(r0, r1) write$char_raw(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x1400) [ 1631.244653][T23793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.5'. 16:43:53 executing program 2: perf_event_open(&(0x7f0000001340)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000001400)=@ipx, 0x80, 0x0}}], 0x1, 0x80, 0x0) ptrace$setopts(0x4206, 0x0, 0x0, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x1cfd82, 0x0) bpf$MAP_DELETE_BATCH(0x1b, 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='net/psched\x00') preadv(r0, &(0x7f00000017c0), 0x1d2, 0x4c000000) 16:43:53 executing program 0: r0 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb, 0x1, 'taprio\x00'}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0xfe, [], 0x0, [], [0x0, 0x0, 0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) 16:43:53 executing program 3: r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x0, 0x0) getrandom(&(0x7f0000001280)=""/4095, 0xfbe, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) [ 1631.415808][T23798] device syz_tun left promiscuous mode [ 1631.424141][T23798] bridge773: port 1(syz_tun) entered disabled state 16:43:54 executing program 3: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10000000140, 0x5543, 0x6e, 0x40, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x1, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_disconnect(r0) syz_usb_disconnect(0xffffffffffffffff) r1 = syz_usb_connect(0x0, 0x24, &(0x7f0000000380)=ANY=[], 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f00000000c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x0, "eb76c117"}]}}, 0x0}, 0x0) syz_usb_control_io(0xffffffffffffffff, &(0x7f0000001780)={0x2c, &(0x7f0000001540)={0x40, 0x0, 0x2, {0x2}}, 0x0, 0x0, &(0x7f0000001700)={0x20, 0x29, 0xf, {0xf, 0x29, 0x36, 0x8, 0x0, 0x0, "0260af34", "68e481b1"}}, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000640)={0x2c, 0x0, &(0x7f0000000580)={0x0, 0x3, 0x4, @lang_id={0x4}}, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0003120000001203"], 0x0, 0x0, 0x0}, 0x0) [ 1631.590433][T23798] bridge774: port 1(syz_tun) entered blocking state [ 1631.632288][T23814] general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#1] PREEMPT SMP KASAN [ 1631.632312][T23814] KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] [ 1631.632334][T23814] CPU: 1 PID: 23814 Comm: syz-executor.1 Not tainted 5.8.0-rc6-syzkaller #0 [ 1631.632345][T23814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1631.632374][T23814] RIP: 0010:do_con_write+0x979/0x7400 [ 1631.632401][T23814] Code: a4 24 ca 00 00 00 44 01 e5 e8 83 f4 85 fd 48 8b 44 24 50 80 38 00 0f 85 28 27 00 00 4d 8b a6 f0 03 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 14 18 4c 89 e0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 13 [ 1631.632409][T23814] RSP: 0018:ffffc900079bfa40 EFLAGS: 00010203 [ 1631.632430][T23814] RAX: 0000000020000001 RBX: dffffc0000000000 RCX: ffffc9000424b000 [ 1631.632443][T23814] RDX: 0000000000040000 RSI: ffffffff83edc80d RDI: 0000000000000003 [ 1631.632460][T23814] RBP: 00000000000007fe R08: ffffffff83ecc490 R09: ffff8880506dcbc8 [ 1631.632484][T23814] R10: 0000000000000000 R11: 0000000000000000 R12: 000000010000000e [ 1631.632501][T23814] R13: 0000000000000000 R14: ffff8880a6840000 R15: ffff8880a68403dc [ 1631.632520][T23814] FS: 00007f2f7e0d6700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1631.632534][T23814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.632545][T23814] CR2: 00000000004dc9b0 CR3: 00000000931bd000 CR4: 00000000001426e0 [ 1631.632711][T23814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1631.632725][T23814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1631.632732][T23814] Call Trace: [ 1631.632763][T23814] ? match_held_lock+0x160/0x170 [ 1631.632786][T23814] ? reset_palette+0x180/0x180 [ 1631.632811][T23814] ? mark_lock+0xbc/0x1710 [ 1631.632832][T23814] ? mark_held_locks+0x9f/0xe0 [ 1631.632857][T23814] ? _raw_spin_unlock_irqrestore+0x62/0xe0 [ 1631.632871][T23814] con_write+0x22/0xb0 [ 1631.632886][T23814] n_tty_write+0x3ce/0xf80 [ 1631.632910][T23814] ? n_tty_receive_char_lnext+0x700/0x700 [ 1631.632930][T23814] ? __init_waitqueue_head+0x110/0x110 [ 1631.632945][T23814] ? __might_fault+0x190/0x1d0 [ 1631.632964][T23814] tty_write+0x4d9/0x870 [ 1631.632980][T23814] ? n_tty_receive_char_lnext+0x700/0x700 [ 1631.633000][T23814] ? tty_read+0x290/0x290 [ 1631.633015][T23814] vfs_write+0x2b0/0x6b0 [ 1631.633081][T23814] ksys_write+0x12d/0x250 [ 1631.633120][T23814] ? __ia32_sys_read+0xb0/0xb0 [ 1631.633142][T23814] ? lock_is_held_type+0xb0/0xe0 [ 1631.633167][T23814] ? do_syscall_64+0x1c/0xe0 [ 1631.633183][T23814] ? lockdep_hardirqs_on_prepare+0x3a2/0x590 [ 1631.633200][T23814] do_syscall_64+0x60/0xe0 [ 1631.633222][T23814] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 1631.633237][T23814] RIP: 0033:0x45c1f9 [ 1631.633242][T23814] Code: Bad RIP value. [ 1631.633250][T23814] RSP: 002b:00007f2f7e0d5c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1631.633266][T23814] RAX: ffffffffffffffda RBX: 0000000000037340 RCX: 000000000045c1f9 [ 1631.633276][T23814] RDX: 0000000000001400 RSI: 0000000020000200 RDI: 0000000000000004 [ 1631.633288][T23814] RBP: 000000000078bf40 R08: 0000000000000000 R09: 0000000000000000 [ 1631.633297][T23814] R10: 0000000000000000 R11: 0000000000000246 R12: 000000000078bf0c [ 1631.633306][T23814] R13: 0000000000c9fb6f R14: 00007f2f7e0d69c0 R15: 000000000078bf0c [ 1631.633317][T23814] Modules linked in: [ 1631.634600][T23814] ---[ end trace 00995a779a15e32c ]--- [ 1631.634631][T23814] RIP: 0010:do_con_write+0x979/0x7400 [ 1631.634668][T23814] Code: a4 24 ca 00 00 00 44 01 e5 e8 83 f4 85 fd 48 8b 44 24 50 80 38 00 0f 85 28 27 00 00 4d 8b a6 f0 03 00 00 4c 89 e0 48 c1 e8 03 <0f> b6 14 18 4c 89 e0 83 e0 07 83 c0 01 38 d0 7c 08 84 d2 0f 85 13 [ 1631.634681][T23814] RSP: 0018:ffffc900079bfa40 EFLAGS: 00010203 [ 1631.634705][T23814] RAX: 0000000020000001 RBX: dffffc0000000000 RCX: ffffc9000424b000 [ 1631.634726][T23814] RDX: 0000000000040000 RSI: ffffffff83edc80d RDI: 0000000000000003 [ 1631.634738][T23814] RBP: 00000000000007fe R08: ffffffff83ecc490 R09: ffff8880506dcbc8 [ 1631.634750][T23814] R10: 0000000000000000 R11: 0000000000000000 R12: 000000010000000e [ 1631.634767][T23814] R13: 0000000000000000 R14: ffff8880a6840000 R15: ffff8880a68403dc [ 1631.634782][T23814] FS: 00007f2f7e0d6700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000 [ 1631.634795][T23814] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1631.634806][T23814] CR2: 00000000004dc9b0 CR3: 00000000931bd000 CR4: 00000000001426e0 [ 1631.634830][T23814] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1631.634841][T23814] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1631.634852][T23814] Kernel panic - not syncing: Fatal exception [ 1631.637176][T23814] Kernel Offset: disabled [ 1632.159759][T23814] Rebooting in 86400 seconds..